last executing test programs: 2m46.829312018s ago: executing program 2 (id=3076): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2m46.671039393s ago: executing program 0 (id=3077): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x50}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 2m46.587802395s ago: executing program 2 (id=3078): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) utime(&(0x7f0000000000)='.\x00', 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000504000/0x2000)=nil, 0x400000, 0x0, 0x18100}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) creat(&(0x7f0000000100)='./file0\x00', 0x59) 2m46.568782535s ago: executing program 1 (id=3079): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x6, 0x2, "af32"}}) 2m46.463479279s ago: executing program 0 (id=3080): io_uring_setup(0xcda, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) write(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 2m44.787079672s ago: executing program 2 (id=3081): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x52, 0x1, 0x100, 0x25dfdbff, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m44.738768824s ago: executing program 1 (id=3082): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x21, 0x40000856, r1, 0x0) 2m42.127169335s ago: executing program 0 (id=3084): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@nogrpid}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 2m41.598896272s ago: executing program 1 (id=3085): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/4, 0x4}, 0x5}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x1001003, &(0x7f0000000280)=ANY=[], 0x1, 0x376, &(0x7f0000000a00)="$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") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m41.122328367s ago: executing program 3 (id=3086): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2m40.769772598s ago: executing program 3 (id=3087): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00'], 0x64}}, 0x4800) 2m40.294991953s ago: executing program 1 (id=3088): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x50}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 2m40.287538633s ago: executing program 3 (id=3089): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x1d, 0x0, 0x0, {0x2, 0xff}, 0xff}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x83}, 0x4110) 2m40.06322273s ago: executing program 2 (id=3090): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0xb, 0x5}, 0x8) 2m40.036402881s ago: executing program 1 (id=3091): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) 2m39.950504244s ago: executing program 0 (id=3092): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) fsopen(0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m39.841190598s ago: executing program 2 (id=3093): syz_emit_ethernet(0x56, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af25, &(0x7f00000001c0)={@host}) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x7fffffffffffffff, 0x0, 0x240b, 0x3e, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x2, @remote}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in6=@loopback, 0x4e21, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x80}, {0x400000000, 0x0, 0x4, 0x0, 0x1, 0x20000, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x5, 0x0, 0xfffffffd}}, 0xe8) sendmmsg(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'vlan0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x1, 0x6}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) 2m39.803552079s ago: executing program 3 (id=3094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x40}}, 0x0) 2m39.665355913s ago: executing program 1 (id=3095): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d0001010000090904000d020301010509210500770122b10f09058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x10, 0x420140) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) close_range(r1, 0xffffffffffffffff, 0x0) 2m39.359101863s ago: executing program 3 (id=3096): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) 2m38.49761782s ago: executing program 2 (id=3097): syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x3a, 0x32, 0x7f, 0x20, 0x421, 0x4f0, 0x8c5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x7, 0x20, 0x9, "", [{{0x9, 0x4, 0xfe, 0x0, 0x1, 0x2, 0x2, 0xff, 0x5, [], [{{0x9, 0x5, 0xe, 0x1, 0x400, 0x6d, 0x8, 0x5}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 2m38.416623583s ago: executing program 0 (id=3098): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}) 2m38.251096128s ago: executing program 3 (id=3099): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x50}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 2m38.110633862s ago: executing program 0 (id=3100): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x804) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2000c12, &(0x7f0000000880)={[{@check_relaxed}, {@overriderock}, {@map_off}, {@cruft}, {@overriderock}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@hide}, {@unhide}, {}, {@hide}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}]}, 0x4, 0xa0c, &(0x7f0000001e00)="$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") 2m17.872691699s ago: executing program 32 (id=3100): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x804) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2000c12, &(0x7f0000000880)={[{@check_relaxed}, {@overriderock}, {@map_off}, {@cruft}, {@overriderock}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@hide}, {@unhide}, {}, {@hide}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}]}, 0x4, 0xa0c, &(0x7f0000001e00)="$eJzs3ctvXGdfB/Dv8SVx/b5K8rahlKhtJilJ3dY4ttMmRF2UxJ4kLr4g25EasWhK46AohkIDUlshNUWIFRVIIBawq1jBplI3dIO6gx2sWCCh/gsVq7Dyq3NmHI/tGY+dOHaafj7RXM45v/M8v3N9MuMz5wk/LiuH1w2trFSPhxy+9s97kDFPsEuT33/19Zfl44t7OZDevFX8azKQpJb0JXkh6Z+YnJ+b6VLQneRGku+SIsnBNF635UaKv87P14a/S/GPZb0dHdhuyXSzwk/afu9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJComJkdHx4oDmZq99l6tIaltMjE5P1dkZWXzlNV5Gr6tev0uvu1ab1KUjwwMrHb1/cLRtcnPJ6mdzIuNoRerDskzkM9+9vyRt5/r61mdv1M2j+Tg9ou9++lndz5YXl76uHPIyueNZdid3J4wV+qzUwtzUzMXr9RrUwtztQvnzo2euXp5oXZ5arq+cH1hsT5Tm5ivX1ycm68NTbxWG7tw4WytPnJ97trslcmR6frqyPO/MT46eq727sjv1C/OL8zNnnl3ZGHi6tT09NTslSqmnFzGnC93xN+eWqwt1i/O1Gq3bi8vnd2QU+/GlV0GjXVbkjJovFvQ+Oj4+NjY+PjYF83esx+MOPfWhbfOj472jW6QTRGPaaflSbB26nim82be5TM4PLyeRvufTGcqs7mW91Jr+28ik5nPXGY6TG9abf9PnalvWW9r+99s5ftaJh8rn07m5ebgQIf2v0Mue/fvbj7NZ7mTD7Kc5Szl433PaG//XUk9s5nKQuYylZlcrMbUmmNquZBzOZfRvJ+rOZ6FFLmcqUynnoVcz0IWU6/2qInMp56LWcxc5lPLUCbyWmoZy4VcyNnUUs9Irmcu1zKbK5nMxaqUW7ldrfezW+T4IGhsO0HjWwRtbMzLfX1n7X/9af2fINu2+ydxeEgrzfb/QPfQoYm9SAgAAADYdb/2Hzl09Nl//9+kyEvV9/KXp6br7+x3WgAAAMAuqi7Xe7F86S/fvZSi/Pw/ut9pAQAAALuoqH5jVyQZzPHGu9VfQvkSAAAAAJ4S1d//X05xfG2Ez/8AAADwlOl+j/2uEcXw6u1/azcbrzebEY2hYvDy1HR9ZGJu+u2xnK7uMlD90mBTab1J0V/9/OD1nGhEnRhsvA6ulVjWOVBGjY28PZbXc7K5IEOvlC+vDLWJHG9EvtqIfLU1sjfrIs+WkQDwtDu5RXu83fb/9Qw3IoaPVU1+37E2bfColhUAnhQP+tj5/2aXZm3a/2bEy53a/ze3+PxfRjybW8cblxSM5MN8lOXczHCaVxwcb1fqam8EjcsQhrt8GzDYvGThv873ZHjT9wEDD5a1NXYp4xlu+41AS7nFag5nG3G9j2cbAMBeO7llO7y99n+4y+f/QZcUAsATZeVgUvVg/6Ar++5vPt9J8NLHd/d7GQGA9bTSAAAAAAAAAAAAAAAAAAAAAAAAAAAAsPu2dQP//zydLC8vJTu67f8jvhnYSYZbv+nJHuW87296k+xX7e/suCOJpXIbP0Kl//LMI83+VL0pD5VdLxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnXZH0thvfkxxMMprkzN5n9fjc2+8Edkvt4WYr7ud+Psmh3U4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCnrnn//540Xn/WGJW+nuRUkhtJfne/c9xN9/c7gX3zB9Vzy/3/e5L+rBTpa2z2FP0Tk/NzM+XmLw6W07//6usvy0f3sjf3qlAWUNawrnOJZg0tY/rXz/WLaq7ByaW7d/7koz+qTV6qdsxLi5enJ2euzP/WWuDzxTeNLhBau0FYzffPTv3b37SMPtCs/JtySdvbWO/lqt7JzfX+aru5O9S7DbeXl8bLmhbr7y3+6R/e/qRl0rM5kbwylAytr+n3y0eHmk5sXJ/rFT8Uf1kcyt/nRrX9y7VRrBTlJjpcLf8zt24vL418+NHyzWZOf/7m5+tyOpLjSW4mA9vP6Xh1Pmmr2ut6+staR6ug8ulol/K21FLiWIf1+otqlxnc0TLUOi9Dpct6b2Z0tm1Gf/vHz+X0jrf06S41tlX8UPxPcTX/nb9o6f+jp9z+p9L26GxTRBXZsqe0Tlt3ePU0IqslH2+d8P7GMjselTwGf5Xfy28+2P49Lef/5rbam/NRS43tj4tk58fFPx3e1KKsqVqkoxtapObZp9M8zTyPNqI65PkreSPpO7ajM8obXc4oj+v4/4diKP+Xe/r/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnnxF0ttufE9yKsmRJIfL4VqysjHm3kPU1zNYPEyau+Zhcv7xKTouaHG/Wv+H9jghAAAAAAAAAB6TS5Pff/X1l+Wj+ntwb369pzmllvQlOVL8Xf/E5PzcTJeC+pMbq3/SH9hZDjfKp5+vDX9XDr3QZab9vXwAAH7UfhkAAP//ccBpYg==") 2m17.645090686s ago: executing program 33 (id=3095): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d0001010000090904000d020301010509210500770122b10f09058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x10, 0x420140) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) close_range(r1, 0xffffffffffffffff, 0x0) 2m17.449986982s ago: executing program 34 (id=3097): syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x3a, 0x32, 0x7f, 0x20, 0x421, 0x4f0, 0x8c5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x7, 0x20, 0x9, "", [{{0x9, 0x4, 0xfe, 0x0, 0x1, 0x2, 0x2, 0xff, 0x5, [], [{{0x9, 0x5, 0xe, 0x1, 0x400, 0x6d, 0x8, 0x5}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 2m17.247312619s ago: executing program 35 (id=3099): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x50}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 10.210702769s ago: executing program 4 (id=3301): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) 10.100579841s ago: executing program 7 (id=3302): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000180)={0x8, 0x0, 0x2, 0x0, 0x3, 0x77b}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r1, &(0x7f0000000000)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r8, 0x0, &(0x7f00000c7000/0x1000)=nil, 0x1000, 0x10}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffb, 0x1}}, './file0\x00'}) ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, 0x0) 7.159043834s ago: executing program 7 (id=3304): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214e, 0xc000, 0x0, 0xc6}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)}], 0x1) io_uring_enter(r0, 0x2219, 0x3c24, 0x32, 0x0, 0x0) 6.969494151s ago: executing program 4 (id=3305): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000640)=""/284, 0xffffffffffffffda, 0x0, 0x1, 0x2}}, 0x48) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) 6.738889258s ago: executing program 7 (id=3307): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000280)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@test_dummy_encryption_v1}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 6.579864493s ago: executing program 6 (id=3309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x30, r2, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) 6.479008435s ago: executing program 4 (id=3311): socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x4000) io_setup(0x8, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000040)={[], [{@smackfshat={'smackfshat', 0x3d, 'aF\"\xf7\xef\xfe\xb6M\x9c\xa1}\xb2\xf3dots'}}]}, 0x0, 0x293, &(0x7f0000000640)="$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") 6.330884441s ago: executing program 6 (id=3312): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)=0xffffffff) 6.250460833s ago: executing program 6 (id=3313): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000180)={0x8, 0x0, 0x2, 0x0, 0x3, 0x77b}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r1, &(0x7f0000000000)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r8, 0x0, &(0x7f00000c7000/0x1000)=nil, 0x1000, 0x10}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffb, 0x1}}, './file0\x00'}) ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, 0x0) 6.179039436s ago: executing program 5 (id=3314): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) 6.093510128s ago: executing program 7 (id=3315): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100), 0x0, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.574732426s ago: executing program 5 (id=3316): unshare(0x22020600) r0 = socket$alg(0x26, 0x5, 0x0) fcntl$lock(r0, 0x24, 0x0) 4.191020718s ago: executing program 5 (id=3317): io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x40, 0x1, 0x2b4}) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x6, @empty, 0xe977}}, 0x1, 0x3}, &(0x7f0000000080)=0x90) 4.038191772s ago: executing program 4 (id=3318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) 3.16759955s ago: executing program 6 (id=3319): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478", 0x70, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.796145222s ago: executing program 7 (id=3320): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',grou', @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8", 0x58}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.720030034s ago: executing program 5 (id=3321): getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000140003050000800015dbdf2502075bff", @ANYRES32=r3, @ANYBLOB="080002007f00000108000400ac1e00011400"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2.5274293s ago: executing program 4 (id=3322): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) semop(0x0, 0x0, 0x0) futex(0x0, 0xb, 0x1, 0x0, 0x0, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x8, 0x0, 0x0) 2.331121497s ago: executing program 5 (id=3323): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x40045702, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00W', 0x5ea}], 0x1) timer_create(0x3, 0x0, &(0x7f0000001080)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) timer_gettime(r5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') 1.407639625s ago: executing program 6 (id=3324): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) 1.227256161s ago: executing program 4 (id=3325): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3010010, &(0x7f0000000100)={[{@nodelalloc}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0) listxattr(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) 351.017408ms ago: executing program 5 (id=3326): socket$inet6(0xa, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x4000) io_setup(0x8, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000040)={[], [{@smackfshat={'smackfshat', 0x3d, 'aF\"\xf7\xef\xfe\xb6M\x9c\xa1}\xb2\xf3dots'}}]}, 0x0, 0x293, &(0x7f0000000640)="$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") 266.646961ms ago: executing program 7 (id=3327): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xa}}, 0x20) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x3200842, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) creat(&(0x7f0000000040)='./file1\x00', 0x32) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x2, 0x5, 0x5}, &(0x7f0000000180)=0x10) 0s ago: executing program 6 (id=3328): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100), 0x0, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): ci_event_packet+0x4cb/0x1270 [ 1053.935070][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1053.941369][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1053.947067][ T5085] ? skb_pull_data+0xfb/0x200 [ 1053.951805][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1053.957424][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1053.963549][ T5085] hci_event_packet+0x7ba/0x1270 [ 1053.968564][ T5085] ? bis_list+0x290/0x290 [ 1053.972953][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1053.978227][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1053.983487][ T5085] hci_rx_work+0x43a/0xd60 [ 1053.988010][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1053.993836][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1053.999476][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1054.005028][ T5085] ? assign_work+0x3d2/0x5d0 [ 1054.009688][ T5085] worker_thread+0xa55/0xfc0 [ 1054.014372][ T5085] kthread+0x2fa/0x390 [ 1054.018522][ T5085] ? pr_cont_work+0x560/0x560 [ 1054.023347][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1054.027990][ T5085] ret_from_fork+0x48/0x80 [ 1054.032562][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1054.037560][ T5085] ret_from_fork_asm+0x11/0x20 [ 1054.042436][ T5085] [ 1054.054319][ T5085] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1054.068604][ T5085] Bluetooth: hci4: failed to register connection device [ 1054.844487][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.851062][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.703944][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 1057.570561][T16129] tmpfs: Bad value for 'huge' [ 1057.898199][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 1061.468982][T15993] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1061.478871][T15993] CPU: 1 PID: 15993 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1061.486604][T15993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1061.496824][T15993] Workqueue: hci4 hci_rx_work [ 1061.501570][T15993] Call Trace: [ 1061.504884][T15993] [ 1061.507827][T15993] dump_stack_lvl+0x18c/0x250 [ 1061.512533][T15993] ? show_regs_print_info+0x20/0x20 [ 1061.517774][T15993] ? load_image+0x420/0x420 [ 1061.522318][T15993] sysfs_create_dir_ns+0x26e/0x2a0 [ 1061.527551][T15993] ? sysfs_warn_dup+0xa0/0xa0 [ 1061.532250][T15993] ? do_raw_spin_unlock+0x121/0x230 [ 1061.537488][T15993] kobject_add_internal+0x61c/0xcc0 [ 1061.542725][T15993] kobject_add+0x164/0x240 [ 1061.547308][T15993] ? kobject_init+0x1e0/0x1e0 [ 1061.552035][T15993] ? _raw_spin_unlock+0x28/0x40 [ 1061.556930][T15993] ? get_device_parent+0x366/0x390 [ 1061.562073][T15993] device_add+0x408/0xc50 [ 1061.566436][T15993] hci_conn_add_sysfs+0xd5/0x1e0 [ 1061.571422][T15993] le_conn_complete_evt+0xf5d/0x1540 [ 1061.576732][T15993] ? hci_event_packet+0x4cb/0x1270 [ 1061.581875][T15993] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1061.588147][T15993] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1061.593857][T15993] ? skb_pull_data+0xfb/0x200 [ 1061.598583][T15993] hci_le_conn_complete_evt+0x187/0x440 [ 1061.604189][T15993] ? hci_remote_host_features_evt+0x150/0x150 [ 1061.610308][T15993] hci_event_packet+0x7ba/0x1270 [ 1061.615278][T15993] ? bis_list+0x290/0x290 [ 1061.619643][T15993] ? lockdep_hardirqs_on+0x98/0x150 [ 1061.624872][T15993] ? hci_send_to_monitor+0xd7/0x4f0 [ 1061.630133][T15993] hci_rx_work+0x43a/0xd60 [ 1061.634600][T15993] ? process_scheduled_works+0x96f/0x15d0 [ 1061.640370][T15993] process_scheduled_works+0xa5d/0x15d0 [ 1061.646000][T15993] ? worker_attach_to_pool+0x380/0x380 [ 1061.651510][T15993] ? assign_work+0x3d2/0x5d0 [ 1061.656146][T15993] worker_thread+0xa55/0xfc0 [ 1061.660775][T15993] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1061.666701][T15993] ? _raw_spin_unlock+0x40/0x40 [ 1061.671595][T15993] kthread+0x2fa/0x390 [ 1061.675694][T15993] ? pr_cont_work+0x560/0x560 [ 1061.680423][T15993] ? kthread_blkcg+0xd0/0xd0 [ 1061.685062][T15993] ret_from_fork+0x48/0x80 [ 1061.689499][T15993] ? kthread_blkcg+0xd0/0xd0 [ 1061.694102][T15993] ret_from_fork_asm+0x11/0x20 [ 1061.698901][T15993] [ 1061.705349][T15993] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1061.720615][T15993] Bluetooth: hci4: failed to register connection device [ 1062.825361][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 1063.150096][T16167] tmpfs: Bad value for 'huge' [ 1063.795632][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 1064.446256][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1064.458666][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1064.466303][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1064.476398][ T5085] Workqueue: hci3 hci_rx_work [ 1064.481099][ T5085] Call Trace: [ 1064.484391][ T5085] [ 1064.487466][ T5085] dump_stack_lvl+0x18c/0x250 [ 1064.492174][ T5085] ? show_regs_print_info+0x20/0x20 [ 1064.497400][ T5085] ? load_image+0x420/0x420 [ 1064.501924][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1064.507050][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1064.511851][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1064.517106][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1064.522366][ T5085] kobject_add+0x164/0x240 [ 1064.526827][ T5085] ? __rwlock_init+0x150/0x150 [ 1064.531659][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1064.536376][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1064.541266][ T5085] ? get_device_parent+0x366/0x390 [ 1064.546423][ T5085] device_add+0x408/0xc50 [ 1064.550796][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1064.555781][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1064.561100][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1064.566268][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1064.572723][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1064.578488][ T5085] ? skb_pull_data+0xfb/0x200 [ 1064.583215][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1064.588892][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1064.594996][ T5085] hci_event_packet+0x7ba/0x1270 [ 1064.599974][ T5085] ? bis_list+0x290/0x290 [ 1064.604342][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.609585][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1064.614822][ T5085] hci_rx_work+0x43a/0xd60 [ 1064.619293][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1064.625123][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1064.630770][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1064.636742][ T5085] ? assign_work+0x3d2/0x5d0 [ 1064.641399][ T5085] worker_thread+0xa55/0xfc0 [ 1064.646076][ T5085] kthread+0x2fa/0x390 [ 1064.650187][ T5085] ? pr_cont_work+0x560/0x560 [ 1064.655010][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1064.659678][ T5085] ret_from_fork+0x48/0x80 [ 1064.664320][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1064.668969][ T5085] ret_from_fork_asm+0x11/0x20 [ 1064.673797][ T5085] [ 1064.688120][ T5085] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1064.703887][ T5085] Bluetooth: hci3: failed to register connection device [ 1065.293925][ T47] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1065.488185][ T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.516120][ T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1065.539873][ T47] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1065.565564][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1065.573655][ T47] usb 1-1: SerialNumber: syz [ 1065.828179][ T47] usb 1-1: cannot find UAC_HEADER [ 1065.929024][ T47] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1065.948646][ T47] usb 1-1: USB disconnect, device number 24 [ 1065.986995][T11787] udevd[11787]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1066.744622][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 1067.563696][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1067.573526][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1067.581134][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1067.591259][ T5085] Workqueue: hci4 hci_rx_work [ 1067.596012][ T5085] Call Trace: [ 1067.599346][ T5085] [ 1067.602393][ T5085] dump_stack_lvl+0x18c/0x250 [ 1067.607185][ T5085] ? show_regs_print_info+0x20/0x20 [ 1067.612653][ T5085] ? load_image+0x420/0x420 [ 1067.617240][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1067.622418][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1067.627160][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1067.632437][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1067.638155][ T5085] kobject_add+0x164/0x240 [ 1067.642662][ T5085] ? __rwlock_init+0x150/0x150 [ 1067.647681][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1067.652516][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1067.657481][ T5085] ? get_device_parent+0x366/0x390 [ 1067.662804][ T5085] device_add+0x408/0xc50 [ 1067.667209][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1067.672421][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1067.677784][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1067.682976][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1067.689301][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1067.695026][ T5085] ? skb_pull_data+0xfb/0x200 [ 1067.699833][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1067.705433][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1067.711559][ T5085] hci_event_packet+0x7ba/0x1270 [ 1067.716570][ T5085] ? bis_list+0x290/0x290 [ 1067.720925][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1067.726283][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1067.731522][ T5085] hci_rx_work+0x43a/0xd60 [ 1067.735982][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1067.741742][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1067.747416][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1067.752909][ T5085] ? assign_work+0x3d2/0x5d0 [ 1067.757562][ T5085] worker_thread+0xa55/0xfc0 [ 1067.762194][ T5085] kthread+0x2fa/0x390 [ 1067.766296][ T5085] ? pr_cont_work+0x560/0x560 [ 1067.771040][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1067.775668][ T5085] ret_from_fork+0x48/0x80 [ 1067.780108][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1067.784887][ T5085] ret_from_fork_asm+0x11/0x20 [ 1067.789734][ T5085] [ 1067.794102][ T5831] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1067.798213][ T5085] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1067.815992][ T5085] Bluetooth: hci4: failed to register connection device [ 1069.659363][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 1069.685788][ T5831] usb 3-1: config 0 has no interfaces? [ 1069.700619][ T5831] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1069.713488][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.738344][ T5831] usb 3-1: config 0 descriptor?? [ 1069.864240][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 1070.029215][ T47] usb 3-1: USB disconnect, device number 31 [ 1070.838606][ T5829] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1071.038918][ T5829] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.065352][ T5829] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1071.100259][ T5829] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1071.112951][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1071.143923][ T5829] usb 4-1: SerialNumber: syz [ 1071.389274][ T5829] usb 4-1: cannot find UAC_HEADER [ 1071.476423][ T5829] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1071.498011][ T5829] usb 4-1: USB disconnect, device number 21 [ 1071.560180][T11787] udevd[11787]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.121513][T16256] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2848'. [ 1074.984592][ T1190] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1075.216359][ T1190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.254015][ T1190] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1075.295365][ T1190] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1075.323876][ T1190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1075.340016][ T1190] usb 2-1: SerialNumber: syz [ 1075.600364][ T1190] usb 2-1: 0:2 : does not exist [ 1075.660056][ T1190] usb 2-1: USB disconnect, device number 32 [ 1075.725401][T11787] udevd[11787]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1082.930424][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1082.940060][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1082.947665][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1082.957782][ T5085] Workqueue: hci4 hci_rx_work [ 1082.962575][ T5085] Call Trace: [ 1082.965899][ T5085] [ 1082.968876][ T5085] dump_stack_lvl+0x18c/0x250 [ 1082.973615][ T5085] ? show_regs_print_info+0x20/0x20 [ 1082.978879][ T5085] ? load_image+0x420/0x420 [ 1082.983456][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1082.988633][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1082.993367][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1082.998632][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1083.003899][ T5085] kobject_add+0x164/0x240 [ 1083.008453][ T5085] ? __rwlock_init+0x150/0x150 [ 1083.013256][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1083.017975][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1083.022870][ T5085] ? get_device_parent+0x366/0x390 [ 1083.028018][ T5085] device_add+0x408/0xc50 [ 1083.032388][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1083.037366][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1083.042686][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1083.047849][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1083.054137][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1083.059811][ T5085] ? skb_pull_data+0xfb/0x200 [ 1083.064531][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1083.070122][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1083.076234][ T5085] hci_event_packet+0x7ba/0x1270 [ 1083.081225][ T5085] ? bis_list+0x290/0x290 [ 1083.085684][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1083.090936][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1083.096183][ T5085] hci_rx_work+0x43a/0xd60 [ 1083.100829][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1083.106588][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1083.112195][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1083.117691][ T5085] ? assign_work+0x3d2/0x5d0 [ 1083.122318][ T5085] worker_thread+0xa55/0xfc0 [ 1083.126968][ T5085] kthread+0x2fa/0x390 [ 1083.131064][ T5085] ? pr_cont_work+0x560/0x560 [ 1083.135772][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1083.140405][ T5085] ret_from_fork+0x48/0x80 [ 1083.144857][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1083.149476][ T5085] ret_from_fork_asm+0x11/0x20 [ 1083.154292][ T5085] [ 1083.169629][ T5085] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1083.183866][ T5085] Bluetooth: hci4: failed to register connection device [ 1085.224478][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 1087.892971][T16389] overlayfs: missing 'lowerdir' [ 1096.714538][T16505] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2921'. [ 1098.115450][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1098.125122][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1098.132715][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1098.142881][ T5085] Workqueue: hci0 hci_rx_work [ 1098.147628][ T5085] Call Trace: [ 1098.150946][ T5085] [ 1098.153915][ T5085] dump_stack_lvl+0x18c/0x250 [ 1098.158667][ T5085] ? show_regs_print_info+0x20/0x20 [ 1098.163913][ T5085] ? load_image+0x420/0x420 [ 1098.168573][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1098.173739][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1098.178512][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1098.183797][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1098.189064][ T5085] kobject_add+0x164/0x240 [ 1098.193543][ T5085] ? __rwlock_init+0x150/0x150 [ 1098.198356][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1098.203079][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1098.208018][ T5085] ? get_device_parent+0x366/0x390 [ 1098.213297][ T5085] device_add+0x408/0xc50 [ 1098.217716][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1098.222708][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1098.228030][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1098.233194][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1098.239486][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1098.245170][ T5085] ? skb_pull_data+0xfb/0x200 [ 1098.249891][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1098.255478][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1098.261587][ T5085] hci_event_packet+0x7ba/0x1270 [ 1098.266577][ T5085] ? bis_list+0x290/0x290 [ 1098.271035][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1098.276277][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1098.281514][ T5085] hci_rx_work+0x43a/0xd60 [ 1098.285986][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1098.291740][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1098.297357][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1098.302852][ T5085] ? assign_work+0x3d2/0x5d0 [ 1098.307487][ T5085] worker_thread+0xa55/0xfc0 [ 1098.312130][ T5085] kthread+0x2fa/0x390 [ 1098.316243][ T5085] ? pr_cont_work+0x560/0x560 [ 1098.320953][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1098.325663][ T5085] ret_from_fork+0x48/0x80 [ 1098.330116][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1098.334735][ T5085] ret_from_fork_asm+0x11/0x20 [ 1098.339553][ T5085] [ 1098.350113][ T5085] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1098.366479][ T5085] Bluetooth: hci0: failed to register connection device [ 1100.439413][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 1101.098969][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1101.108796][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1101.116415][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1101.126970][ T5085] Workqueue: hci3 hci_rx_work [ 1101.131697][ T5085] Call Trace: [ 1101.135008][ T5085] [ 1101.138014][ T5085] dump_stack_lvl+0x18c/0x250 [ 1101.142772][ T5085] ? show_regs_print_info+0x20/0x20 [ 1101.148044][ T5085] ? load_image+0x420/0x420 [ 1101.152590][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1101.157742][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1101.162560][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1101.167823][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1101.173075][ T5085] kobject_add+0x164/0x240 [ 1101.177541][ T5085] ? __rwlock_init+0x150/0x150 [ 1101.182351][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1101.187073][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1101.192003][ T5085] ? get_device_parent+0x366/0x390 [ 1101.197183][ T5085] device_add+0x408/0xc50 [ 1101.201662][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1101.206659][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1101.211984][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1101.217152][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1101.223443][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1101.229134][ T5085] ? skb_pull_data+0xfb/0x200 [ 1101.233862][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1101.239457][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1101.245654][ T5085] hci_event_packet+0x7ba/0x1270 [ 1101.250648][ T5085] ? bis_list+0x290/0x290 [ 1101.255055][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1101.260299][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1101.265621][ T5085] hci_rx_work+0x43a/0xd60 [ 1101.270169][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1101.275927][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1101.281534][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1101.287032][ T5085] ? assign_work+0x3d2/0x5d0 [ 1101.291683][ T5085] worker_thread+0xa55/0xfc0 [ 1101.296355][ T5085] kthread+0x2fa/0x390 [ 1101.300665][ T5085] ? pr_cont_work+0x560/0x560 [ 1101.305461][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1101.310084][ T5085] ret_from_fork+0x48/0x80 [ 1101.314536][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1101.319602][ T5085] ret_from_fork_asm+0x11/0x20 [ 1101.324420][ T5085] [ 1101.339066][ T5085] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1101.354464][ T5085] Bluetooth: hci3: failed to register connection device [ 1103.414953][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 1104.568915][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1104.578649][ T5085] CPU: 0 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1104.586361][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1104.596481][ T5085] Workqueue: hci0 hci_rx_work [ 1104.601219][ T5085] Call Trace: [ 1104.604539][ T5085] [ 1104.607517][ T5085] dump_stack_lvl+0x18c/0x250 [ 1104.612246][ T5085] ? show_regs_print_info+0x20/0x20 [ 1104.617509][ T5085] ? load_image+0x420/0x420 [ 1104.622085][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1104.627248][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1104.632314][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1104.637564][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1104.642829][ T5085] kobject_add+0x164/0x240 [ 1104.647389][ T5085] ? __rwlock_init+0x150/0x150 [ 1104.652283][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1104.657007][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1104.661938][ T5085] ? get_device_parent+0x366/0x390 [ 1104.667096][ T5085] device_add+0x408/0xc50 [ 1104.671469][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1104.676543][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1104.681874][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1104.687136][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1104.693424][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1104.699099][ T5085] ? skb_pull_data+0xfb/0x200 [ 1104.703828][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1104.709440][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1104.715575][ T5085] hci_event_packet+0x7ba/0x1270 [ 1104.720574][ T5085] ? bis_list+0x290/0x290 [ 1104.724948][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1104.730191][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1104.735433][ T5085] hci_rx_work+0x43a/0xd60 [ 1104.739925][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1104.745683][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1104.751287][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1104.756788][ T5085] ? assign_work+0x3d2/0x5d0 [ 1104.761420][ T5085] worker_thread+0xa55/0xfc0 [ 1104.766066][ T5085] kthread+0x2fa/0x390 [ 1104.770180][ T5085] ? pr_cont_work+0x560/0x560 [ 1104.774891][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1104.779603][ T5085] ret_from_fork+0x48/0x80 [ 1104.784058][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1104.788783][ T5085] ret_from_fork_asm+0x11/0x20 [ 1104.793603][ T5085] [ 1104.798749][ T5085] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1104.819267][ T5085] Bluetooth: hci0: failed to register connection device [ 1106.913351][T15993] Bluetooth: hci0: command 0x0406 tx timeout [ 1108.153401][T15993] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1108.162913][T15993] CPU: 0 PID: 15993 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1108.170605][T15993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1108.180722][T15993] Workqueue: hci3 hci_rx_work [ 1108.185471][T15993] Call Trace: [ 1108.188797][T15993] [ 1108.191783][T15993] dump_stack_lvl+0x18c/0x250 [ 1108.196525][T15993] ? show_regs_print_info+0x20/0x20 [ 1108.202048][T15993] ? load_image+0x420/0x420 [ 1108.206623][T15993] sysfs_create_dir_ns+0x26e/0x2a0 [ 1108.211791][T15993] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1108.218156][T15993] ? sysfs_warn_dup+0xa0/0xa0 [ 1108.223170][T15993] kobject_add_internal+0x61c/0xcc0 [ 1108.228456][T15993] kobject_add+0x164/0x240 [ 1108.232938][T15993] ? __rwlock_init+0x150/0x150 [ 1108.237769][T15993] ? kobject_init+0x1e0/0x1e0 [ 1108.242506][T15993] ? _raw_spin_unlock+0x28/0x40 [ 1108.247434][T15993] ? get_device_parent+0x366/0x390 [ 1108.252621][T15993] device_add+0x408/0xc50 [ 1108.257041][T15993] hci_conn_add_sysfs+0xd5/0x1e0 [ 1108.262078][T15993] le_conn_complete_evt+0xf5d/0x1540 [ 1108.267432][T15993] ? hci_event_packet+0x4cb/0x1270 [ 1108.272627][T15993] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1108.278943][T15993] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1108.284648][T15993] ? skb_pull_data+0xfb/0x200 [ 1108.289402][T15993] hci_le_conn_complete_evt+0x187/0x440 [ 1108.295029][T15993] ? hci_remote_host_features_evt+0x150/0x150 [ 1108.301171][T15993] hci_event_packet+0x7ba/0x1270 [ 1108.306194][T15993] ? bis_list+0x290/0x290 [ 1108.310601][T15993] ? lockdep_hardirqs_on+0x98/0x150 [ 1108.315885][T15993] ? hci_send_to_monitor+0xd7/0x4f0 [ 1108.321172][T15993] hci_rx_work+0x43a/0xd60 [ 1108.325711][T15993] ? process_scheduled_works+0x96f/0x15d0 [ 1108.331597][T15993] process_scheduled_works+0xa5d/0x15d0 [ 1108.337269][T15993] ? worker_attach_to_pool+0x380/0x380 [ 1108.342851][T15993] ? assign_work+0x3d2/0x5d0 [ 1108.347520][T15993] worker_thread+0xa55/0xfc0 [ 1108.352200][T15993] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1108.358179][T15993] ? _raw_spin_unlock+0x40/0x40 [ 1108.363225][T15993] kthread+0x2fa/0x390 [ 1108.367365][T15993] ? pr_cont_work+0x560/0x560 [ 1108.372119][T15993] ? kthread_blkcg+0xd0/0xd0 [ 1108.376772][T15993] ret_from_fork+0x48/0x80 [ 1108.381250][T15993] ? kthread_blkcg+0xd0/0xd0 [ 1108.385907][T15993] ret_from_fork_asm+0x11/0x20 [ 1108.390752][T15993] [ 1108.399734][T15993] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1108.414161][T15993] Bluetooth: hci3: failed to register connection device [ 1108.879871][T16648] overlayfs: missing 'lowerdir' [ 1111.545274][T15993] Bluetooth: hci3: command 0x0406 tx timeout [ 1112.251578][T15993] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1112.261395][T15993] CPU: 1 PID: 15993 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1112.269117][T15993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1112.279251][T15993] Workqueue: hci0 hci_rx_work [ 1112.284021][T15993] Call Trace: [ 1112.287355][T15993] [ 1112.290337][T15993] dump_stack_lvl+0x18c/0x250 [ 1112.295073][T15993] ? show_regs_print_info+0x20/0x20 [ 1112.300321][T15993] ? load_image+0x420/0x420 [ 1112.304928][T15993] sysfs_create_dir_ns+0x26e/0x2a0 [ 1112.310117][T15993] ? sysfs_warn_dup+0xa0/0xa0 [ 1112.314872][T15993] ? do_raw_spin_unlock+0x121/0x230 [ 1112.320149][T15993] kobject_add_internal+0x61c/0xcc0 [ 1112.325446][T15993] kobject_add+0x164/0x240 [ 1112.329960][T15993] ? __rwlock_init+0x150/0x150 [ 1112.334902][T15993] ? kobject_init+0x1e0/0x1e0 [ 1112.339679][T15993] ? _raw_spin_unlock+0x28/0x40 [ 1112.344617][T15993] ? get_device_parent+0x366/0x390 [ 1112.349798][T15993] device_add+0x408/0xc50 [ 1112.354192][T15993] hci_conn_add_sysfs+0xd5/0x1e0 [ 1112.359203][T15993] le_conn_complete_evt+0xf5d/0x1540 [ 1112.364556][T15993] ? hci_event_packet+0x4cb/0x1270 [ 1112.369756][T15993] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1112.376096][T15993] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1112.381813][T15993] ? skb_pull_data+0xfb/0x200 [ 1112.386600][T15993] hci_le_conn_complete_evt+0x187/0x440 [ 1112.392238][T15993] ? hci_remote_host_features_evt+0x150/0x150 [ 1112.398391][T15993] hci_event_packet+0x7ba/0x1270 [ 1112.403437][T15993] ? bis_list+0x290/0x290 [ 1112.407862][T15993] ? lockdep_hardirqs_on+0x98/0x150 [ 1112.413197][T15993] ? hci_send_to_monitor+0xd7/0x4f0 [ 1112.418506][T15993] hci_rx_work+0x43a/0xd60 [ 1112.423017][T15993] ? process_scheduled_works+0x96f/0x15d0 [ 1112.428813][T15993] process_scheduled_works+0xa5d/0x15d0 [ 1112.434460][T15993] ? worker_attach_to_pool+0x380/0x380 [ 1112.440020][T15993] ? assign_work+0x3d2/0x5d0 [ 1112.444694][T15993] worker_thread+0xa55/0xfc0 [ 1112.449364][T15993] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1112.455429][T15993] ? _raw_spin_unlock+0x40/0x40 [ 1112.460400][T15993] kthread+0x2fa/0x390 [ 1112.464535][T15993] ? pr_cont_work+0x560/0x560 [ 1112.469276][T15993] ? kthread_blkcg+0xd0/0xd0 [ 1112.473922][T15993] ret_from_fork+0x48/0x80 [ 1112.478397][T15993] ? kthread_blkcg+0xd0/0xd0 [ 1112.483049][T15993] ret_from_fork_asm+0x11/0x20 [ 1112.487915][T15993] [ 1112.494884][T15993] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1112.509848][T15993] Bluetooth: hci0: failed to register connection device [ 1114.584234][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 1114.798571][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1114.811330][ T5085] CPU: 0 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1114.818987][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1114.829130][ T5085] Workqueue: hci0 hci_rx_work [ 1114.833919][ T5085] Call Trace: [ 1114.837260][ T5085] [ 1114.840251][ T5085] dump_stack_lvl+0x18c/0x250 [ 1114.845017][ T5085] ? show_regs_print_info+0x20/0x20 [ 1114.850297][ T5085] ? load_image+0x420/0x420 [ 1114.854897][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1114.860094][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1114.864857][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1114.870163][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1114.875458][ T5085] kobject_add+0x164/0x240 [ 1114.879958][ T5085] ? __rwlock_init+0x150/0x150 [ 1114.884808][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1114.889644][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1114.894557][ T5085] ? get_device_parent+0x366/0x390 [ 1114.899730][ T5085] device_add+0x408/0xc50 [ 1114.904120][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1114.909123][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1114.914470][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1114.919660][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1114.925960][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1114.931643][ T5085] ? skb_pull_data+0xfb/0x200 [ 1114.936370][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1114.942002][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1114.948148][ T5085] hci_event_packet+0x7ba/0x1270 [ 1114.953239][ T5085] ? bis_list+0x290/0x290 [ 1114.957627][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1114.962877][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1114.968129][ T5085] hci_rx_work+0x43a/0xd60 [ 1114.972592][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1114.978349][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1114.984058][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1114.989577][ T5085] ? assign_work+0x3d2/0x5d0 [ 1114.994217][ T5085] worker_thread+0xa55/0xfc0 [ 1114.998952][ T5085] kthread+0x2fa/0x390 [ 1115.003060][ T5085] ? pr_cont_work+0x560/0x560 [ 1115.007778][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1115.012402][ T5085] ret_from_fork+0x48/0x80 [ 1115.016852][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1115.021470][ T5085] ret_from_fork_asm+0x11/0x20 [ 1115.026315][ T5085] [ 1115.033820][ T5085] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1115.048293][ T5085] Bluetooth: hci0: failed to register connection device [ 1115.708201][T15993] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1115.717969][T15993] CPU: 1 PID: 15993 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1115.725678][T15993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1115.735887][T15993] Workqueue: hci0 hci_rx_work [ 1115.740652][T15993] Call Trace: [ 1115.743973][T15993] [ 1115.746953][T15993] dump_stack_lvl+0x18c/0x250 [ 1115.751865][T15993] ? show_regs_print_info+0x20/0x20 [ 1115.757125][T15993] ? load_image+0x420/0x420 [ 1115.761699][T15993] sysfs_create_dir_ns+0x26e/0x2a0 [ 1115.766876][T15993] ? sysfs_warn_dup+0xa0/0xa0 [ 1115.771631][T15993] ? do_raw_spin_unlock+0x121/0x230 [ 1115.776904][T15993] kobject_add_internal+0x61c/0xcc0 [ 1115.782160][T15993] kobject_add+0x164/0x240 [ 1115.786629][T15993] ? __rwlock_init+0x150/0x150 [ 1115.791436][T15993] ? kobject_init+0x1e0/0x1e0 [ 1115.796155][T15993] ? _raw_spin_unlock+0x28/0x40 [ 1115.801053][T15993] ? get_device_parent+0x366/0x390 [ 1115.806227][T15993] device_add+0x408/0xc50 [ 1115.810611][T15993] hci_conn_add_sysfs+0xd5/0x1e0 [ 1115.815774][T15993] le_conn_complete_evt+0xf5d/0x1540 [ 1115.821096][T15993] ? hci_event_packet+0x4cb/0x1270 [ 1115.826276][T15993] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1115.832588][T15993] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1115.838369][T15993] ? skb_pull_data+0xfb/0x200 [ 1115.843121][T15993] hci_le_conn_complete_evt+0x187/0x440 [ 1115.848728][T15993] ? hci_remote_host_features_evt+0x150/0x150 [ 1115.854876][T15993] hci_event_packet+0x7ba/0x1270 [ 1115.859877][T15993] ? bis_list+0x290/0x290 [ 1115.864252][T15993] ? lockdep_hardirqs_on+0x98/0x150 [ 1115.869495][T15993] ? hci_send_to_monitor+0xd7/0x4f0 [ 1115.874740][T15993] hci_rx_work+0x43a/0xd60 [ 1115.879211][T15993] ? process_scheduled_works+0x96f/0x15d0 [ 1115.885080][T15993] process_scheduled_works+0xa5d/0x15d0 [ 1115.890774][T15993] ? worker_attach_to_pool+0x380/0x380 [ 1115.896276][T15993] ? assign_work+0x3d2/0x5d0 [ 1115.900907][T15993] worker_thread+0xa55/0xfc0 [ 1115.905540][T15993] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1115.911481][T15993] ? _raw_spin_unlock+0x40/0x40 [ 1115.916384][T15993] kthread+0x2fa/0x390 [ 1115.920488][T15993] ? pr_cont_work+0x560/0x560 [ 1115.925204][T15993] ? kthread_blkcg+0xd0/0xd0 [ 1115.929825][T15993] ret_from_fork+0x48/0x80 [ 1115.934278][T15993] ? kthread_blkcg+0xd0/0xd0 [ 1115.938907][T15993] ret_from_fork_asm+0x11/0x20 [ 1115.943717][T15993] [ 1115.963636][T15993] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1115.979955][T15993] Bluetooth: hci0: failed to register connection device [ 1116.274492][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.285989][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.539790][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1116.549871][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1116.557478][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.567581][ T5085] Workqueue: hci1 hci_rx_work [ 1116.572319][ T5085] Call Trace: [ 1116.575643][ T5085] [ 1116.578620][ T5085] dump_stack_lvl+0x18c/0x250 [ 1116.583350][ T5085] ? show_regs_print_info+0x20/0x20 [ 1116.588604][ T5085] ? load_image+0x420/0x420 [ 1116.593162][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1116.598321][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1116.603033][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1116.608280][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1116.613526][ T5085] kobject_add+0x164/0x240 [ 1116.617985][ T5085] ? __rwlock_init+0x150/0x150 [ 1116.622797][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1116.627509][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1116.632405][ T5085] ? get_device_parent+0x366/0x390 [ 1116.637556][ T5085] device_add+0x408/0xc50 [ 1116.641923][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1116.646904][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1116.652224][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1116.657389][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1116.663682][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1116.669356][ T5085] ? skb_pull_data+0xfb/0x200 [ 1116.674080][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1116.679667][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1116.685783][ T5085] hci_event_packet+0x7ba/0x1270 [ 1116.690785][ T5085] ? bis_list+0x290/0x290 [ 1116.695162][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1116.700415][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1116.705655][ T5085] hci_rx_work+0x43a/0xd60 [ 1116.710118][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1116.715873][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1116.721477][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1116.726972][ T5085] ? assign_work+0x3d2/0x5d0 [ 1116.731604][ T5085] worker_thread+0xa55/0xfc0 [ 1116.736336][ T5085] kthread+0x2fa/0x390 [ 1116.740433][ T5085] ? pr_cont_work+0x560/0x560 [ 1116.745148][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1116.749764][ T5085] ret_from_fork+0x48/0x80 [ 1116.754318][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1116.758941][ T5085] ret_from_fork_asm+0x11/0x20 [ 1116.763847][ T5085] [ 1116.776619][ T5085] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1116.803081][ T5085] Bluetooth: hci1: failed to register connection device [ 1117.065057][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 1118.172435][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1118.182710][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1118.190316][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1118.200442][ T5085] Workqueue: hci3 hci_rx_work [ 1118.205238][ T5085] Call Trace: [ 1118.208590][ T5085] [ 1118.211590][ T5085] dump_stack_lvl+0x18c/0x250 [ 1118.216422][ T5085] ? show_regs_print_info+0x20/0x20 [ 1118.221669][ T5085] ? load_image+0x420/0x420 [ 1118.226331][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1118.231505][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1118.236238][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1118.241507][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1118.246785][ T5085] kobject_add+0x164/0x240 [ 1118.251281][ T5085] ? __rwlock_init+0x150/0x150 [ 1118.256141][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1118.260888][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1118.265821][ T5085] ? get_device_parent+0x366/0x390 [ 1118.270988][ T5085] device_add+0x408/0xc50 [ 1118.275388][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1118.280396][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1118.285738][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1118.290916][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1118.297383][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1118.303062][ T5085] ? skb_pull_data+0xfb/0x200 [ 1118.307789][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1118.313371][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1118.319516][ T5085] hci_event_packet+0x7ba/0x1270 [ 1118.324518][ T5085] ? bis_list+0x290/0x290 [ 1118.328903][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1118.334147][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1118.339395][ T5085] hci_rx_work+0x43a/0xd60 [ 1118.343857][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1118.349615][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1118.355303][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1118.360797][ T5085] ? assign_work+0x3d2/0x5d0 [ 1118.365425][ T5085] worker_thread+0xa55/0xfc0 [ 1118.370068][ T5085] kthread+0x2fa/0x390 [ 1118.374178][ T5085] ? pr_cont_work+0x560/0x560 [ 1118.378896][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1118.383511][ T5085] ret_from_fork+0x48/0x80 [ 1118.387961][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1118.392583][ T5085] ret_from_fork_asm+0x11/0x20 [ 1118.397397][ T5085] [ 1118.407013][ T5085] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1118.423847][ T5085] Bluetooth: hci3: failed to register connection device [ 1118.825008][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 1119.145182][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 1120.954898][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 1122.194791][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1122.205013][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1122.212623][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1122.222723][ T5085] Workqueue: hci4 hci_rx_work [ 1122.227466][ T5085] Call Trace: [ 1122.230773][ T5085] [ 1122.233737][ T5085] dump_stack_lvl+0x18c/0x250 [ 1122.238465][ T5085] ? show_regs_print_info+0x20/0x20 [ 1122.243702][ T5085] ? load_image+0x420/0x420 [ 1122.248253][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1122.253401][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1122.258108][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1122.263345][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1122.268598][ T5085] kobject_add+0x164/0x240 [ 1122.273060][ T5085] ? __rwlock_init+0x150/0x150 [ 1122.277863][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1122.282576][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1122.287463][ T5085] ? get_device_parent+0x366/0x390 [ 1122.292612][ T5085] device_add+0x408/0xc50 [ 1122.296992][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1122.301979][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1122.307301][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1122.312455][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1122.318740][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1122.324443][ T5085] ? skb_pull_data+0xfb/0x200 [ 1122.329201][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1122.334799][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1122.340911][ T5085] hci_event_packet+0x7ba/0x1270 [ 1122.345895][ T5085] ? bis_list+0x290/0x290 [ 1122.350276][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1122.355553][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1122.360966][ T5085] hci_rx_work+0x43a/0xd60 [ 1122.365452][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1122.371215][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1122.376847][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1122.382367][ T5085] ? assign_work+0x3d2/0x5d0 [ 1122.387021][ T5085] worker_thread+0xa55/0xfc0 [ 1122.391774][ T5085] kthread+0x2fa/0x390 [ 1122.395879][ T5085] ? pr_cont_work+0x560/0x560 [ 1122.400592][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1122.405214][ T5085] ret_from_fork+0x48/0x80 [ 1122.409663][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1122.414290][ T5085] ret_from_fork_asm+0x11/0x20 [ 1122.419107][ T5085] [ 1122.425073][ T5085] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1122.439682][ T5085] Bluetooth: hci4: failed to register connection device [ 1123.284344][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1123.294092][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1123.301794][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1123.311997][ T5085] Workqueue: hci4 hci_rx_work [ 1123.316754][ T5085] Call Trace: [ 1123.320084][ T5085] [ 1123.323059][ T5085] dump_stack_lvl+0x18c/0x250 [ 1123.327902][ T5085] ? show_regs_print_info+0x20/0x20 [ 1123.333169][ T5085] ? load_image+0x420/0x420 [ 1123.337752][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1123.342965][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1123.347713][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1123.352980][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1123.358282][ T5085] kobject_add+0x164/0x240 [ 1123.362771][ T5085] ? __rwlock_init+0x150/0x150 [ 1123.367611][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1123.372365][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1123.377288][ T5085] ? get_device_parent+0x366/0x390 [ 1123.382468][ T5085] device_add+0x408/0xc50 [ 1123.386868][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1123.391868][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1123.397201][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1123.402388][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1123.408684][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1123.414364][ T5085] ? skb_pull_data+0xfb/0x200 [ 1123.419084][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1123.424678][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1123.430785][ T5085] hci_event_packet+0x7ba/0x1270 [ 1123.435770][ T5085] ? bis_list+0x290/0x290 [ 1123.440134][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1123.445379][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1123.450617][ T5085] hci_rx_work+0x43a/0xd60 [ 1123.455077][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1123.460840][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1123.466459][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1123.471963][ T5085] ? assign_work+0x3d2/0x5d0 [ 1123.476591][ T5085] worker_thread+0xa55/0xfc0 [ 1123.481232][ T5085] kthread+0x2fa/0x390 [ 1123.485325][ T5085] ? pr_cont_work+0x560/0x560 [ 1123.490038][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1123.494715][ T5085] ret_from_fork+0x48/0x80 [ 1123.499267][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1123.503987][ T5085] ret_from_fork_asm+0x11/0x20 [ 1123.508820][ T5085] [ 1123.517765][ T5085] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1123.531784][ T5085] Bluetooth: hci4: failed to register connection device [ 1124.503916][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 1124.858208][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1124.867870][ T5085] CPU: 1 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1124.875480][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1124.885633][ T5085] Workqueue: hci0 hci_rx_work [ 1124.890387][ T5085] Call Trace: [ 1124.893726][ T5085] [ 1124.896704][ T5085] dump_stack_lvl+0x18c/0x250 [ 1124.901442][ T5085] ? show_regs_print_info+0x20/0x20 [ 1124.906699][ T5085] ? load_image+0x420/0x420 [ 1124.911260][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1124.916429][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1124.921160][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1124.926415][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1124.931691][ T5085] kobject_add+0x164/0x240 [ 1124.936152][ T5085] ? __rwlock_init+0x150/0x150 [ 1124.940962][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1124.945765][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1124.950656][ T5085] ? get_device_parent+0x366/0x390 [ 1124.955894][ T5085] device_add+0x408/0xc50 [ 1124.960438][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1124.965415][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1124.970730][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1124.975897][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1124.982185][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1124.987861][ T5085] ? skb_pull_data+0xfb/0x200 [ 1124.992612][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1124.998202][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1125.004311][ T5085] hci_event_packet+0x7ba/0x1270 [ 1125.009316][ T5085] ? bis_list+0x290/0x290 [ 1125.013785][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1125.019115][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1125.024362][ T5085] hci_rx_work+0x43a/0xd60 [ 1125.028831][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1125.034586][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1125.040201][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1125.045961][ T5085] ? assign_work+0x3d2/0x5d0 [ 1125.050595][ T5085] worker_thread+0xa55/0xfc0 [ 1125.055366][ T5085] kthread+0x2fa/0x390 [ 1125.059479][ T5085] ? pr_cont_work+0x560/0x560 [ 1125.064194][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1125.068814][ T5085] ret_from_fork+0x48/0x80 [ 1125.073262][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1125.077882][ T5085] ret_from_fork_asm+0x11/0x20 [ 1125.082718][ T5085] [ 1125.089365][ T5085] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1125.103523][ T5085] Bluetooth: hci0: failed to register connection device [ 1126.584194][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 1127.143881][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 1128.235096][ T5590] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1128.440339][ T5590] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.470026][ T5590] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1128.495734][ T5590] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1128.518600][ T5590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1128.538450][ T5590] usb 1-1: SerialNumber: syz [ 1128.787709][ T5590] usb 1-1: 0:2 : does not exist [ 1128.825581][ T5085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1128.836271][ T5085] CPU: 0 PID: 5085 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1128.843890][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1128.854003][ T5085] Workqueue: hci0 hci_rx_work [ 1128.858763][ T5085] Call Trace: [ 1128.862102][ T5085] [ 1128.865090][ T5085] dump_stack_lvl+0x18c/0x250 [ 1128.869854][ T5085] ? show_regs_print_info+0x20/0x20 [ 1128.875116][ T5085] ? load_image+0x420/0x420 [ 1128.879684][ T5085] sysfs_create_dir_ns+0x26e/0x2a0 [ 1128.884839][ T5085] ? sysfs_warn_dup+0xa0/0xa0 [ 1128.889558][ T5085] ? do_raw_spin_unlock+0x121/0x230 [ 1128.894796][ T5085] kobject_add_internal+0x61c/0xcc0 [ 1128.900053][ T5085] kobject_add+0x164/0x240 [ 1128.904508][ T5085] ? __rwlock_init+0x150/0x150 [ 1128.909312][ T5085] ? kobject_init+0x1e0/0x1e0 [ 1128.914026][ T5085] ? _raw_spin_unlock+0x28/0x40 [ 1128.918939][ T5085] ? get_device_parent+0x366/0x390 [ 1128.924091][ T5085] device_add+0x408/0xc50 [ 1128.928465][ T5085] hci_conn_add_sysfs+0xd5/0x1e0 [ 1128.933450][ T5085] le_conn_complete_evt+0xf5d/0x1540 [ 1128.938770][ T5085] ? hci_event_packet+0x4cb/0x1270 [ 1128.943928][ T5085] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1128.950237][ T5085] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1128.955909][ T5085] ? skb_pull_data+0xfb/0x200 [ 1128.960624][ T5085] hci_le_conn_complete_evt+0x187/0x440 [ 1128.966244][ T5085] ? hci_remote_host_features_evt+0x150/0x150 [ 1128.972367][ T5085] hci_event_packet+0x7ba/0x1270 [ 1128.977370][ T5085] ? bis_list+0x290/0x290 [ 1128.981780][ T5085] ? lockdep_hardirqs_on+0x98/0x150 [ 1128.987025][ T5085] ? hci_send_to_monitor+0xd7/0x4f0 [ 1128.992299][ T5085] hci_rx_work+0x43a/0xd60 [ 1128.996774][ T5085] ? process_scheduled_works+0x96f/0x15d0 [ 1129.002549][ T5085] process_scheduled_works+0xa5d/0x15d0 [ 1129.008157][ T5085] ? worker_attach_to_pool+0x380/0x380 [ 1129.013650][ T5085] ? assign_work+0x3d2/0x5d0 [ 1129.018273][ T5085] worker_thread+0xa55/0xfc0 [ 1129.022921][ T5085] kthread+0x2fa/0x390 [ 1129.027018][ T5085] ? pr_cont_work+0x560/0x560 [ 1129.031739][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1129.036359][ T5085] ret_from_fork+0x48/0x80 [ 1129.040803][ T5085] ? kthread_blkcg+0xd0/0xd0 [ 1129.045427][ T5085] ret_from_fork_asm+0x11/0x20 [ 1129.050244][ T5085] [ 1129.058146][ T5085] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1129.073182][ T5085] Bluetooth: hci0: failed to register connection device [ 1129.107066][ T5590] usb 1-1: USB disconnect, device number 25 [ 1129.214245][T11787] udevd[11787]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1131.144278][T15993] Bluetooth: hci0: command 0x0406 tx timeout [ 1135.500698][T16914] loop0: detected capacity change from 0 to 32768 [ 1135.717757][T16914] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1135.799825][T16940] loop1: detected capacity change from 0 to 64 [ 1135.908002][T16941] (null): rxe_set_mtu: Set mtu to 1024 [ 1136.995337][T16941] infiniband syz2: set down [ 1137.000441][T16941] infiniband syz2: added ipvlan0 [ 1137.338308][T16941] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1137.344575][T16941] infiniband syz2: Couldn't open port 1 [ 1137.411209][T16941] RDS/IB: syz2: added [ 1137.416165][T16941] smc: adding ib device syz2 with port count 1 [ 1137.422716][T16941] smc: ib device syz2 port 1 has pnetid [ 1138.379335][T16914] XFS (loop0): Ending clean mount [ 1138.547854][T14790] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1138.740319][T16941] syz.2.3037 (16941) used greatest stack depth: 19656 bytes left [ 1139.208613][T16951] loop3: detected capacity change from 0 to 2048 [ 1139.230359][T16957] dvmrp8: entered allmulticast mode [ 1139.338032][T16951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1139.350996][T16963] capability: warning: `syz.2.3053' uses deprecated v2 capabilities in a way that may be insecure [ 1139.554559][T16967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3054'. [ 1139.706000][T16967] Device name cannot be null; rc = [-22] [ 1140.712937][ T27] audit: type=1800 audit(1781421856.413:2): pid=16951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3049" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1140.843976][ T27] audit: type=1800 audit(1781421856.443:3): pid=16968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3049" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1141.206974][T16977] loop1: detected capacity change from 0 to 1024 [ 1141.241706][T16977] ======================================================= [ 1141.241706][T16977] WARNING: The mand mount option has been deprecated and [ 1141.241706][T16977] and is ignored by this kernel. Remove the mand [ 1141.241706][T16977] option from the mount to silence this warning. [ 1141.241706][T16977] ======================================================= [ 1141.331934][T16977] hfsplus: failed to load root directory [ 1141.546844][T14264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.622519][T16985] syz.1.3060 uses obsolete (PF_INET,SOCK_PACKET) [ 1141.646195][T16983] syz_tun: entered allmulticast mode [ 1141.754700][T16983] dvmrp8: entered allmulticast mode [ 1141.773225][T16987] loop3: detected capacity change from 0 to 1024 [ 1141.796715][T16982] syz_tun: left allmulticast mode [ 1141.963017][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.003189][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.055347][T16988] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.079236][T16988] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.141710][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.174105][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.205828][T16988] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.213226][T16988] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.245282][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.252971][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.306555][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.328878][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.361381][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.503712][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.526871][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1142.540210][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.074445][T16988] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.106045][T16988] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.154287][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.179755][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.188239][T15993] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1144.252161][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.270439][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.294030][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.301720][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.313729][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.321158][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.344006][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.351425][T16987] hfsplus: request for non-existent node 33423360 in B*Tree [ 1144.553271][T17004] loop0: detected capacity change from 0 to 4096 [ 1144.586354][T17008] loop2: detected capacity change from 0 to 512 [ 1144.623714][T17008] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1144.674865][T17008] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.3069: corrupted in-inode xattr: invalid ea_ino [ 1144.736136][T17008] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3069: couldn't read orphan inode 15 (err -117) [ 1144.785006][T17009] loop1: detected capacity change from 0 to 4096 [ 1144.792978][T17008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.830416][T17009] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1144.891890][T17008] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #13: comm syz.2.3069: corrupted inode contents [ 1144.939472][T17008] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #13: comm syz.2.3069: mark_inode_dirty error [ 1145.013615][T17008] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3069: invalid indirect mapped block 234881024 (level 0) [ 1145.049268][T17008] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #13: comm syz.2.3069: corrupted inode contents [ 1145.075339][T17008] EXT4-fs error (device loop2): ext4_truncate:4301: inode #13: comm syz.2.3069: mark_inode_dirty error [ 1145.090090][T17008] EXT4-fs error (device loop2): ext4_evict_inode:265: comm syz.2.3069: couldn't truncate inode 13 (err -117) [ 1145.107187][T17009] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 1145.370125][T14537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.202275][T17028] comedi comedi0: comedi_parport: I/O port conflict (0x10000,3) [ 1146.324350][T17030] process 'syz.3.3074' launched './file1' with NULL argv: empty string added [ 1147.218828][T17039] virtio-fs: tag not found [ 1150.985456][T15993] Bluetooth: hci3: command 0x0406 tx timeout [ 1151.785015][T17060] loop1: detected capacity change from 0 to 128 [ 1151.879296][T11787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1152.591626][T17066] loop0: detected capacity change from 0 to 1024 [ 1152.657911][T17066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1152.738285][T17066] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.872351][T17066] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.3084: lblock 0 mapped to illegal pblock 0 (length 6) [ 1152.921639][T17066] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 1152.959797][T17066] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1152.959797][T17066] [ 1153.181238][T15601] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:45: lblock 8 mapped to illegal pblock 8 (length 8) [ 1153.242171][T15601] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1153.291663][T15601] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1153.291663][T15601] [ 1153.341589][T14790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1154.040355][ T5829] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1154.554091][ T5829] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.579666][ T5829] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.646841][ T5829] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.688926][ T5829] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1154.754702][ T5829] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1154.765005][ T5829] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1154.774744][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.805974][ T5829] usb 2-1: Product: syz [ 1154.814984][ T5829] usb 2-1: Manufacturer: syz [ 1154.839116][ T5829] usb 2-1: SerialNumber: syz [ 1155.010678][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1175.064239][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1175.080885][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1175.088824][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1175.096368][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1175.103943][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1175.111318][ T5829] usbhid 2-1:1.0: can't add hid device: -32 [ 1175.117507][ T5829] usbhid: probe of 2-1:1.0 failed with error -32 [ 1175.214643][T17105] loop0: detected capacity change from 0 to 1764 [ 1175.236077][ T5829] usb 2-1: USB disconnect, device number 33 [ 1175.289968][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1175.518745][ T8] usb 3-1: device descriptor read/all, error -71 [ 1177.060371][T15993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1177.087778][T15993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1177.110096][T15993] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1177.142596][T15993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1177.191612][T15993] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1177.206822][T15993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1177.316004][T15993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1177.333659][T15993] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1177.349520][T15993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1177.359041][T15993] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1177.366810][T15993] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1177.374304][T15993] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1177.441091][T15993] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1177.486306][ T5085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1177.511677][ T5085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1177.521188][ T5085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1177.528698][ T5085] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1177.537116][ T5085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1177.548155][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1177.564525][T13852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1177.575792][T13852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1177.595570][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1177.612867][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1177.622565][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1177.995208][T15601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.119583][T15601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.378300][T15601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.576015][T15601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.896042][T17110] chnl_net:caif_netlink_parms(): no params data found [ 1179.152723][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.160833][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.499030][T15993] Bluetooth: hci2: command tx timeout [ 1179.530784][T17110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.540041][T17110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.555121][T17110] bridge_slave_0: entered allmulticast mode [ 1179.565295][T17110] bridge_slave_0: entered promiscuous mode [ 1179.664827][T15993] Bluetooth: hci6: command tx timeout [ 1179.682620][T17110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.690051][T17110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.697451][T17110] bridge_slave_1: entered allmulticast mode [ 1179.705012][T17110] bridge_slave_1: entered promiscuous mode [ 1179.729510][T17112] chnl_net:caif_netlink_parms(): no params data found [ 1179.838241][T15993] Bluetooth: hci1: command tx timeout [ 1179.844558][T15993] Bluetooth: hci5: command tx timeout [ 1179.960710][T17110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.982627][T17110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.186300][T17110] team0: Port device team_slave_0 added [ 1180.238318][T17113] chnl_net:caif_netlink_parms(): no params data found [ 1180.268866][T17110] team0: Port device team_slave_1 added [ 1180.302645][T17110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.309787][T17110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.335853][T17110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.392769][T17112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.400075][T17112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.407935][T17112] bridge_slave_0: entered allmulticast mode [ 1180.415875][T17112] bridge_slave_0: entered promiscuous mode [ 1180.455542][T17110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.462573][T17110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.489368][T17110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.520613][T17112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.528346][T17112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.536973][T17112] bridge_slave_1: entered allmulticast mode [ 1180.545033][T17112] bridge_slave_1: entered promiscuous mode [ 1180.637852][T17112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.651470][T17112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.758252][T17112] team0: Port device team_slave_0 added [ 1180.849209][T17112] team0: Port device team_slave_1 added [ 1180.883271][T17110] hsr_slave_0: entered promiscuous mode [ 1180.909757][T17110] hsr_slave_1: entered promiscuous mode [ 1180.929158][T17110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1180.950296][T17110] Cannot create hsr debugfs directory [ 1180.985524][T17113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.005259][T17113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.013329][T17113] bridge_slave_0: entered allmulticast mode [ 1181.032381][T17113] bridge_slave_0: entered promiscuous mode [ 1181.052696][T17113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.059940][T17113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.082361][T17113] bridge_slave_1: entered allmulticast mode [ 1181.093842][T17113] bridge_slave_1: entered promiscuous mode [ 1181.222777][T17117] chnl_net:caif_netlink_parms(): no params data found [ 1181.308652][T17112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.317538][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.345580][T17112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.485203][T17112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.492700][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.535293][T17112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.693985][T17113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.765837][T15993] Bluetooth: hci2: command tx timeout [ 1181.810070][T17113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.857047][T15601] hsr_slave_0: left promiscuous mode [ 1181.863079][T15601] hsr_slave_1: left promiscuous mode [ 1181.886294][T15601] veth1_macvtap: left promiscuous mode [ 1181.891938][T15601] veth0_macvtap: left promiscuous mode [ 1181.897723][T15601] veth1_vlan: left promiscuous mode [ 1181.903145][T15601] veth0_vlan: left promiscuous mode [ 1181.918749][T15993] Bluetooth: hci6: command tx timeout [ 1182.090942][ T5085] Bluetooth: hci1: command tx timeout [ 1182.096614][T15993] Bluetooth: hci5: command tx timeout [ 1183.165451][T15601] bond0 (unregistering): Released all slaves [ 1183.281336][T17112] hsr_slave_0: entered promiscuous mode [ 1183.300218][T17112] hsr_slave_1: entered promiscuous mode [ 1183.308744][T17112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1183.316899][T17112] Cannot create hsr debugfs directory [ 1183.377945][T17113] team0: Port device team_slave_0 added [ 1183.432908][T17113] team0: Port device team_slave_1 added [ 1183.574877][T17117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.582162][T17117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.601948][T17117] bridge_slave_0: entered allmulticast mode [ 1183.610045][T17117] bridge_slave_0: entered promiscuous mode [ 1183.683159][T17113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.690195][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.733005][T17113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.762130][T17117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.779817][T17117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.791436][T17117] bridge_slave_1: entered allmulticast mode [ 1183.798962][T17117] bridge_slave_1: entered promiscuous mode [ 1183.875293][T17113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.894813][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.942374][T17113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.999434][T15993] Bluetooth: hci2: command tx timeout [ 1184.110318][T17117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.177202][T15993] Bluetooth: hci6: command tx timeout [ 1184.212180][T17117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.343654][T15993] Bluetooth: hci5: command tx timeout [ 1184.349163][T15993] Bluetooth: hci1: command tx timeout [ 1184.391090][T17113] hsr_slave_0: entered promiscuous mode [ 1184.410903][T17113] hsr_slave_1: entered promiscuous mode [ 1184.417532][T17113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1184.432226][T17113] Cannot create hsr debugfs directory [ 1184.474380][T17117] team0: Port device team_slave_0 added [ 1184.486694][T17117] team0: Port device team_slave_1 added [ 1184.558283][T17117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.565426][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.592181][T17117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.650720][T17117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.660761][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.687307][T17117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.711953][T17110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1184.760284][T17117] hsr_slave_0: entered promiscuous mode [ 1184.770095][T17117] hsr_slave_1: entered promiscuous mode [ 1184.776409][T17117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1184.785130][T17117] Cannot create hsr debugfs directory [ 1184.792209][T17110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1184.804260][T17110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1184.820017][T17110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1184.916070][T15601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.067356][T15601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.170131][T15601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.243013][T17112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1185.295999][T17112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1185.333504][T15601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.392985][T17112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1185.441363][T17112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1185.752119][T17113] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1185.796749][T17113] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1185.825174][T17113] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1185.900532][T17113] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1185.937810][T17110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.013912][T15601] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.162960][T15601] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.190591][T17117] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1186.206102][T17117] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1186.220779][T17110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.227909][T17117] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1186.250613][T15993] Bluetooth: hci2: command tx timeout [ 1186.251960][T17117] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1186.310655][T15601] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.362373][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.371791][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.412068][T17112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.423352][T15993] Bluetooth: hci6: command tx timeout [ 1186.478964][T15601] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.547405][T15534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.554681][T15534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.596669][ T5085] Bluetooth: hci5: command tx timeout [ 1186.602210][T15993] Bluetooth: hci1: command tx timeout [ 1186.617642][T17112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.680550][T17110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1186.691762][T17110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1186.714157][T15535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.721374][T15535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.794292][T15535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.801549][T15535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.088131][T15601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.154679][T17113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.244177][T15601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.310900][T17110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.338690][T17113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.359341][T17117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.427352][T15601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.483035][T15534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.490282][T15534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.548263][T15601] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.576323][T15535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.583563][T15535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.678886][T17117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.761096][T15535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.768349][T15535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.879418][T15535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.886684][T15535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.494322][T17112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.703258][T17110] veth0_vlan: entered promiscuous mode [ 1188.960622][T17110] veth1_vlan: entered promiscuous mode [ 1189.163366][T17113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.503469][T17110] veth0_macvtap: entered promiscuous mode [ 1189.664827][T17110] veth1_macvtap: entered promiscuous mode [ 1189.709714][T17117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.740030][T17112] veth0_vlan: entered promiscuous mode [ 1189.898061][T17110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.925669][T17110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.936954][T17110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.954574][T17110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.978004][T17110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.181718][T17110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.203139][T17110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.244051][T17110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.268466][T17110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.292030][T17110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.320558][T17112] veth1_vlan: entered promiscuous mode [ 1190.470475][T17110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.483792][T17110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.495411][T17110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.505621][T17110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.531002][T17113] veth0_vlan: entered promiscuous mode [ 1190.627090][T15601] dvmrp8 (unregistering): left allmulticast mode [ 1190.663542][T15601] dvmrp8 (unregistering): left allmulticast mode [ 1190.720126][T17113] veth1_vlan: entered promiscuous mode [ 1190.938063][T17112] veth0_macvtap: entered promiscuous mode [ 1190.984697][T15534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.992592][T15534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.011491][T17112] veth1_macvtap: entered promiscuous mode [ 1191.155433][T17113] veth0_macvtap: entered promiscuous mode [ 1191.179853][T15534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.188451][T15534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.197059][T17113] veth1_macvtap: entered promiscuous mode [ 1191.215147][T17117] veth0_vlan: entered promiscuous mode [ 1191.244731][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.259619][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.271416][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.283816][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.294165][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.305275][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.317995][T17112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.410526][T17113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.421178][T17113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.433491][T17113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.447192][T17113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.457667][T17113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.468945][T17113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.481125][T17113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.491929][T17113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.504463][T17113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.540076][T17117] veth1_vlan: entered promiscuous mode [ 1191.572576][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.595673][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.611199][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.626834][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.659436][T17112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.670979][T17112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.695981][T17112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.968540][T17112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.092236][T17112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.171552][T17112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.244623][T17112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.711134][T17280] loop4: detected capacity change from 0 to 128 [ 1192.730791][T17280] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 1192.757311][T17113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.781571][T17113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.792529][T17113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.814058][T17113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.842847][T17113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.855083][T17279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.889940][T17113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.911995][T17113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.933337][T17113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.970289][T17113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.152481][T17113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.168740][T17113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.177629][T17113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.199983][T17113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.296625][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.311124][T17117] veth0_macvtap: entered promiscuous mode [ 1193.318098][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.386784][T17117] veth1_macvtap: entered promiscuous mode [ 1193.631344][T15516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.661994][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.686263][T15516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.723429][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.746749][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.767353][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.777265][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.821618][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.842609][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.853575][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.863958][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.887230][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.911759][T17117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.040758][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.059599][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.082191][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.100653][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.111182][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.141239][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.151362][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.162330][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.172577][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1194.183402][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.198413][T17117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.272992][T17117] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.285015][T15535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.303838][T15535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.322036][T17117] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.352151][T17117] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.361974][T17117] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.428054][ T27] audit: type=1326 audit(1781421907.510:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.6.3103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250099ce59 code=0x7ffc0000 [ 1194.493151][ T27] audit: type=1326 audit(1781421907.547:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.6.3103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250099ce59 code=0x7ffc0000 [ 1194.547822][ T27] audit: type=1326 audit(1781421907.547:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.6.3103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250099ce59 code=0x7ffc0000 [ 1194.630165][ T27] audit: type=1326 audit(1781421907.547:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.6.3103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250099ce59 code=0x7ffc0000 [ 1194.654614][T15601] hsr_slave_0: left promiscuous mode [ 1194.668446][ T27] audit: type=1326 audit(1781421907.547:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.6.3103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f250099ce59 code=0x7ffc0000 [ 1194.698334][T15601] hsr_slave_1: left promiscuous mode [ 1194.704854][T15601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.713562][T15601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.721900][ T27] audit: type=1326 audit(1781421907.547:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.6.3103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250099ce59 code=0x7ffc0000 [ 1194.748716][T15601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.760547][T15601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.769806][T15601] bridge_slave_1: left allmulticast mode [ 1194.775825][ T27] audit: type=1326 audit(1781421907.547:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.6.3103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250099ce59 code=0x7ffc0000 [ 1194.801432][T15601] bridge_slave_1: left promiscuous mode [ 1194.809719][T15601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.821160][ T27] audit: type=1326 audit(1781421907.547:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.6.3103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250099ce59 code=0x7ffc0000 [ 1194.867819][T15601] bridge_slave_0: left allmulticast mode [ 1194.883540][T15601] bridge_slave_0: left promiscuous mode [ 1194.889401][T15601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.898449][ T27] audit: type=1326 audit(1781421907.547:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.6.3103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250099ce59 code=0x7ffc0000 [ 1194.968620][ T27] audit: type=1326 audit(1781421907.547:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.6.3103" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f250099ce59 code=0x7ffc0000 [ 1195.003753][T15601] hsr_slave_0: left promiscuous mode [ 1195.072720][T15601] hsr_slave_1: left promiscuous mode [ 1195.286858][T15601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.287325][T15601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.492770][T15601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.606294][T15601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.618151][T15601] bridge_slave_1: left allmulticast mode [ 1195.618177][T15601] bridge_slave_1: left promiscuous mode [ 1195.618352][T15601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.623094][T15601] bridge_slave_0: left allmulticast mode [ 1195.623119][T15601] bridge_slave_0: left promiscuous mode [ 1195.623329][T15601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.636511][T15601] hsr_slave_0: left promiscuous mode [ 1195.637621][T15601] hsr_slave_1: left promiscuous mode [ 1195.837834][T15601] veth1_macvtap: left promiscuous mode [ 1195.837963][T15601] veth0_macvtap: left promiscuous mode [ 1195.838158][T15601] veth1_vlan: left promiscuous mode [ 1195.838282][T15601] veth0_vlan: left promiscuous mode [ 1195.841621][T15601] veth1_macvtap: left promiscuous mode [ 1195.841693][T15601] veth0_macvtap: left promiscuous mode [ 1195.841876][T15601] veth1_vlan: left promiscuous mode [ 1195.843193][T15601] veth0_vlan: left promiscuous mode [ 1195.846538][T15601] veth1_macvtap: left promiscuous mode [ 1195.846618][T15601] veth0_macvtap: left promiscuous mode [ 1195.848137][T15601] veth1_vlan: left promiscuous mode [ 1195.849866][T15601] veth0_vlan: left promiscuous mode [ 1198.665149][T17317] loop4: detected capacity change from 0 to 256 [ 1198.680060][T17317] exfat: Deprecated parameter 'utf8' [ 1198.701703][T17317] exfat: Deprecated parameter 'utf8' [ 1198.718563][T17317] exfat: Deprecated parameter 'namecase' [ 1198.724326][T17317] exfat: Deprecated parameter 'utf8' [ 1198.766481][T17317] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1200.401167][T15601] team0 (unregistering): Port device team_slave_1 removed [ 1200.465845][T15601] team0 (unregistering): Port device team_slave_0 removed [ 1200.562060][T15601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.682612][T15601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.412862][T15601] bond0 (unregistering): Released all slaves [ 1202.173568][T15601] team0 (unregistering): Port device team_slave_1 removed [ 1202.237199][T15601] team0 (unregistering): Port device team_slave_0 removed [ 1202.290053][T15601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.385052][T15601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.822891][T15601] bond0 (unregistering): Released all slaves [ 1203.109268][T15535] smc: removing ib device syz2 [ 1203.124547][ T787] syz2: rxe_query_port: returned err = -19 [ 1204.954459][T15601] bond0 (unregistering): Released all slaves [ 1205.350698][T15600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.390913][T15600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.639347][T15516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.702080][T15516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.154117][T15516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.404626][T15516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.881314][T17348] kernel profiling enabled (shift: 9) [ 1209.576903][T17353] loop7: detected capacity change from 0 to 1024 [ 1209.703083][T17353] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1210.026017][T17353] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 2: comm syz.7.3104: lblock 2 mapped to illegal pblock 2 (length 1) [ 1210.117045][T17353] __quota_error: 27 callbacks suppressed [ 1210.117091][T17353] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1210.133413][T17353] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 48: comm syz.7.3104: lblock 0 mapped to illegal pblock 48 (length 1) [ 1210.347884][T17353] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1210.545372][T17353] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.3104: Failed to acquire dquot type 0 [ 1210.906067][T17353] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1210.976620][T17353] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.3104: mark_inode_dirty error [ 1211.013727][T17353] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1211.034086][T17353] EXT4-fs (loop7): 1 orphan inode deleted [ 1211.044351][T17353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.058488][T15600] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:44: lblock 1 mapped to illegal pblock 1 (length 1) [ 1211.147547][T15600] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1211.185797][T15600] EXT4-fs error (device loop7): ext4_release_dquot:6989: comm kworker/u4:44: Failed to release dquot type 0 [ 1211.249891][T15273] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1211.339989][T17117] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.372025][T15600] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:44: lblock 1 mapped to illegal pblock 1 (length 1) [ 1211.411991][T15600] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1211.446208][T15600] EXT4-fs error (device loop7): ext4_release_dquot:6989: comm kworker/u4:44: Failed to release dquot type 0 [ 1211.478348][T15273] usb 5-1: Using ep0 maxpacket: 8 [ 1211.493554][T17117] EXT4-fs error (device loop7): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1211.549063][T15273] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1211.567295][T17117] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1211.596546][T15273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1211.606675][T15273] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1211.645824][T17117] EXT4-fs error (device loop7): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1211.672129][T15273] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1211.686037][T15273] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1211.696261][T15273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.138797][T15273] usb 5-1: GET_CAPABILITIES returned 0 [ 1212.144401][T15273] usbtmc 5-1:16.0: can't read capabilities [ 1212.933572][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1213.012680][ T787] usb 5-1: USB disconnect, device number 2 [ 1213.019244][T17386] loop6: detected capacity change from 0 to 512 [ 1213.041712][T17386] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1213.099267][T17386] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1213.180805][T17386] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.3125: bg 0: block 441: padding at end of block bitmap is not set [ 1213.219772][T17386] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1213.291237][T17386] EXT4-fs (loop6): 1 truncate cleaned up [ 1213.318381][T17386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.063841][T17402] IPVS: length: 181 != 24 [ 1215.072210][T17112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.878931][T17450] virtio-fs: tag not found [ 1223.699090][T17458] virtio-fs: tag not found [ 1227.017536][T17484] 9pnet_fd: Insufficient options for proto=fd [ 1227.086104][ T47] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1227.291552][T17492] loop6: detected capacity change from 0 to 2048 [ 1227.317583][ T47] usb 8-1: Using ep0 maxpacket: 8 [ 1227.350051][ T47] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1227.383636][ T47] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1227.401036][ T47] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1227.417820][ T47] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.453715][ T47] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1227.470508][T17498] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1227.496087][ T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.703823][T17492] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1227.765095][ T47] usb 8-1: GET_CAPABILITIES returned 0 [ 1227.779331][ T47] usbtmc 8-1:16.0: can't read capabilities [ 1227.791448][T17492] Remounting filesystem read-only [ 1227.817280][T17492] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1227.867319][T17492] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1227.889509][T17492] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1227.912549][T17492] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1227.950634][T17492] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1227.971651][T17492] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1227.988759][T17492] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1228.018008][ T27] audit: type=1800 audit(1781421938.520:41): pid=17492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3147" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1228.137141][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1228.173170][ T5829] usb 8-1: USB disconnect, device number 2 [ 1228.215111][T17492] syz.6.3147 (17492) used greatest stack depth: 19344 bytes left [ 1230.537385][T17509] virtio-fs: tag not found [ 1234.238316][T17568] virtio-fs: tag not found [ 1237.669453][T17600] warning: `syz.5.3172' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1237.727754][T17601] loop6: detected capacity change from 0 to 1024 [ 1237.854333][T17603] loop5: detected capacity change from 0 to 512 [ 1237.882044][T17603] UDF-fs: bad mount option "18446744073709551615" or missing value [ 1237.899576][T17603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3172'. [ 1239.120636][T17621] overlayfs: missing 'lowerdir' [ 1240.520786][T17623] virtio-fs: tag not found [ 1241.598001][ T27] audit: type=1800 audit(1781421949.128:42): pid=17622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3173" name="file0" dev="loop6" ino=26 res=0 errno=0 [ 1242.432122][T17633] loop6: detected capacity change from 0 to 2048 [ 1242.504179][T17633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1242.646701][T17633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1242.687767][T17633] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1242.696107][ T27] audit: type=1800 audit(1781421952.054:43): pid=17633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3179" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1242.712310][T17633] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 1242.739267][T17633] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1242.739267][T17633] [ 1242.749252][T17633] EXT4-fs (loop6): Total free blocks count 0 [ 1242.755282][T17633] EXT4-fs (loop6): Free/Dirty block details [ 1242.761345][T17633] EXT4-fs (loop6): free_blocks=2415919504 [ 1242.767200][T17633] EXT4-fs (loop6): dirty_blocks=256 [ 1242.772487][T17633] EXT4-fs (loop6): Block reservation details [ 1242.778520][T17633] EXT4-fs (loop6): i_reserved_data_blocks=16 [ 1243.163668][T15232] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1244.070589][T17331] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1244.276460][T17331] usb 6-1: Using ep0 maxpacket: 32 [ 1244.286721][T17331] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1244.347674][T17331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.418509][T17331] usb 6-1: Product: syz [ 1244.422771][T17331] usb 6-1: Manufacturer: syz [ 1244.427610][T17331] usb 6-1: SerialNumber: syz [ 1244.519123][T17331] usb 6-1: config 0 descriptor?? [ 1245.136855][T17667] virtio-fs: tag not found [ 1246.431592][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1246.438495][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.466475][T17331] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1246.735702][T17656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.778923][T17656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.925206][T17331] gspca_ov534_9: reg_w failed -71 [ 1248.240991][T17331] gspca_ov534_9: Unknown sensor 0000 [ 1248.241105][T17331] ov534_9: probe of 6-1:0.0 failed with error -22 [ 1248.316879][T17331] usb 6-1: USB disconnect, device number 2 [ 1251.103878][T17713] virtio-fs: tag not found [ 1252.847896][T17728] netlink: 'syz.7.3198': attribute type 5 has an invalid length. [ 1253.706523][T17726] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1253.725168][T17726] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1253.734275][T17726] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1256.793613][T17753] virtio-fs: tag not found [ 1258.251289][T17761] netlink: 'syz.5.3208': attribute type 3 has an invalid length. [ 1258.805612][T17779] (null): rxe_set_mtu: Set mtu to 1024 [ 1259.008648][T17779] infiniband syz2: set down [ 1259.013312][T17779] infiniband syz2: added ipvlan0 [ 1259.491214][T17779] RDS/IB: syz2: added [ 1259.495420][T17779] smc: adding ib device syz2 with port count 1 [ 1259.501624][T17779] smc: ib device syz2 port 1 has pnetid [ 1260.643238][T17331] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1261.184900][T17331] usb 6-1: Using ep0 maxpacket: 16 [ 1261.212096][T17331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.239036][T17331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.248964][T17331] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1261.304218][T17331] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1261.347454][T17331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.391796][T17331] usb 6-1: config 0 descriptor?? [ 1262.154310][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1262.250210][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1262.322474][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1262.370753][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1262.416120][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1262.476422][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1263.030242][T17810] virtio-fs: tag not found [ 1264.099317][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.106990][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.131559][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.139062][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.239529][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.247116][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.298505][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.369412][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.376944][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.434397][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.441897][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.501919][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.531706][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.567338][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.597146][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.604667][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.673575][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.682684][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.718195][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.753612][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.781133][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.790152][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.879034][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.911179][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.918677][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.932665][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.952390][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1264.997762][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1265.030341][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1265.055754][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1265.110367][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1265.181853][T17331] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 1265.299622][T17331] hid-generic 0003:1044:7A4D.0001: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.5-1/input0 [ 1265.463884][T17331] usb 6-1: USB disconnect, device number 3 [ 1266.112801][T17840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1266.167829][T17840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1266.348303][T17839] fido_id[17839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1266.507487][T17840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1266.515087][T17840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1266.913596][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1266.991955][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1267.181428][ T8] usb 6-1: device descriptor read/64, error -32 [ 1267.532513][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1267.535264][T17853] loop4: detected capacity change from 0 to 256 [ 1267.783201][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1267.805228][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1267.837001][ T8] usb 6-1: config 3 has an invalid interface number: 199 but max is 0 [ 1267.845314][ T8] usb 6-1: config 3 has no interface number 0 [ 1267.877666][ T8] usb 6-1: config 3 interface 199 has no altsetting 0 [ 1267.930508][ T8] usb 6-1: New USB device found, idVendor=07a6, idProduct=0986, bcdDevice=57.9c [ 1267.977638][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.985743][ T8] usb 6-1: Product: syz [ 1268.015361][ T8] usb 6-1: Manufacturer: syz [ 1268.025756][ T8] usb 6-1: SerialNumber: syz [ 1268.304655][T17847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.356299][T17847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.997207][ T8] pegasus 6-1:3.199: Missing or invalid endpoints [ 1269.052145][ T8] usb 6-1: USB disconnect, device number 5 [ 1270.624722][T17877] loop4: detected capacity change from 0 to 131101 [ 1270.684499][T17877] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1270.693162][T17877] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1270.729770][T17877] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 1270.729770][T17877] bh = 4125 (magic number) [ 1270.729770][T17877] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 503 [ 1270.749670][T17877] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1270.757261][T17877] gfs2: fsid=syz:syz.0: File system withdrawn [ 1270.765922][T17877] CPU: 1 PID: 17877 Comm: syz.4.3232 Not tainted syzkaller #0 [ 1270.773654][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1270.784026][T17877] Call Trace: [ 1270.787361][T17877] [ 1270.790342][T17877] dump_stack_lvl+0x18c/0x250 [ 1270.795091][T17877] ? kobject_uevent_env+0x363/0x8b0 [ 1270.800364][T17877] ? show_regs_print_info+0x20/0x20 [ 1270.805686][T17877] ? load_image+0x420/0x420 [ 1270.810267][T17877] ? kobject_uevent_env+0x363/0x8b0 [ 1270.815558][T17877] gfs2_withdraw+0xb24/0x13d0 [ 1270.820381][T17877] ? gfs2_lm+0x218/0x240 [ 1270.824701][T17877] ? gfs2_lm+0x240/0x240 [ 1270.829015][T17877] ? gfs2_freeze_unlock+0x60/0x60 [ 1270.834102][T17877] ? gfs2_meta_read+0x84c/0x990 [ 1270.839023][T17877] ? gfs2_meta_new+0x160/0x160 [ 1270.843849][T17877] ? queue_delayed_work_on+0x114/0x200 [ 1270.849367][T17877] gfs2_meta_check_ii+0x72/0x90 [ 1270.854271][T17877] gfs2_meta_buffer+0x236/0x310 [ 1270.859150][T17877] gfs2_inode_refresh+0xc7/0x1160 [ 1270.864203][T17877] ? gfs2_inode_metasync+0xf0/0xf0 [ 1270.869333][T17877] ? gfs2_glock_nq+0xd4f/0x1420 [ 1270.874206][T17877] ? do_raw_spin_lock+0x11f/0x2c0 [ 1270.879274][T17877] gfs2_instantiate+0x162/0x220 [ 1270.884172][T17877] gfs2_glock_wait+0x1d4/0x2a0 [ 1270.888997][T17877] gfs2_lookupi+0x3de/0x640 [ 1270.893563][T17877] ? gfs2_lookup_meta+0x180/0x180 [ 1270.898609][T17877] ? gfs2_lookup_meta+0xb0/0x180 [ 1270.903561][T17877] ? crc32_le_base+0x759/0xcf0 [ 1270.908386][T17877] gfs2_lookup_meta+0xb0/0x180 [ 1270.913179][T17877] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 1270.918328][T17877] init_journal+0x1c2/0x2330 [ 1270.923040][T17877] ? pointer+0x1160/0x1160 [ 1270.927785][T17877] ? _compound_head+0x120/0x120 [ 1270.932661][T17877] ? vsnprintf+0x1ac7/0x1ba0 [ 1270.937282][T17877] ? snprintf+0xe9/0x140 [ 1270.941557][T17877] ? vscnprintf+0x80/0x80 [ 1270.945925][T17877] ? gfs2_glock_nq_num+0x183/0x1c0 [ 1270.951067][T17877] init_inodes+0xdb/0x320 [ 1270.955428][T17877] gfs2_fill_super+0x17bc/0x1f30 [ 1270.960386][T17877] ? __might_sleep+0xe0/0xe0 [ 1270.965021][T17877] ? gfs2_reconfigure+0xb10/0xb10 [ 1270.970088][T17877] ? init_locking+0xb8/0x200 [ 1270.974727][T17877] ? setup_bdev_super+0x559/0x660 [ 1270.979825][T17877] ? setup_bdev_super+0x56b/0x660 [ 1270.984910][T17877] get_tree_bdev+0x3f3/0x520 [ 1270.989520][T17877] ? end_current_label_crit_section+0x170/0x170 [ 1270.995998][T17877] ? gfs2_reconfigure+0xb10/0xb10 [ 1271.001061][T17877] ? setup_bdev_super+0x660/0x660 [ 1271.006145][T17877] gfs2_get_tree+0x51/0x1e0 [ 1271.010677][T17877] vfs_get_tree+0x8c/0x280 [ 1271.015111][T17877] do_new_mount+0x24b/0xa40 [ 1271.019665][T17877] __se_sys_mount+0x2e7/0x3d0 [ 1271.024366][T17877] ? __x64_sys_mount+0xc0/0xc0 [ 1271.029154][T17877] ? lockdep_hardirqs_on+0x98/0x150 [ 1271.034483][T17877] ? __x64_sys_mount+0x20/0xc0 [ 1271.039267][T17877] do_syscall_64+0x55/0xb0 [ 1271.043731][T17877] ? clear_bhb_loop+0x40/0x90 [ 1271.048536][T17877] ? clear_bhb_loop+0x40/0x90 [ 1271.053248][T17877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1271.059198][T17877] RIP: 0033:0x7ffb9159e0ca [ 1271.063754][T17877] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.083563][T17877] RSP: 002b:00007ffb923aae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1271.092069][T17877] RAX: ffffffffffffffda RBX: 00007ffb923aaee0 RCX: 00007ffb9159e0ca [ 1271.100070][T17877] RDX: 0000200000047700 RSI: 0000200000047740 RDI: 00007ffb923aaea0 [ 1271.108061][T17877] RBP: 0000200000047700 R08: 00007ffb923aaee0 R09: 0000000000000000 [ 1271.116083][T17877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000047740 [ 1271.124084][T17877] R13: 00007ffb923aaea0 R14: 00000000000476e8 R15: 0000200000047780 [ 1271.132187][T17877] [ 1271.137498][T17877] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 1271.146543][ T5085] Bluetooth: hci1: command tx timeout [ 1272.472989][T17910] (null): rxe_set_mtu: Set mtu to 1024 [ 1272.482347][T17910] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1278.941326][T17970] (null): rxe_set_mtu: Set mtu to 1024 [ 1278.947179][T17970] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1278.963457][ T787] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1279.209179][ T787] usb 7-1: Using ep0 maxpacket: 16 [ 1279.302210][ T787] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1279.366811][ T787] usb 7-1: config 0 has no interface number 0 [ 1279.405070][ T787] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.487794][ T787] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1279.622622][ T787] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1279.645989][ T787] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1279.707441][ T787] usb 7-1: Product: syz [ 1279.735787][ T787] usb 7-1: SerialNumber: syz [ 1279.780368][ T787] usb 7-1: config 0 descriptor?? [ 1279.824629][ T787] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1279.887194][ T787] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input34 [ 1280.105532][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1280.115016][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1280.122585][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1280.129817][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1280.137147][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1280.145574][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1280.152900][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1280.160104][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1280.168598][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1280.175823][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1280.183125][ T787] usb 7-1: USB disconnect, device number 2 [ 1280.189141][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1280.242270][ T787] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1281.769395][T17984] Bluetooth: MGMT ver 1.22 [ 1283.636654][T18006] loop6: detected capacity change from 0 to 64 [ 1283.711636][T18013] loop4: detected capacity change from 0 to 2048 [ 1283.858631][T18013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1284.314919][T17989] loop5: detected capacity change from 0 to 32768 [ 1284.440176][T17989] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1284.608608][T17989] XFS (loop5): Ending clean mount [ 1284.704261][T17989] XFS (loop5): Quotacheck needed: Please wait. [ 1285.039401][T18018] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1285.124295][T17989] XFS (loop5): Quotacheck: Done. [ 1285.524004][T18018] EXT4-fs (loop4): Remounting filesystem read-only [ 1285.780007][T17113] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1285.850469][T17110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.423683][T18050] syz2: rxe_newlink: already configured on ipvlan0 [ 1291.653675][T18088] loop7: detected capacity change from 0 to 2048 [ 1291.873511][T18088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.120777][T18100] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1292.356276][T18100] EXT4-fs (loop7): Remounting filesystem read-only [ 1292.367217][ T27] audit: type=1800 audit(1781421997.919:44): pid=18088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3277" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1292.467299][ T27] audit: type=1800 audit(1781421997.919:45): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3277" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1292.581434][T18108] (null): rxe_set_mtu: Set mtu to 1024 [ 1292.588791][T18108] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1295.515408][T17117] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.304494][T18129] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3285'. [ 1296.343089][T18129] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3285'. [ 1296.456284][T18132] loop7: detected capacity change from 0 to 764 [ 1296.507271][T18132] Symlink component flag not implemented [ 1296.541536][T18132] Symlink component flag not implemented [ 1296.547979][T18132] Symlink component flag not implemented (129) [ 1296.586978][T18132] Symlink component flag not implemented (6) [ 1297.379330][T18160] (null): rxe_set_mtu: Set mtu to 1024 [ 1297.385480][T18160] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1300.808844][T18166] loop7: detected capacity change from 0 to 64 [ 1301.297941][T18166] hfs: file_umask requires a value [ 1301.347135][T18166] hfs: unable to parse mount options [ 1301.512353][T18169] loop6: detected capacity change from 0 to 2048 [ 1301.541644][T18176] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1301.566124][T18176] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1302.193695][T18169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1303.730857][T17112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.898329][T18206] syz2: rxe_newlink: already configured on ipvlan0 [ 1306.635150][T18232] loop7: detected capacity change from 0 to 512 [ 1306.684431][T18232] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1306.771630][T18232] EXT4-fs error (device loop7): ext4_iget_extra_inode:4739: inode #15: comm syz.7.3307: corrupted in-inode xattr: invalid ea_ino [ 1306.895099][T18232] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.3307: couldn't read orphan inode 15 (err -117) [ 1306.922761][T18232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.010114][T18240] loop4: detected capacity change from 0 to 2048 [ 1307.045326][T17117] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1307.218108][T18240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.453628][T18256] (null): rxe_set_mtu: Set mtu to 1024 [ 1307.461163][T18256] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1308.343015][ T27] audit: type=1800 audit(1781422012.681:46): pid=18240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3311" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1309.365181][T17110] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.581560][T18287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3321'. [ 1312.264914][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1312.271551][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.667460][T18303] loop4: detected capacity change from 0 to 512 [ 1312.713377][T18303] EXT4-fs: Ignoring removed nobh option [ 1312.922497][T18314] loop7: detected capacity change from 0 to 2048 [ 1312.950263][T18303] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #3: comm syz.4.3325: corrupted inode contents [ 1312.969710][T18312] loop5: detected capacity change from 0 to 2048 [ 1313.007203][T18303] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #3: comm syz.4.3325: mark_inode_dirty error [ 1313.041771][T18315] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1313.061952][T18303] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #3: comm syz.4.3325: corrupted inode contents [ 1313.090939][T18303] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3325: mark_inode_dirty error [ 1313.139334][T18312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1313.232332][T18303] BUG: unable to handle page fault for address: ffffffffffffff93 [ 1313.239101][ T27] audit: type=1800 audit(1781422017.186:47): pid=18314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3327" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1313.240158][T18303] #PF: supervisor read access in kernel mode [ 1313.265739][T18303] #PF: error_code(0x0000) - not-present page [ 1313.271772][T18303] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 1313.277830][T18303] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1313.283240][T18303] CPU: 0 PID: 18303 Comm: syz.4.3325 Not tainted syzkaller #0 [ 1313.290744][T18303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1313.300855][T18303] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 1313.307033][T18303] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 77 d5 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 1313.326705][T18303] RSP: 0018:ffffc9000f9f6ae0 EFLAGS: 00010246 [ 1313.332836][T18303] RAX: 0000000000000000 RBX: ffffffffffffff8b RCX: 0000000000080000 [ 1313.340856][T18303] RDX: ffffc90013d0f000 RSI: 000000000003c2d2 RDI: ffffffffffffff93 [ 1313.348873][T18303] RBP: ffffc9000f9f6d90 R08: ffff888029461e00 R09: 0000000000000002 [ 1313.356902][T18303] R10: 00000000ffffffe4 R11: 0000000000000002 R12: 0000000000000001 [ 1313.364933][T18303] R13: 1ffff92001f3ed88 R14: dffffc0000000000 R15: ffffffffffffff8b [ 1313.372958][T18303] FS: 00007ffb923cc6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1313.381935][T18303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1313.388568][T18303] CR2: ffffffffffffff93 CR3: 0000000052f0e000 CR4: 00000000003506f0 [ 1313.396594][T18303] Call Trace: [ 1313.399918][T18303] [ 1313.402941][T18303] ? __might_sleep+0xe0/0xe0 [ 1313.407598][T18303] ? ext4_ext_release+0x10/0x10 [ 1313.412530][T18303] ext4_map_blocks+0x9e2/0x1b80 [ 1313.417450][T18303] ? ext4_issue_zeroout+0x250/0x250 [ 1313.422716][T18303] ? kasan_set_track+0x5f/0x70 [ 1313.427567][T18303] ? kasan_set_track+0x4e/0x70 [ 1313.432382][T18303] ? __kasan_kmalloc+0x8f/0xa0 [ 1313.437205][T18303] ext4_getblk+0x1d0/0x6f0 [ 1313.441678][T18303] ? ext4_process_orphan+0x54/0x300 [ 1313.446968][T18303] ? ext4_orphan_cleanup+0xbec/0x1420 [ 1313.452399][T18303] ? ext4_get_block_unwritten+0x100/0x100 [ 1313.458188][T18303] ext4_bread+0x2a/0x170 [ 1313.462585][T18303] ext4_quota_write+0x23a/0x580 [ 1313.467496][T18303] ? ext4_quota_read+0x380/0x380 [ 1313.472485][T18303] ? get_free_dqblk+0x49/0x710 [ 1313.477307][T18303] ? rcu_is_watching+0x15/0xb0 [ 1313.482127][T18303] get_free_dqblk+0x35a/0x710 [ 1313.486859][T18303] ? ext4_quota_read+0x380/0x380 [ 1313.491856][T18303] do_insert_tree+0x253/0x10a0 [ 1313.496787][T18303] ? get_free_dqblk+0x4a2/0x710 [ 1313.501709][T18303] do_insert_tree+0xa1a/0x10a0 [ 1313.506550][T18303] do_insert_tree+0xa1a/0x10a0 [ 1313.511386][T18303] do_insert_tree+0xa1a/0x10a0 [ 1313.516224][T18303] qtree_write_dquot+0x4a1/0x5d0 [ 1313.521275][T18303] ? qtree_entry_unused+0xe0/0xe0 [ 1313.526363][T18303] ? down_write+0x16e/0x200 [ 1313.530921][T18303] ? trace_contention_end+0x39/0xe0 [ 1313.536178][T18303] v2_write_dquot+0x10c/0x1a0 [ 1313.540921][T18303] dquot_acquire+0x320/0x610 [ 1313.545570][T18303] ext4_acquire_dquot+0x2e3/0x4b0 [ 1313.550658][T18303] dqget+0x72f/0xc30 [ 1313.554614][T18303] __dquot_initialize+0x3c7/0xcd0 [ 1313.559700][T18303] ? dquot_initialize+0x20/0x20 [ 1313.564617][T18303] ? ext4_get_projid+0x140/0x140 [ 1313.569623][T18303] ext4_process_orphan+0x54/0x300 [ 1313.574697][T18303] ext4_orphan_cleanup+0xbec/0x1420 [ 1313.579951][T18303] ? ext4_orphan_del+0xbf0/0xbf0 [ 1313.584943][T18303] ? ext4_register_li_request+0x183/0x940 [ 1313.590720][T18303] ? errseq_check_and_advance+0x66/0x120 [ 1313.596452][T18303] ext4_fill_super+0x5eea/0x67b0 [ 1313.601466][T18303] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1313.607774][T18303] ? __might_sleep+0xe0/0xe0 [ 1313.612423][T18303] ? read_lock_is_recursive+0x20/0x20 [ 1313.617856][T18303] ? snprintf+0xe9/0x140 [ 1313.622192][T18303] ? down_read_killable+0x340/0x340 [ 1313.627473][T18303] ? setup_bdev_super+0x56b/0x660 [ 1313.632585][T18303] get_tree_bdev+0x3f3/0x520 [ 1313.637246][T18303] ? vfs_parse_fs_string+0x170/0x170 [ 1313.642609][T18303] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1313.648916][T18303] ? setup_bdev_super+0x660/0x660 [ 1313.653995][T18303] ? apparmor_capable+0x137/0x1a0 [ 1313.659080][T18303] ? bpf_lsm_capable+0x9/0x10 [ 1313.663868][T18303] ? security_capable+0x89/0xb0 [ 1313.668784][T18303] vfs_get_tree+0x8c/0x280 [ 1313.673251][T18303] do_new_mount+0x24b/0xa40 [ 1313.677818][T18303] __se_sys_mount+0x2e7/0x3d0 [ 1313.682571][T18303] ? __x64_sys_mount+0xc0/0xc0 [ 1313.687392][T18303] ? lockdep_hardirqs_on+0x98/0x150 [ 1313.692659][T18303] ? __x64_sys_mount+0x20/0xc0 [ 1313.697480][T18303] do_syscall_64+0x55/0xb0 [ 1313.701947][T18303] ? clear_bhb_loop+0x40/0x90 [ 1313.706758][T18303] ? clear_bhb_loop+0x40/0x90 [ 1313.711486][T18303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1313.717869][T18303] RIP: 0033:0x7ffb9159e0ca [ 1313.722329][T18303] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.741989][T18303] RSP: 002b:00007ffb923cbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1313.750471][T18303] RAX: ffffffffffffffda RBX: 00007ffb923cbee0 RCX: 00007ffb9159e0ca [ 1313.758529][T18303] RDX: 0000200000000340 RSI: 0000200000000980 RDI: 00007ffb923cbea0 [ 1313.766561][T18303] RBP: 0000200000000340 R08: 00007ffb923cbee0 R09: 0000000003010010 [ 1313.774606][T18303] R10: 0000000003010010 R11: 0000000000000246 R12: 0000200000000980 [ 1313.782637][T18303] R13: 00007ffb923cbea0 R14: 0000000000000519 R15: 0000200000000100 [ 1313.790669][T18303] [ 1313.793733][T18303] Modules linked in: [ 1313.797711][T18303] CR2: ffffffffffffff93 [ 1313.801924][T18303] ---[ end trace 0000000000000000 ]--- [ 1313.807419][T18303] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 1313.813566][T18303] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 77 d5 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 1313.833395][T18303] RSP: 0018:ffffc9000f9f6ae0 EFLAGS: 00010246 [ 1313.839518][T18303] RAX: 0000000000000000 RBX: ffffffffffffff8b RCX: 0000000000080000 [ 1313.847654][T18303] RDX: ffffc90013d0f000 RSI: 000000000003c2d2 RDI: ffffffffffffff93 [ 1313.855687][T18303] RBP: ffffc9000f9f6d90 R08: ffff888029461e00 R09: 0000000000000002 [ 1313.863806][T18303] R10: 00000000ffffffe4 R11: 0000000000000002 R12: 0000000000000001 [ 1313.871909][T18303] R13: 1ffff92001f3ed88 R14: dffffc0000000000 R15: ffffffffffffff8b [ 1313.880175][T18303] FS: 00007ffb923cc6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1313.889220][T18303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1313.895941][T18303] CR2: ffffffffffffff93 CR3: 0000000052f0e000 CR4: 00000000003506f0 [ 1313.904036][T18303] Kernel panic - not syncing: Fatal exception [ 1313.910811][T18303] Kernel Offset: disabled [ 1313.915152][T18303] Rebooting in 86400 seconds..