last executing test programs: 2m34.839289847s ago: executing program 0 (id=257): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=', @ANYRESHEX=r7]) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x2, [0x2, 0xb, 0x8, 0x8, 0x2, 0x4, 0x6, 0x1, 0x7, 0x7, 0xb84, 0x7, 0x200, 0x2, 0x6, 0x8fee, 0x8, 0x6, 0x1, 0x8000, 0x1, 0x78e5, 0x3, 0x8, 0xae4, 0x300, 0x4, 0x9, 0x7fff, 0x401, 0xd874, 0x100, 0x9, 0x9, 0x4, 0x67, 0x1, 0xfff8, 0x58f, 0x3a4, 0xfff, 0x4, 0x7, 0x7, 0xbdcf, 0x9, 0x0, 0x93], 0xfffffa6a}}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(r8, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 2m34.839121267s ago: executing program 1 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xc3}, &(0x7f00000000c0), 0x0, &(0x7f0000000140)) r3 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) 2m33.133976227s ago: executing program 0 (id=261): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m30.015663294s ago: executing program 1 (id=271): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x142, 0x0) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 2m29.811792819s ago: executing program 0 (id=274): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 2m29.620395522s ago: executing program 1 (id=275): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="2e0001000000"], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x2000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0xc2d, &(0x7f0000000600)={0x0, 0x4000000, 0x440, 0x2, 0x15e}, &(0x7f0000000700), &(0x7f0000000000), 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) accept(r4, &(0x7f0000000280)=@can, 0x0) 2m28.448870557s ago: executing program 0 (id=277): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='username\x00', &(0x7f00000002c0)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='password\x00', &(0x7f0000000340)='guest\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2m27.353177928s ago: executing program 1 (id=279): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x21c, &(0x7f0000000440)="$eJzs3c1uEm0UAODDT/n58i26MzExGXWhq0a9ghpTEyOJSQ0L3TWxq7JiNsCmvQxvwfvyAkxXbMwYHAZaCkgxQDDPs+Ew5z0z884bhtlwyCL3/cHXaDRKUT6O4xiW4jDKUbiKWdU7WwCA/THMsviR5e5f7TkAAPbRCt//P7d8SgDAhn389Pn961br5DRJGhHXV712r52/5vm371onL5LfDqdV171euzLJv0xmnx1G+YP4b5x/ldcnk3QtItq1eP40z49ybz60ktv19fiy4bkDAAAAAAAAAAAAAAAAAAAAAMCuPIqkMLe/z9HRbL45zufvbvQHmunfU42HRXvgaXug7HIbkwIAAAAAAAAAAAAAAAAAAIA9k/YHF2edznl3GtQj4uaW6pwxi4PSeMcrDU77ldX3vJGgHOuVN8fTXOOgpfEl2uwEm/MXd3FQnixcVHe8KH8dJPNSEfHkvjusF8tciYjbqWaUlpRn2SiY/yko2mIsLK9FxPITe3a67vUZZlnW+fa4m/YjWzp4eo+ob+VOBAAAAAAAAAAAAAAAAAAApLXiR793c43KLs4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALYv7Q+Kf/kfXJx1OufdtL9ycBkR/8cfBxfHOojG7iYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+1XAAAA///BvhTo") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 2m27.334509227s ago: executing program 0 (id=281): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x1000000000000010, 0x4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) 2m25.979401376s ago: executing program 0 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) 2m25.932469914s ago: executing program 1 (id=288): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200), 0x1, 0xc32, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c64) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61) 2m22.799260212s ago: executing program 1 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 2m21.78638752s ago: executing program 32 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 2m10.748967273s ago: executing program 33 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) 2m7.531895335s ago: executing program 2 (id=347): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@jqfmt_vfsv0}, {@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000000480)="$eJzs3U1oG+kZAOB3RlbsJE6dQgttySG0hRRC5J8kbdqTcy0NBHIo9NIaWTHBshUsuY2Noc49lOZQ2pJLemsPPbbsYQ/LXva4173sz3khbMwuxDnsatGf49hSVnYsaWM9D4z1fTOjeb9vZt7xzDCDAhha52t/0ogfRsTNJGJi17SRaE4835hve2sj/3xrI59EtXrrsySSiHi2tZFvzZ80P09HxGZE/CAi3s1GXEx3FnmiVSivrS/OFYuFlWZ9srJ0d7K8tn7pztLcQmGhsHz5F7+8eu3K1emZ6d3NfV7dXcserK8PPnr4lwfv//rxw//899xm/m9zSczGeHPa7n4cpcY6ycbsnvFXehFsgJJBN4BDyTTzvJZK34+JyDSzvp3q7oPDaF+aB/RQdTSiumNXERgCyWskfesgAryJWucBtevf1tDP848n1xsXILW421sb+T9HK/5I495EjNWvTU59nrx0ZVK73jzbz4ZyLG3ej4ipkZH9+3/S3P8Ob+ooGkhPvXO9saH2b/905/gTbY4/4617p6+pdfzbbh7/ttvEz3Q4/t3sMsaXv/vknx3j3x+NH7WNn+zET9rETyPiD13Gf/Tbt651mlb9V8SFaB+/JXn1/eHJ23eKhanG37Yx3r5w7led+x9xqkP8xj3bsXpDdvf/RLNNaZf9//97//vx5ivi/+wnr97+7db/yYj4a5fxv/vs37/pNO3J/eRp7SzgoNs/iWw87jL+z2fPf9gsumsIAAAAAAAAAABHKK0/y5akuZ1ymuZyjXd4vxen0mKpXLl4u7S6PN945u1sZNPWk1YTjXpSq083n8dt1Wf21C9nmgEzJ+v1XL5UnB9w3wEAAAAAAAAAAAAAAAAAAODb4vSe9/+/yNTf/5+NmDkz6LYBfdD5J7+B407+w/B6Of+TgbUD6D///2FoVeU/DC/5D8NL/sPwkv8wvNrm/8n+twPov335PzaYdgD95/wfAAAAAAAAAAAAAAAAAAAAAAAAAAB64uaNG7Wh+nxrI1+rz4+srS6W/nhpvlBezC2t5nP50srd3EKptFAs5PKlpW9aXlIq3Z2K5dV7k5VCuTJZXlv//VJpdbn1m6KFbM97BAAAAAAAAAAAAAAAAAAAAG+e8fqQpLmIbKOeprlcxJmIOJtEcvtOsTAVEd+JiA8y2dFafXrQjQYAAAAAAAAAAAAAAAAAAIBjpry2vjhXLBZWelcYaYZqP0/Ey2M+rhwq1miXM48cZMkRsXm0a6O2xAN/K9tcgfUxYz3fXse7kOmwHyrs3/kBAAAAAAAAAAAAAAAAAIC+evHSb7ff+Kq3DQIAAAAAAAAAAAAAAAAAAIChlH6aRERtuDDx0/G9U08k25n6Z0T86dGtv9+bq1RWpmvjn+6Mr/yjOX5mEO0HutXK0zQiankMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvFBeW1+cKxYLK4csjHYxz6D7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAYXwcAAP//pdrGWA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000500)={0xa}) 2m6.449142921s ago: executing program 2 (id=348): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 2m4.933879633s ago: executing program 2 (id=354): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m4.743092306s ago: executing program 2 (id=355): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x401, 0x48001051, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a080045000028006400000222a35a9d0ea8d60300d0f4c934c252000000000000e4e164075845cb82469f7badc72eac5dd4057898a606e7c0cf9b27885942b1e3bee229a2eebe3b61e7936ea2ac66b24ef2cb1287507945a80a785a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc20000"], 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) fanotify_mark(r0, 0x80, 0x8, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) 2m3.509964489s ago: executing program 2 (id=359): socket$packet(0x11, 0x3, 0x300) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2m1.230875795s ago: executing program 2 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)='-3\x00', 0x3) write(r0, &(0x7f00000001c0)='-2 -3', 0x5) write(r0, &(0x7f0000000200)='-2 -3 +4\n', 0x9) close(r0) 1m45.781977331s ago: executing program 34 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)='-3\x00', 0x3) write(r0, &(0x7f00000001c0)='-2 -3', 0x5) write(r0, &(0x7f0000000200)='-2 -3 +4\n', 0x9) close(r0) 1m19.178903338s ago: executing program 6 (id=497): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0x4a, 0x2b, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 1m19.134851321s ago: executing program 5 (id=498): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r4, 0x249f0, 0x0) 1m18.918806029s ago: executing program 5 (id=501): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setuid(0xee01) ioctl$TIOCSTI(r0, 0x5412, 0x0) 1m18.653906898s ago: executing program 5 (id=502): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, 0x0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1m18.279322688s ago: executing program 5 (id=505): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x130) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) 1m18.134643514s ago: executing program 6 (id=507): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000ae1000/0x4000)=nil, 0x4000, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae1000/0x4000)=nil, 0x4000, 0x7}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x0, 0x0, &(0x7f0000000100)}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000140)='\x00', 0x1, 0xa}) 1m17.792586592s ago: executing program 6 (id=510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) 1m17.569744516s ago: executing program 6 (id=513): r0 = userfaultfd(0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000006, 0x41032, r0, 0x7b60a000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20040044) r4 = socket$inet6(0xa, 0x80003, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1, &(0x7f0000000040)=0x7, 0x4d) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51a}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1m15.475529368s ago: executing program 6 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff0000000000000000020000000000000002000000000000000001000000000000030000000800000006000000000000000900000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f580000000400000000900000090000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="f000000000000000070000000000000001000000000000000000000000000000a6"], 0x0, 0x0, 0x0, 0x0}) 1m15.199387213s ago: executing program 6 (id=521): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000100)={0x1002b, 0x1c, 0x4, 0x1b, 0x7, 0xfffffffe, 0x205, 0x2, 0x1}) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x24970000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000100"], 0x5) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000007000000225bd7000fbdbdf2507000000", @ANYRES32, @ANYBLOB="0c00c11241a463ef57fc018005000600090000008100010f4010dde789e6d48005000600"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1m15.076765158s ago: executing program 5 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0xf7e, &(0x7f0000001180)=ANY=[], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000180)}, 0x20) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m12.981674213s ago: executing program 5 (id=530): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000100)={0x1002b, 0x1c, 0x4, 0x1b, 0x7, 0xfffffffe, 0x205, 0x2, 0x1}) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x24970000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000100"], 0x5) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) 1m0.094365082s ago: executing program 35 (id=521): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000100)={0x1002b, 0x1c, 0x4, 0x1b, 0x7, 0xfffffffe, 0x205, 0x2, 0x1}) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x24970000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000100"], 0x5) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000007000000225bd7000fbdbdf2507000000", @ANYRES32, @ANYBLOB="0c00c11241a463ef57fc018005000600090000008100010f4010dde789e6d48005000600"], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 57.774382628s ago: executing program 36 (id=530): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000100)={0x1002b, 0x1c, 0x4, 0x1b, 0x7, 0xfffffffe, 0x205, 0x2, 0x1}) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x24970000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000100"], 0x5) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) 16.535992565s ago: executing program 8 (id=703): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 11.945499894s ago: executing program 8 (id=709): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) set_mempolicy(0x6, 0x0, 0xe0) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f00", 0x20) 5.897651213s ago: executing program 3 (id=716): close(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0) 5.804815981s ago: executing program 3 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mknod(0x0, 0x8001420, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, 0x0) 4.89055538s ago: executing program 9 (id=564): socket$kcm(0xa, 0x3, 0x3a) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) write$sndseq(r4, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) 4.795332036s ago: executing program 4 (id=718): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x5a0, 0x3d0, 0x3d0, 0x5a0, 0xd0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x4, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0xff, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0xfffffffe, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) connect$llc(r0, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'sit0\x00', {0x2}, 0x7ff}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500005c000040020511"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r5) 4.794033209s ago: executing program 3 (id=719): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 4.128164942s ago: executing program 8 (id=720): r0 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000280)={0x0, 0xdf75, 0x1000, 0x40000, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18e5, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3788, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10000216, 0x2, 0x2, 0x111}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000000680)={0x2e, 0x62, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r4, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000300)={0x0, 0x1462, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x100, 0x3, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x0, 0x2000008, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x1000, 0x2, 0x40021a, 0x0, r7}}], 0x4, 0x0, 0x0) 3.94152231s ago: executing program 3 (id=721): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r1, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r1}]) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) dup3(r1, r0, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.843225879s ago: executing program 4 (id=722): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 3.758519528s ago: executing program 9 (id=723): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000003c0)={0x0, 0x0, {0xffffffffffffffff}}) 3.687632159s ago: executing program 7 (id=724): mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000006, 0x41032, 0xffffffffffffffff, 0x7b60a000) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x4c840) 3.647933028s ago: executing program 4 (id=725): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r2, 0x186a0, 0x0) lseek(r2, 0x249f0, 0x0) 3.465488169s ago: executing program 9 (id=726): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) 2.435130128s ago: executing program 7 (id=727): close(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0) 2.307552317s ago: executing program 8 (id=728): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) 2.194535802s ago: executing program 4 (id=729): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 2.189653272s ago: executing program 9 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240440c4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, 0x0) 1.96105943s ago: executing program 7 (id=731): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) set_mempolicy(0x6, 0x0, 0xe0) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f00", 0x20) 1.086141944s ago: executing program 9 (id=732): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 1.084903274s ago: executing program 8 (id=733): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x5a0, 0x3d0, 0x3d0, 0x5a0, 0xd0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x4, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0xff, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0xfffffffe, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) connect$llc(r0, 0x0, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'sit0\x00', {0x2}, 0x7ff}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500005c000040020511"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r5) 861.206561ms ago: executing program 9 (id=734): r0 = epoll_create1(0x0) close(0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x18, r10}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xa002803f}) 747.895354ms ago: executing program 8 (id=735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x10, 0xf, 0x6, 0xe, 0x5, 0x10, 0x9, 0xf, 0x6, 0xd, 0x3, 0x8, 0x0, 0xc, 0x5, 0x2], 0x0, [0xd883, 0xd01d, 0x7, 0x9, 0x3f, 0x6, 0x40, 0x8000, 0x4, 0x2, 0x4, 0x4, 0x2, 0x1, 0x9, 0xfffd], [0x5, 0xfeff, 0xfc01, 0x10, 0x9, 0x5, 0x3, 0x200, 0x4, 0xb6, 0xfffb, 0x80, 0x38fb, 0x3, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfffd, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 747.749396ms ago: executing program 4 (id=736): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 746.066828ms ago: executing program 7 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 642.341804ms ago: executing program 3 (id=738): mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000006, 0x41032, 0xffffffffffffffff, 0x7b60a000) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x4c840) 590.206688ms ago: executing program 4 (id=739): r0 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000280)={0x0, 0xdf75, 0x1000, 0x40000, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18e5, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3788, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10000216, 0x2, 0x2, 0x111}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000000680)={0x2e, 0x62, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r4, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000300)={0x0, 0x1462, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x100, 0x3, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x0, 0x2000008, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x1000, 0x2, 0x40021a, 0x0, r7}}], 0x4, 0x0, 0x0) 500.136545ms ago: executing program 7 (id=740): openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x80000003, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0xe, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbec3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x2, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x80000006}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0x10}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x400, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2, 0x3}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1, 0x8}, {[{0x2}, {0x200009}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x7ffffffd}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x5}, {0x2, 0x6}, {0xfc, 0x6}, {0x7, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800, 0x1}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x8, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x10001}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x3}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x1}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x1}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x13}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 232.574414ms ago: executing program 3 (id=741): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r3, 0x186a0, 0x0) lseek(r3, 0x249f0, 0x0) 0s ago: executing program 7 (id=742): close(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1, {[@ra={0x94, 0x4}]}}, "2200354f0000000104000001e1010203c0a80101"}}}}, 0x0) kernel console output (not intermixed with test programs): T6295] IPVS: using max 25 ests per chain, 60000 per kthread [ 135.552108][ T6284] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 135.583533][ T6284] EXT4-fs (loop4): 1 truncate cleaned up [ 135.592894][ T6284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.737579][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.664938][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.754451][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.439304][ T31] audit: type=1326 audit(1785231462.333:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.0.139" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f891599de99 code=0x0 [ 138.502901][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.554762][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.733875][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.810580][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.830617][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 139.393718][ T6348] 9pnet_fd: Insufficient options for proto=fd [ 139.401632][ T6348] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 139.774633][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.131847][ T6346] can: request_module (can-proto-3) failed. [ 140.239018][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'. [ 140.824205][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.065695][ T6353] can: request_module (can-proto-3) failed. [ 141.612022][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.871353][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.851026][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.879576][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.645629][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.661826][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.861145][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.775678][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.931666][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.011443][ T6385] loop0: detected capacity change from 0 to 512 [ 148.083077][ T6385] EXT4-fs (loop0): Test dummy encryption mode enabled [ 148.324765][ T6385] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.156: inode has both inline data and extents flags [ 148.561725][ T6385] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.571325][ T6385] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.156: couldn't read orphan inode 15 (err -117) [ 148.592444][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 148.592483][ C1] EXT4-fs (loop0): initial error at time 1785231472: ext4_orphan_get:1399: inode 15 [ 148.592513][ C1] EXT4-fs (loop0): last error at time 1785231472: ext4_orphan_get:1399: inode 15 [ 148.941488][ T6385] loop0: lost filesystem error report for type 5 error -117 [ 148.968192][ T6385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.019832][ T6395] loop5: detected capacity change from 0 to 256 [ 149.047453][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.065936][ T6397] loop3: detected capacity change from 0 to 512 [ 149.077900][ T6385] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 149.114232][ T6397] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.174707][ T6397] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 149.348806][ T6397] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 149.478843][ T6397] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 149.501966][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.542401][ T6397] System zones: 0-2, 18-18, 34-34 [ 149.581751][ T6397] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.161: bad orphan inode 15 [ 149.610187][ T6397] loop3: lost filesystem error report for type 5 error -117 [ 149.610970][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 149.624799][ C0] EXT4-fs (loop3): initial error at time 1785231473: ext4_orphan_get:1425 [ 149.633394][ C0] EXT4-fs (loop3): last error at time 1785231473: ext4_orphan_get:1425 [ 149.655032][ T6397] ext4_test_bit(bit=14, block=18) = 1 [ 149.703393][ T6397] is_bad_inode(inode)=0 [ 149.748208][ T6397] NEXT_ORPHAN(inode)=2264924160 [ 149.798063][ T6397] max_ino=32 [ 149.819477][ T6397] i_nlink=0 [ 149.871726][ T6397] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.161: corrupted inode contents [ 149.888474][ T6397] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.894827][ T6397] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.161: mark_inode_dirty error [ 149.921897][ T6397] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.925845][ T6397] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.161: corrupted inode contents [ 150.046008][ T6397] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.088392][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'. [ 150.188208][ T6397] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.161: mark_inode_dirty error [ 150.313719][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.341344][ T6397] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.428227][ T6397] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.161: mark inode dirty (error -117) [ 150.828252][ T6397] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.899401][ T6397] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 150.931717][ T6411] can: request_module (can-proto-3) failed. [ 150.993703][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.077685][ T6397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.376475][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.059534][ T6397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.417780][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.787231][ T6442] loop0: detected capacity change from 0 to 512 [ 152.818772][ T6442] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.062886][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.118602][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.128500][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.504268][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.403526][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.621090][ T5783] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.666525][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.182'. [ 155.981376][ T6469] can: request_module (can-proto-3) failed. [ 156.852250][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.948966][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.957160][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.965380][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.039605][ T6489] syzkaller0: entered promiscuous mode [ 158.047237][ T6489] syzkaller0: entered allmulticast mode [ 158.101036][ T5783] usb 3-1: device descriptor read/64, error -71 [ 158.345332][ T5783] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.123397][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.023338][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.094440][ T6526] loop0: detected capacity change from 0 to 32768 [ 160.104400][ T6526] XFS (loop0): sunit and swidth options incompatible with the noalign option [ 160.207090][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.652112][ T6531] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 160.671851][ T6531] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 160.694345][ T6531] udc dummy_udc.0: failed to start g1: -22 [ 160.727738][ T6531] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 160.775266][ T6531] UDC core: g1: couldn't find an available UDC or it's busy [ 160.782819][ T5783] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 160.856861][ T6541] syzkaller0: entered promiscuous mode [ 160.862606][ T6541] syzkaller0: entered allmulticast mode [ 160.865662][ T6520] loop4: detected capacity change from 0 to 32768 [ 160.880053][ T6541] tipc: Started in network mode [ 160.886700][ T6541] tipc: Node identity 0e010a0112e, cluster identity 4711 [ 160.901916][ T6520] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.202 (6520) [ 160.952059][ T6541] tipc: Enabled bearer , priority 0 [ 160.958818][ T5783] usb 6-1: Using ep0 maxpacket: 32 [ 160.993118][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.999489][ T6541] tipc: Resetting bearer [ 161.016961][ T5783] usb 6-1: no configurations [ 161.034490][ T5783] usb 6-1: can't read configurations, error -22 [ 161.046861][ T6539] tipc: Resetting bearer [ 161.083094][ T6520] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.110032][ T6520] BTRFS info (device loop4): using sha256 checksum algorithm [ 161.182676][ T5783] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 161.197956][ T6539] tipc: Disabling bearer [ 161.256627][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.303770][ T6520] BTRFS info (device loop4): enabling ssd optimizations [ 161.321224][ T6520] BTRFS info (device loop4): turning on async discard [ 161.334268][ T6520] BTRFS info (device loop4): enabling free space tree [ 161.344216][ T5783] usb 6-1: Using ep0 maxpacket: 32 [ 161.359086][ T5783] usb 6-1: no configurations [ 161.367796][ T5783] usb 6-1: can't read configurations, error -22 [ 161.379725][ T5783] usb usb6-port1: attempt power cycle [ 161.524646][ T6567] vlan2: entered allmulticast mode [ 161.541221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.563244][ T6567] bond0: entered allmulticast mode [ 161.590900][ T6567] bond_slave_0: entered allmulticast mode [ 161.620771][ T6567] bond_slave_1: entered allmulticast mode [ 161.765822][ T5628] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.776519][ T5783] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.924700][ T6572] bridge_slave_0: left allmulticast mode [ 162.258736][ T6572] bridge_slave_0: left promiscuous mode [ 162.403280][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.454640][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.521224][ T6576] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 162.539535][ T5783] usb 6-1: Using ep0 maxpacket: 32 [ 162.552893][ T5783] usb 6-1: no configurations [ 162.580328][ T5783] usb 6-1: can't read configurations, error -22 [ 162.604955][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.644817][ T6572] bridge_slave_1: left allmulticast mode [ 162.674191][ T6572] bridge_slave_1: left promiscuous mode [ 162.709181][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.734037][ T5783] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 162.784506][ T5783] usb 6-1: Using ep0 maxpacket: 32 [ 162.828308][ T5783] usb 6-1: no configurations [ 162.836473][ T5783] usb 6-1: can't read configurations, error -22 [ 162.854309][ T6572] bond0: (slave bond_slave_0): Releasing backup interface [ 162.863737][ T5783] usb usb6-port1: unable to enumerate USB device [ 162.897472][ T6572] bond_slave_0: left allmulticast mode [ 163.011566][ T6583] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.062075][ T6572] bond0: (slave bond_slave_1): Releasing backup interface [ 163.093948][ T6572] bond_slave_1: left allmulticast mode [ 163.165225][ T6588] No control pipe specified [ 163.222016][ T6572] team0: Port device team_slave_0 removed [ 163.260726][ T6572] team0: Port device team_slave_1 removed [ 163.277978][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.301747][ T6572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.360238][ T6572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.384985][ T6572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.409765][ T6572] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.578026][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.216130][ T6576] bridge0: entered allmulticast mode [ 164.262220][ T6576] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 164.290579][ T6596] loop3: detected capacity change from 0 to 256 [ 164.303002][ T6605] syz.5.224 uses obsolete (PF_INET,SOCK_PACKET) [ 164.408389][ T6576] syz.2.213 (6576) used greatest stack depth: 19648 bytes left [ 164.651582][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.709070][ T6609] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 164.734474][ T6609] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 164.771745][ T6609] udc dummy_udc.0: failed to start g1: -22 [ 164.791376][ T6609] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 164.830800][ T6609] UDC core: g1: couldn't find an available UDC or it's busy [ 165.483826][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.569304][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.823204][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.301247][ T9] usb 5-1: device descriptor read/64, error -71 [ 166.370159][ T6649] netlink: 240 bytes leftover after parsing attributes in process `syz.3.239'. [ 166.569040][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.685730][ T6658] loop5: detected capacity change from 0 to 2048 [ 166.721016][ T6658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.741680][ T6658] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.744119][ T9] usb 5-1: device descriptor read/64, error -71 [ 166.823298][ T6658] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.244: bg 0: block 345: padding at end of block bitmap is not set [ 166.845622][ T6658] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 166.870316][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.881118][ T9] usb usb5-port1: attempt power cycle [ 166.885533][ T6658] EXT4-fs (loop5): This should not happen!! Data will be lost [ 166.885533][ T6658] [ 166.899193][ T6658] EXT4-fs (loop5): Total free blocks count 0 [ 166.906025][ T6658] EXT4-fs (loop5): Free/Dirty block details [ 166.912553][ T6658] EXT4-fs (loop5): free_blocks=0 [ 166.917560][ T6658] EXT4-fs (loop5): dirty_blocks=16 [ 166.923284][ T6658] EXT4-fs (loop5): Block reservation details [ 166.929325][ T6658] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 166.977234][ T5620] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 167.000400][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.238305][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 167.282864][ T9] usb 5-1: device descriptor read/8, error -71 [ 167.590620][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.112477][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.302360][ T9] usb 5-1: device descriptor read/8, error -71 [ 168.381916][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.430486][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.500563][ T9] usb usb5-port1: unable to enumerate USB device [ 168.596238][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.677953][ T29] usb 3-1: device descriptor read/64, error -71 [ 168.689330][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.885524][ T6692] bridge0: port 3(syz_tun) entered blocking state [ 168.914167][ T6692] bridge0: port 3(syz_tun) entered disabled state [ 168.949084][ T6692] syz_tun: entered allmulticast mode [ 168.978046][ T6692] syz_tun: entered promiscuous mode [ 168.985039][ T6692] bridge0: port 3(syz_tun) entered blocking state [ 168.991596][ T6692] bridge0: port 3(syz_tun) entered forwarding state [ 169.023815][ T6692] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 169.670233][ T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.688878][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.876474][ T29] usb 3-1: device descriptor read/64, error -71 [ 170.002334][ T29] usb usb3-port1: attempt power cycle [ 170.209054][ T6706] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 170.232299][ T9] IPVS: starting estimator thread 0... [ 170.481474][ T6707] IPVS: using max 24 ests per chain, 57600 per kthread [ 170.655612][ T6705] 9p: Could not find request transport: 0xffffffffffffffff [ 170.799141][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.854111][ T6684] loop5: detected capacity change from 0 to 32768 [ 170.910038][ T6684] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.251 (6684) [ 170.973807][ T6684] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.002524][ T6684] BTRFS info (device loop5): using crc32c checksum algorithm [ 171.048161][ T5632] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 171.058171][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 171.058209][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 171.058229][ T5632] Workqueue: hci5 hci_rx_work [ 171.058273][ T5632] Call Trace: [ 171.058283][ T5632] [ 171.058295][ T5632] dump_stack_lvl+0xe8/0x150 [ 171.058352][ T5632] sysfs_create_dir_ns+0x271/0x2a0 [ 171.058407][ T5632] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 171.058460][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.058503][ T5632] ? do_raw_spin_unlock+0xf5/0x210 [ 171.058549][ T5632] kobject_add_internal+0x622/0xcd0 [ 171.058614][ T5632] kobject_add+0x163/0x240 [ 171.058659][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.058708][ T5632] ? __pfx_kobject_add+0x10/0x10 [ 171.058753][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.058794][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.058838][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.058881][ T5632] ? get_device_parent+0x366/0x3a0 [ 171.058926][ T5632] device_add+0x3fa/0xb80 [ 171.058967][ T5632] hci_conn_add_sysfs+0xd5/0x210 [ 171.059011][ T5632] le_conn_complete_evt+0xfef/0x1580 [ 171.059079][ T5632] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 171.059132][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.059170][ T5632] ? __mutex_unlock_slowpath+0x731/0x900 [ 171.059216][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.059255][ T5632] ? skb_pull_data+0xf0/0x200 [ 171.059313][ T5632] hci_le_conn_complete_evt+0x187/0x470 [ 171.059378][ T5632] hci_event_packet+0x67a/0xf10 [ 171.059428][ T5632] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 171.059474][ T5632] ? __pfx_hci_event_packet+0x10/0x10 [ 171.059520][ T5632] ? audit_tree_freeing_mark+0x760/0xb20 [ 171.059565][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.059607][ T5632] ? hci_send_to_monitor+0xe2/0x590 [ 171.059674][ T5632] hci_rx_work+0x3ee/0x1020 [ 171.059725][ T5632] ? process_scheduled_works+0xa20/0x14e0 [ 171.059767][ T5632] process_scheduled_works+0xa8e/0x14e0 [ 171.059840][ T5632] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.059907][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.059945][ T5632] ? assign_work+0x3cf/0x5d0 [ 171.059989][ T5632] worker_thread+0xa47/0xfb0 [ 171.060034][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.060083][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.060122][ T5632] ? __kthread_parkme+0x71/0x1f0 [ 171.060179][ T5632] kthread+0x388/0x470 [ 171.060232][ T5632] ? __pfx_worker_thread+0x10/0x10 [ 171.060273][ T5632] ? __pfx_kthread+0x10/0x10 [ 171.060324][ T5632] ret_from_fork+0x514/0xb70 [ 171.060386][ T5632] ? __pfx_ret_from_fork+0x10/0x10 [ 171.060439][ T5632] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.060478][ T5632] ? __switch_to+0xc89/0x1420 [ 171.060529][ T5632] ? __pfx_kthread+0x10/0x10 [ 171.060582][ T5632] ret_from_fork_asm+0x1a/0x30 [ 171.060634][ T5632] [ 171.061389][ T5632] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 171.365372][ T5632] Bluetooth: hci5: failed to register connection device [ 171.610049][ T6716] netlink: 'syz.2.262': attribute type 2 has an invalid length. [ 171.728092][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.885736][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.890687][ T6684] BTRFS error (device loop5): open_ctree failed: -4 [ 171.994998][ T6733] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 172.103562][ T6735] loop4: detected capacity change from 0 to 1024 [ 172.141519][ T6733] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 172.256240][ T31] audit: type=1326 audit(1785755784.052:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.4.260" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196119de99 code=0x7fc00000 [ 172.960582][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.221061][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 173.581172][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.598402][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.702512][ T9] usb 3-1: device descriptor read/64, error -71 [ 173.966663][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 174.005695][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.302136][ T9] usb 3-1: device descriptor read/64, error -71 [ 174.319642][ T6767] loop5: detected capacity change from 0 to 1024 [ 174.344491][ T6767] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.814151][ T9] usb usb3-port1: attempt power cycle [ 174.877237][ T6767] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 175.145522][ T6767] System zones: 0-1, 3-8 [ 175.294777][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.315639][ T6767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.388960][ T6767] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.631709][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 175.946410][ T9] usb 3-1: device descriptor read/8, error -71 [ 176.416581][ T4936] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 176.426516][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 176.426553][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 176.426575][ T4936] Workqueue: hci4 hci_rx_work [ 176.426620][ T4936] Call Trace: [ 176.426631][ T4936] [ 176.426643][ T4936] dump_stack_lvl+0xe8/0x150 [ 176.426699][ T4936] sysfs_create_dir_ns+0x271/0x2a0 [ 176.426755][ T4936] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 176.426808][ T4936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.426849][ T4936] ? do_raw_spin_unlock+0xf5/0x210 [ 176.426903][ T4936] kobject_add_internal+0x622/0xcd0 [ 176.426963][ T4936] kobject_add+0x163/0x240 [ 176.427007][ T4936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.427052][ T4936] ? __pfx_kobject_add+0x10/0x10 [ 176.427096][ T4936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.427162][ T4936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.427204][ T4936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.427242][ T4936] ? get_device_parent+0x366/0x3a0 [ 176.427287][ T4936] device_add+0x3fa/0xb80 [ 176.427325][ T4936] hci_conn_add_sysfs+0xd5/0x210 [ 176.427365][ T4936] le_conn_complete_evt+0xfef/0x1580 [ 176.427431][ T4936] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 176.427482][ T4936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.427520][ T4936] ? __mutex_unlock_slowpath+0x731/0x900 [ 176.427566][ T4936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.427603][ T4936] ? skb_pull_data+0xf0/0x200 [ 176.427658][ T4936] hci_le_conn_complete_evt+0x187/0x470 [ 176.427715][ T4936] hci_event_packet+0x67a/0xf10 [ 176.427763][ T4936] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 176.427809][ T4936] ? __pfx_hci_event_packet+0x10/0x10 [ 176.427853][ T4936] ? audit_tree_freeing_mark+0x760/0xb20 [ 176.427902][ T4936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.427938][ T4936] ? hci_send_to_monitor+0xe2/0x590 [ 176.427998][ T4936] hci_rx_work+0x3ee/0x1020 [ 176.428049][ T4936] ? process_scheduled_works+0xa20/0x14e0 [ 176.428090][ T4936] process_scheduled_works+0xa8e/0x14e0 [ 176.428165][ T4936] ? __pfx_process_scheduled_works+0x10/0x10 [ 176.428209][ T4936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.428247][ T4936] ? assign_work+0x3cf/0x5d0 [ 176.428290][ T4936] worker_thread+0xa47/0xfb0 [ 176.428367][ T4936] kthread+0x388/0x470 [ 176.428419][ T4936] ? __pfx_worker_thread+0x10/0x10 [ 176.428457][ T4936] ? __pfx_kthread+0x10/0x10 [ 176.428509][ T4936] ret_from_fork+0x514/0xb70 [ 176.428566][ T4936] ? __pfx_ret_from_fork+0x10/0x10 [ 176.428617][ T4936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 176.428655][ T4936] ? __switch_to+0xc89/0x1420 [ 176.428704][ T4936] ? __pfx_kthread+0x10/0x10 [ 176.428756][ T4936] ret_from_fork_asm+0x1a/0x30 [ 176.428808][ T4936] [ 176.428838][ T4936] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 176.729785][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.738970][ T4936] Bluetooth: hci4: failed to register connection device [ 176.743994][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.755167][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 176.793393][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.836814][ T9] usb 3-1: device descriptor read/8, error -71 [ 176.872229][ T6786] loop1: detected capacity change from 0 to 256 [ 176.984585][ T9] usb usb3-port1: unable to enumerate USB device [ 177.906794][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.478658][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.798904][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 178.956547][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.338787][ T6819] No control pipe specified [ 180.536388][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.607484][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.693316][ T6827] Illegal XDP return value 4257054318 on prog (id 13) dev syz_tun, expect packet loss! [ 180.987084][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 180.998513][ T6838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.007872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.090926][ T6838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.232729][ T29] usb 5-1: device descriptor read/64, error -71 [ 181.633431][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.805967][ T6843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.816591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.853686][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.968747][ T6060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.007938][ T29] usb 5-1: device descriptor read/64, error -71 [ 182.096192][ T6060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.122878][ T29] usb usb5-port1: attempt power cycle [ 182.274560][ T6060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.404930][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.416929][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.426976][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.440383][ T6060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.457820][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.466670][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.483291][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 182.547735][ T29] usb 5-1: device descriptor read/8, error -71 [ 182.706208][ T6859] No control pipe specified [ 182.949849][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.989094][ T29] usb 5-1: device descriptor read/8, error -71 [ 183.113671][ T29] usb usb5-port1: unable to enumerate USB device [ 183.605745][ T9] net_ratelimit: 8 callbacks suppressed [ 183.605773][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.645515][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.027155][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.617660][ T5632] Bluetooth: hci4: command tx timeout [ 185.125119][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.194966][ T6060] bridge_slave_1: left allmulticast mode [ 185.215362][ T6060] bridge_slave_1: left promiscuous mode [ 185.240977][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.307018][ T6060] bridge_slave_0: left allmulticast mode [ 185.324048][ T6060] bridge_slave_0: left promiscuous mode [ 185.347767][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.832851][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.850213][ T6897] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 185.856769][ T6897] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 185.874681][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.883078][ T6897] vhci_hcd vhci_hcd.0: Device attached [ 185.891294][ T6060] bond0 (unregistering): Released all slaves [ 185.911089][ T6903] vhci_hcd: connection closed [ 185.919878][ T5976] vhci_hcd vhci_hcd.5: stop threads [ 185.951931][ T5976] vhci_hcd vhci_hcd.5: release socket [ 185.973314][ T5976] vhci_hcd vhci_hcd.5: disconnect device [ 186.180915][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.321946][ T6060] tipc: Left network mode [ 186.381160][ T6909] No control pipe specified [ 186.451276][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.712558][ T5632] Bluetooth: hci4: command tx timeout [ 186.712854][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.278075][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.361752][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 187.501591][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.604809][ T6901] loop4: detected capacity change from 0 to 40427 [ 187.641765][ T6901] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 187.651886][ T29] usb 4-1: device descriptor read/64, error -71 [ 187.711587][ T6901] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 187.794319][ T6901] F2FS-fs (loop4): invalid crc value [ 187.912509][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.097755][ T29] usb 4-1: device descriptor read/64, error -71 [ 188.116428][ C1] Unknown status report in ack skb [ 188.157066][ T6901] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 188.164796][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.204941][ T6901] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 188.218709][ T6901] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.276912][ T29] usb usb4-port1: attempt power cycle [ 188.317117][ T6924] f2fs_ckpt-7:4: attempt to access beyond end of device [ 188.317117][ T6924] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.381596][ T6924] CPU: 0 UID: 0 PID: 6924 Comm: f2fs_ckpt-7:4 Not tainted syzkaller #0 PREEMPT(full) [ 188.381631][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 188.381646][ T6924] Call Trace: [ 188.381656][ T6924] [ 188.381666][ T6924] dump_stack_lvl+0xe8/0x150 [ 188.381716][ T6924] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 188.381757][ T6924] f2fs_write_end_io+0x124b/0x1710 [ 188.381825][ T6924] __submit_merged_bio+0x258/0x6a0 [ 188.381856][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.381886][ T6924] ? rcu_is_watching+0x15/0xb0 [ 188.381918][ T6924] __submit_merged_write_cond+0x3c9/0x4e0 [ 188.381965][ T6924] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 188.382015][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382053][ T6924] f2fs_write_data_pages+0x2a27/0x36f0 [ 188.382133][ T6924] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 188.382187][ T6924] ? arch_stack_walk+0x11b/0x150 [ 188.382248][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382273][ T6924] ? add_lock_to_list+0xc7/0x100 [ 188.382301][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382327][ T6924] ? __lock_acquire+0x13e8/0x2cf0 [ 188.382402][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382430][ T6924] ? do_raw_spin_lock+0x12b/0x2f0 [ 188.382466][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382498][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382525][ T6924] ? do_raw_spin_unlock+0xf5/0x210 [ 188.382555][ T6924] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 188.382594][ T6924] do_writepages+0x338/0x560 [ 188.382636][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382667][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382699][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382726][ T6924] ? do_raw_spin_unlock+0xf5/0x210 [ 188.382761][ T6924] filemap_fdatawrite+0x1e9/0x2f0 [ 188.382808][ T6924] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 188.382889][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382921][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.382955][ T6924] ? do_raw_spin_unlock+0xf5/0x210 [ 188.382991][ T6924] f2fs_sync_dirty_inodes+0x30e/0x830 [ 188.383052][ T6924] f2fs_write_checkpoint+0xa3d/0x2710 [ 188.383132][ T6924] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 188.383216][ T6924] ? __pfx_down_write+0x10/0x10 [ 188.383252][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.383288][ T6924] ? rcu_is_watching+0x15/0xb0 [ 188.383313][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.383347][ T6924] __checkpoint_and_complete_reqs+0x135/0x480 [ 188.383379][ T6924] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 188.383416][ T6924] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 188.383442][ T6924] ? do_raw_spin_lock+0x12b/0x2f0 [ 188.383486][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.383517][ T6924] ? schedule+0x90/0x2b0 [ 188.383553][ T6924] issue_checkpoint_thread+0xd5/0x270 [ 188.383575][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.383608][ T6924] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 188.383630][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.383659][ T6924] ? __pfx_autoremove_wake_function+0x10/0x10 [ 188.383689][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.383716][ T6924] ? __kthread_parkme+0x71/0x1f0 [ 188.383751][ T6924] ? __kthread_parkme+0x196/0x1f0 [ 188.383790][ T6924] kthread+0x388/0x470 [ 188.383828][ T6924] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 188.383851][ T6924] ? __pfx_kthread+0x10/0x10 [ 188.383889][ T6924] ret_from_fork+0x514/0xb70 [ 188.383933][ T6924] ? __pfx_ret_from_fork+0x10/0x10 [ 188.383970][ T6924] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.383998][ T6924] ? __switch_to+0xc89/0x1420 [ 188.384037][ T6924] ? __pfx_kthread+0x10/0x10 [ 188.384077][ T6924] ret_from_fork_asm+0x1a/0x30 [ 188.384121][ T6924] [ 188.748233][ T6924] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 188.784474][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.810669][ T5632] Bluetooth: hci4: command tx timeout [ 188.820851][ T6060] hsr_slave_0: left promiscuous mode [ 188.863991][ T29] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 188.903271][ T6060] hsr_slave_1: left promiscuous mode [ 188.910476][ T29] usb 4-1: device descriptor read/8, error -71 [ 188.921449][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.942098][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.952947][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.961111][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.985912][ T6060] veth1_macvtap: left promiscuous mode [ 189.000572][ T6060] veth0_macvtap: left promiscuous mode [ 189.008685][ T6060] veth1_vlan: left promiscuous mode [ 189.016354][ T6060] veth0_vlan: left promiscuous mode [ 189.192181][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 189.213594][ T29] usb 4-1: device descriptor read/8, error -71 [ 189.334645][ T29] usb usb4-port1: unable to enumerate USB device [ 189.619051][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 189.682370][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 190.387526][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.571032][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.913841][ T5632] Bluetooth: hci4: command tx timeout [ 190.955383][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 190.963460][ T6968] loop3: detected capacity change from 0 to 1024 [ 190.999120][ T6968] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.220639][ T6968] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 191.246444][ T6968] System zones: 0-1, 3-8 [ 191.327366][ T6968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.380475][ T6968] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.639424][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.716516][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.898693][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 193.558162][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.808272][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.819873][ T4936] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.838627][ T4936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.847686][ T4936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.869467][ T4936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.879741][ T4936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.979533][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.987411][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.136167][ T7013] bridge0: port 1(syz_tun) entered blocking state [ 194.184830][ T7013] bridge0: port 1(syz_tun) entered disabled state [ 194.204588][ T7013] syz_tun: entered allmulticast mode [ 194.240130][ T7013] syz_tun: entered promiscuous mode [ 194.253535][ T7013] bridge0: port 1(syz_tun) entered blocking state [ 194.260135][ T7013] bridge0: port 1(syz_tun) entered forwarding state [ 194.365146][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.393480][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.404768][ T6856] bridge_slave_0: entered allmulticast mode [ 194.413623][ T6856] bridge_slave_0: entered promiscuous mode [ 194.426116][ T29] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 194.455603][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.484320][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.520561][ T6856] bridge_slave_1: entered allmulticast mode [ 194.552547][ T6856] bridge_slave_1: entered promiscuous mode [ 194.610631][ T29] usb 4-1: device descriptor read/64, error -71 [ 194.730831][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.343'. [ 194.844837][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.860500][ T7032] batadv0: entered promiscuous mode [ 194.873739][ T7032] macsec1: entered promiscuous mode [ 194.880373][ T7032] macsec1: entered allmulticast mode [ 194.885942][ T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 194.904636][ T7032] batadv0: entered allmulticast mode [ 194.921632][ T7032] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 194.945102][ T7032] batadv0: left allmulticast mode [ 194.952107][ T7032] batadv0: left promiscuous mode [ 195.005798][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.021475][ T7043] syzkaller0: entered promiscuous mode [ 195.027427][ T7043] syzkaller0: entered allmulticast mode [ 195.035035][ T7044] tipc: Started in network mode [ 195.037209][ T29] usb 4-1: device descriptor read/64, error -71 [ 195.052211][ T7044] tipc: Node identity 3e16e547e4b3, cluster identity 4711 [ 195.074330][ T7044] tipc: Enabled bearer , priority 0 [ 195.087064][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 195.100012][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.124901][ T7041] tipc: Resetting bearer [ 195.186367][ T29] usb usb4-port1: attempt power cycle [ 195.563243][ T7033] tipc: Resetting bearer [ 195.572298][ T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.670945][ T29] usb 4-1: device descriptor read/8, error -71 [ 195.864814][ T7033] tipc: Disabling bearer [ 195.890339][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.959911][ T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 195.985248][ T5632] Bluetooth: hci6: command tx timeout [ 196.042847][ T29] usb 4-1: device descriptor read/8, error -71 [ 196.205281][ T29] usb usb4-port1: unable to enumerate USB device [ 196.388280][ T6856] team0: Port device team_slave_0 added [ 196.410108][ T6856] team0: Port device team_slave_1 added [ 196.470501][ T7052] loop2: detected capacity change from 0 to 1024 [ 196.488231][ T7052] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.531038][ T7052] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 196.544171][ T7052] System zones: 0-1, 3-8 [ 196.555777][ T7052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.570165][ T7052] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.612882][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.515491][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.532589][ T5641] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.734678][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.767739][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.796318][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.810771][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.821633][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.848172][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.058426][ T5632] Bluetooth: hci6: command tx timeout [ 198.091767][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.369542][ T6856] hsr_slave_0: entered promiscuous mode [ 198.384683][ T6856] hsr_slave_1: entered promiscuous mode [ 198.401419][ T6856] debugfs: 'hsr0' already exists in 'hsr' [ 198.417468][ T6856] Cannot create hsr debugfs directory [ 198.530579][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.551861][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.671021][ T9] usb 5-1: device descriptor read/64, error -71 [ 198.848827][ T7063] loop5: detected capacity change from 0 to 40427 [ 198.866938][ T7063] F2FS-fs (loop5): invalid crc value [ 198.951814][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 199.021026][ T7092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.027445][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 199.035333][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.046972][ T7091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.084672][ T7092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.123471][ T9] usb 5-1: device descriptor read/64, error -71 [ 199.265632][ T9] usb usb5-port1: attempt power cycle [ 199.287152][ T7063] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 199.337182][ T7063] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 199.432267][ T5620] syz-executor: attempt to access beyond end of device [ 199.432267][ T5620] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.463473][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 199.463510][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 199.463525][ T5620] Call Trace: [ 199.463535][ T5620] [ 199.463545][ T5620] dump_stack_lvl+0xe8/0x150 [ 199.463593][ T5620] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 199.463635][ T5620] f2fs_write_end_io+0x124b/0x1710 [ 199.463701][ T5620] __submit_merged_bio+0x258/0x6a0 [ 199.463733][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.463764][ T5620] ? rcu_is_watching+0x15/0xb0 [ 199.463796][ T5620] __submit_merged_write_cond+0x3c9/0x4e0 [ 199.463839][ T5620] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 199.463889][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.463928][ T5620] f2fs_write_data_pages+0x2a27/0x36f0 [ 199.463971][ T5620] ? is_bpf_text_address+0x26/0x2b0 [ 199.464051][ T5620] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 199.464086][ T5620] ? is_bpf_text_address+0x26/0x2b0 [ 199.464137][ T5620] ? arch_stack_walk+0xfb/0x150 [ 199.464198][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.464228][ T5620] ? add_lock_to_list+0xc7/0x100 [ 199.464256][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.464285][ T5620] ? __lock_acquire+0x13e8/0x2cf0 [ 199.464354][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.464383][ T5620] ? do_raw_spin_lock+0x12b/0x2f0 [ 199.464420][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.464453][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.464480][ T5620] ? do_raw_spin_unlock+0xf5/0x210 [ 199.464511][ T5620] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 199.464550][ T5620] do_writepages+0x338/0x560 [ 199.464590][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.464621][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.464655][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.464683][ T5620] ? do_raw_spin_unlock+0xf5/0x210 [ 199.464718][ T5620] filemap_fdatawrite+0x1e9/0x2f0 [ 199.464760][ T5620] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 199.464840][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.464872][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.464906][ T5620] ? do_raw_spin_unlock+0xf5/0x210 [ 199.464941][ T5620] f2fs_sync_dirty_inodes+0x30e/0x830 [ 199.465006][ T5620] f2fs_write_checkpoint+0xa3d/0x2710 [ 199.465045][ T5620] ? __lock_acquire+0x683/0x2cf0 [ 199.465117][ T5620] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 199.465156][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.465248][ T5620] kill_f2fs_super+0x2f6/0x700 [ 199.465294][ T5620] ? __pfx_kill_f2fs_super+0x10/0x10 [ 199.465347][ T5620] ? call_rcu+0x64b/0x8b0 [ 199.465371][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.465399][ T5620] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.465428][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 199.465473][ T5620] deactivate_locked_super+0xbc/0x130 [ 199.465515][ T5620] cleanup_mnt+0x3d3/0x460 [ 199.465546][ T5620] task_work_run+0x1d9/0x270 [ 199.465575][ T5620] ? __pfx_task_work_run+0x10/0x10 [ 199.465611][ T5620] exit_to_user_mode_loop+0x1fa/0x730 [ 199.465647][ T5620] ? rcu_is_watching+0x15/0xb0 [ 199.465673][ T5620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.465700][ T5620] do_syscall_64+0x353/0x580 [ 199.465729][ T5620] ? trace_irq_disable+0x3b/0x140 [ 199.465769][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.465795][ T5620] RIP: 0033:0x7fe4c1d9f0d7 [ 199.465818][ T5620] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 199.465837][ T5620] RSP: 002b:00007ffc343cbbd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 199.465864][ T5620] RAX: 0000000000000000 RBX: 00007fe4c1e3330a RCX: 00007fe4c1d9f0d7 [ 199.465881][ T5620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc343cbc90 [ 199.465896][ T5620] RBP: 00007ffc343cbc90 R08: 00007ffc343ccc90 R09: 00000000ffffffff [ 199.465914][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc343ccd20 [ 199.465929][ T5620] R13: 00007fe4c1e3330a R14: 00000000000308ed R15: 00007ffc343ccd60 [ 199.465974][ T5620] [ 199.708033][ T6856] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.797633][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 199.830611][ T5620] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 199.845541][ T9] usb 5-1: device descriptor read/8, error -71 [ 199.944817][ T6856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.060600][ T6856] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.075269][ T6856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.170578][ T5632] Bluetooth: hci6: command tx timeout [ 200.200173][ T6856] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.239300][ T6856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.269978][ T6856] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.343427][ T6856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.518777][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.528203][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 200.553821][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.579390][ T7006] bridge_slave_0: entered allmulticast mode [ 200.580284][ T9] usb 5-1: device descriptor read/8, error -71 [ 200.608846][ T7006] bridge_slave_0: entered promiscuous mode [ 200.624237][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.641358][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.659697][ T7006] bridge_slave_1: entered allmulticast mode [ 200.696755][ T7006] bridge_slave_1: entered promiscuous mode [ 200.738503][ T9] usb usb5-port1: unable to enumerate USB device [ 200.829314][ T7124] loop3: detected capacity change from 0 to 128 [ 200.869116][ T29] net_ratelimit: 4 callbacks suppressed [ 200.869133][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.922336][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.938952][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.048803][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.201231][ T7006] team0: Port device team_slave_0 added [ 202.242955][ T5632] Bluetooth: hci6: command tx timeout [ 202.243342][ T7006] team0: Port device team_slave_1 added [ 202.324892][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.494494][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 202.514347][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.522416][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.539289][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.561000][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.626960][ T7006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.629983][ T29] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 202.676153][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.682333][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.696695][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.723163][ T29] usb 5-1: Product: syz [ 202.735858][ T29] usb 5-1: Manufacturer: syz [ 202.765521][ T29] usb 5-1: SerialNumber: syz [ 202.797105][ T29] usb 5-1: config 0 descriptor?? [ 202.935117][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.944235][ T7006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.965642][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.041549][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 203.103162][ T7006] hsr_slave_0: entered promiscuous mode [ 203.116702][ T7006] hsr_slave_1: entered promiscuous mode [ 203.130450][ T7006] debugfs: 'hsr0' already exists in 'hsr' [ 203.146994][ T7006] Cannot create hsr debugfs directory [ 203.640344][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.681954][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.710184][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.717493][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.761351][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.768695][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.999984][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.106842][ T7006] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 204.115936][ T31] audit: type=1800 audit(1785755815.643:5): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.367" name="UDC" dev="configfs" ino=14424 res=0 errno=0 [ 204.123054][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 204.161295][ T7006] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 204.217182][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.264221][ T7006] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 204.280681][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.290174][ T7006] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.306656][ T7006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.334329][ T7172] bridge0: port 3(syz_tun) entered blocking state [ 204.348072][ T7172] bridge0: port 3(syz_tun) entered disabled state [ 204.355930][ T7172] syz_tun: entered allmulticast mode [ 204.370608][ T7172] syz_tun: entered promiscuous mode [ 204.384240][ T7172] bridge0: port 3(syz_tun) entered blocking state [ 204.390922][ T7172] bridge0: port 3(syz_tun) entered forwarding state [ 204.436625][ T7177] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 204.648316][ T7187] loop5: detected capacity change from 0 to 256 [ 204.662568][ T7187] vfat: Deprecated parameter 'posix' [ 204.688806][ T7187] FAT-fs: "posix" option is obsolete, not supported now [ 204.689828][ T5753] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 204.728050][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.825571][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.866367][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.873661][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.993927][ T29] usb 5-1: USB disconnect, device number 14 [ 204.998799][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.007149][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.011829][ T5753] usb 4-1: device descriptor read/64, error -71 [ 205.138056][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.435429][ T5753] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.933530][ T5753] usb 4-1: device descriptor read/64, error -71 [ 206.005847][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.086370][ T5753] usb usb4-port1: attempt power cycle [ 206.152927][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.163730][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.350252][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 206.359144][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 206.365336][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 206.371368][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 206.378890][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 206.454244][ T5753] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 206.478618][ T5753] usb 4-1: device descriptor read/8, error -71 [ 206.725857][ T5753] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 206.756881][ T6856] veth0_vlan: entered promiscuous mode [ 206.776190][ T5753] usb 4-1: device descriptor read/8, error -71 [ 206.793565][ T6856] veth1_vlan: entered promiscuous mode [ 206.856404][ T6856] veth0_macvtap: entered promiscuous mode [ 206.870877][ T6856] veth1_macvtap: entered promiscuous mode [ 206.904482][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.915733][ T5753] usb usb4-port1: unable to enumerate USB device [ 206.929775][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.972283][ T6060] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.987636][ T6060] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.033753][ T6060] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.197659][ T6060] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.212184][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.262547][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.268104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 208.678599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 208.961652][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.969818][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.089563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 209.586811][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.600828][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.911930][ T7240] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.276252][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.613354][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.635831][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.644794][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.665083][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.885085][ T7249] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 211.011183][ T7252] syzkaller0: entered promiscuous mode [ 211.033290][ T7252] syzkaller0: entered allmulticast mode [ 211.078765][ T7252] tipc: Started in network mode [ 211.104541][ T7252] tipc: Node identity 1a2a3c381676, cluster identity 4711 [ 211.132347][ T7252] tipc: Enabled bearer , priority 0 [ 211.198535][ T7251] tipc: Resetting bearer [ 211.262422][ T7251] tipc: Disabling bearer [ 211.298751][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.513156][ T7006] veth0_vlan: entered promiscuous mode [ 211.569038][ T7262] syzkaller1: entered promiscuous mode [ 211.577811][ T7262] syzkaller1: entered allmulticast mode [ 211.588473][ T7006] veth1_vlan: entered promiscuous mode [ 211.708022][ T7006] veth0_macvtap: entered promiscuous mode [ 211.734173][ T5783] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 211.745344][ T7006] veth1_macvtap: entered promiscuous mode [ 211.800442][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.821897][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.849036][ T6062] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.898260][ T6062] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.899250][ T7273] CIFS: Attempting to mount //127.0.0.1/share [ 211.920112][ T7273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.920730][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.931001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.939682][ T6062] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.940716][ T6062] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.972685][ T7273] CIFS: VFS: Error connecting to socket. Aborting operation. [ 211.982029][ T7273] CIFS: VFS: cifs_mount failed w/return code = -111 [ 211.982905][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.387'. [ 212.001009][ T5783] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 212.019199][ T5783] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 212.061692][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.105351][ T5783] usb 5-1: config 0 descriptor?? [ 212.139203][ T5783] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 212.179001][ T5783] dvb-usb: bulk message failed: -22 (3/0) [ 212.417340][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.438125][ T7267] dibusb: i2c wr: len=4096 is too big! [ 212.438125][ T7267] [ 212.474941][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.501156][ T5783] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 212.527715][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.537731][ T5783] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 212.569301][ T5783] usb 5-1: media controller created [ 212.624241][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.652089][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.660728][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.665124][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.736669][ T5783] dvb-usb: bulk message failed: -22 (6/0) [ 212.752021][ T5783] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 212.824516][ T5783] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 212.893818][ T5783] dvb-usb: schedule remote query interval to 150 msecs. [ 212.902686][ T5783] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 212.963598][ T7289] syzkaller0: entered promiscuous mode [ 212.966983][ T5783] usb 5-1: USB disconnect, device number 15 [ 212.978384][ T7289] syzkaller0: entered allmulticast mode [ 213.998741][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.097027][ T7306] Need at least one configuration in g_uac2. [ 214.162054][ T7306] udc usbip-vudc.0: failed to start g_uac2: -22 [ 214.174470][ T5783] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 214.202202][ T7306] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 214.257085][ T7306] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 215.357098][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.442827][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.469849][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.789134][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.566593][ T7361] syzkaller0: entered promiscuous mode [ 218.591645][ T7361] syzkaller0: entered allmulticast mode [ 218.747163][ T7371] afs: Bad value for 'source' [ 218.857258][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.7.412'. [ 219.233652][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.257071][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.477654][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.702312][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.786350][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.806113][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.815528][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.827454][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.846358][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.277033][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.340494][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.946525][ T51] Bluetooth: hci7: command tx timeout [ 222.282244][ T7406] loop3: detected capacity change from 0 to 2048 [ 222.352313][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.365270][ T7409] loop7: detected capacity change from 0 to 512 [ 222.394230][ T7410] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.436305][ T7409] ext2: Unknown parameter 'obj_type' [ 222.509057][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.596804][ T7409] loop7: detected capacity change from 0 to 512 [ 222.644139][ T7409] EXT4-fs: quotafile must be on filesystem root [ 223.786138][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.884363][ T7422] loop3: detected capacity change from 0 to 512 [ 224.029223][ T51] Bluetooth: hci7: command tx timeout [ 224.166113][ T7422] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 224.752650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.853272][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.025000][ T31] audit: type=1800 audit(1785755836.522:6): pid=7422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.423" name="file1" dev="loop3" ino=1048641 res=0 errno=0 [ 225.157334][ T31] audit: type=1804 audit(1785755836.522:7): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.423" name="/newroot/86/file0/file1" dev="loop3" ino=1048641 res=1 errno=0 [ 225.557548][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.499765][ T51] Bluetooth: hci7: command tx timeout [ 226.971037][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.590981][ T51] Bluetooth: hci7: command tx timeout [ 228.658835][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.715059][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.835152][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.864241][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.885828][ T7369] bridge_slave_0: entered allmulticast mode [ 228.908409][ T7369] bridge_slave_0: entered promiscuous mode [ 228.925390][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.946637][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.967454][ T7369] bridge_slave_1: entered allmulticast mode [ 228.986705][ T7369] bridge_slave_1: entered promiscuous mode [ 229.040079][ T7506] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 229.113997][ T7369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.156030][ T7369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.202267][ T7483] loop7: detected capacity change from 0 to 32768 [ 229.232485][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.270234][ T7369] team0: Port device team_slave_0 added [ 229.279679][ T7369] team0: Port device team_slave_1 added [ 229.326701][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.334093][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.360819][ T7369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.376615][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.384358][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.413737][ T7369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.474158][ T7483] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 229.691760][ T7369] hsr_slave_0: entered promiscuous mode [ 229.734994][ T7369] hsr_slave_1: entered promiscuous mode [ 229.755123][ T7369] debugfs: 'hsr0' already exists in 'hsr' [ 229.771551][ T7369] Cannot create hsr debugfs directory [ 229.798341][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.890376][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.905044][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.915169][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.926142][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.230641][ T7006] ocfs2: Unmounting device (7,7) on (node local) [ 230.320655][ T5638] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 230.330688][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 230.330718][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.330735][ T5638] Workqueue: hci3 hci_rx_work [ 230.330769][ T5638] Call Trace: [ 230.330779][ T5638] [ 230.330789][ T5638] dump_stack_lvl+0xe8/0x150 [ 230.330830][ T5638] sysfs_create_dir_ns+0x271/0x2a0 [ 230.330872][ T5638] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 230.330912][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.330943][ T5638] ? do_raw_spin_unlock+0xf5/0x210 [ 230.330980][ T5638] kobject_add_internal+0x622/0xcd0 [ 230.331025][ T5638] kobject_add+0x163/0x240 [ 230.331056][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.331093][ T5638] ? __pfx_kobject_add+0x10/0x10 [ 230.331125][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.331157][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.331191][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.331220][ T5638] ? get_device_parent+0x366/0x3a0 [ 230.331255][ T5638] device_add+0x3fa/0xb80 [ 230.331288][ T5638] hci_conn_add_sysfs+0xd5/0x210 [ 230.331321][ T5638] le_conn_complete_evt+0xfef/0x1580 [ 230.331372][ T5638] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 230.331412][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.331449][ T5638] ? __mutex_unlock_slowpath+0x731/0x900 [ 230.331486][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.331515][ T5638] ? skb_pull_data+0xf0/0x200 [ 230.331555][ T5638] hci_le_conn_complete_evt+0x187/0x470 [ 230.331601][ T5638] hci_event_packet+0x67a/0xf10 [ 230.331645][ T5638] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 230.331679][ T5638] ? __pfx_hci_event_packet+0x10/0x10 [ 230.331718][ T5638] ? audit_tree_freeing_mark+0x760/0xb20 [ 230.331752][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.331782][ T5638] ? hci_send_to_monitor+0xe2/0x590 [ 230.331826][ T5638] hci_rx_work+0x3ee/0x1020 [ 230.331867][ T5638] ? process_scheduled_works+0xa20/0x14e0 [ 230.331898][ T5638] process_scheduled_works+0xa8e/0x14e0 [ 230.331961][ T5638] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.331999][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.332028][ T5638] ? assign_work+0x3cf/0x5d0 [ 230.332065][ T5638] worker_thread+0xa47/0xfb0 [ 230.332099][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.332140][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.332169][ T5638] ? __kthread_parkme+0x71/0x1f0 [ 230.332215][ T5638] kthread+0x388/0x470 [ 230.332254][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 230.332283][ T5638] ? __pfx_kthread+0x10/0x10 [ 230.332323][ T5638] ret_from_fork+0x514/0xb70 [ 230.332366][ T5638] ? __pfx_ret_from_fork+0x10/0x10 [ 230.332405][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.332467][ T5638] ? __switch_to+0xc89/0x1420 [ 230.332505][ T5638] ? __pfx_kthread+0x10/0x10 [ 230.332545][ T5638] ret_from_fork_asm+0x1a/0x30 [ 230.332591][ T5638] [ 230.621341][ T5638] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 230.635697][ T5638] Bluetooth: hci3: failed to register connection device [ 230.778162][ T7369] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 230.836025][ T7526] netlink: 'syz.3.446': attribute type 2 has an invalid length. [ 230.965203][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.978892][ T7369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.994095][ T7369] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 231.036067][ T7369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.045980][ T7369] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 231.098764][ T7369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.124009][ T7369] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 231.199422][ T7369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.413701][ T7546] netlink: 'syz.5.449': attribute type 2 has an invalid length. [ 231.504280][ T7546] netlink: 'syz.5.449': attribute type 1 has an invalid length. [ 231.752660][ T7549] CIFS: Attempting to mount //127.0.0.1/share [ 232.338324][ T7549] CIFS: VFS: Error connecting to socket. Aborting operation. [ 232.353681][ T7549] CIFS: VFS: cifs_mount failed w/return code = -111 [ 232.941029][ T7369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.004297][ T7369] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.063509][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.070794][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.309824][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.317121][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.341322][ T7562] bridge0: port 3(syz_tun) entered blocking state [ 233.349864][ T7562] bridge0: port 3(syz_tun) entered disabled state [ 233.365382][ T7562] syz_tun: entered allmulticast mode [ 233.684799][ T29] net_ratelimit: 2 callbacks suppressed [ 233.684821][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.722490][ T7562] syz_tun: entered promiscuous mode [ 233.748929][ T7562] bridge0: port 3(syz_tun) entered blocking state [ 233.755633][ T7562] bridge0: port 3(syz_tun) entered forwarding state [ 233.855192][ T5638] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 234.095068][ T7577] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 234.279202][ T7582] syzkaller0: entered promiscuous mode [ 234.302544][ T7582] syzkaller0: entered allmulticast mode [ 234.472647][ T7590] loop5: detected capacity change from 0 to 128 [ 234.512181][ T7590] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.555601][ T7369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.645188][ T7590] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.755510][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.810588][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.183121][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.530958][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.539146][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.557563][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.881148][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.007127][ T7610] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 236.019789][ T7610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.028144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.190690][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 237.346757][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.473'. [ 238.323416][ T7631] syzkaller0: entered promiscuous mode [ 238.347220][ T7631] syzkaller0: entered allmulticast mode [ 238.381785][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.474'. [ 238.426424][ T5638] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 238.436451][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 238.436483][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 238.436499][ T5638] Workqueue: hci6 hci_rx_work [ 238.436534][ T5638] Call Trace: [ 238.436543][ T5638] [ 238.436553][ T5638] dump_stack_lvl+0xe8/0x150 [ 238.436593][ T5638] sysfs_create_dir_ns+0x271/0x2a0 [ 238.436636][ T5638] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 238.436672][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.436698][ T5638] ? do_raw_spin_unlock+0xf5/0x210 [ 238.436731][ T5638] kobject_add_internal+0x622/0xcd0 [ 238.436774][ T5638] kobject_add+0x163/0x240 [ 238.436802][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.436836][ T5638] ? __pfx_kobject_add+0x10/0x10 [ 238.436864][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.436892][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.436927][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.436952][ T5638] ? get_device_parent+0x366/0x3a0 [ 238.436984][ T5638] device_add+0x3fa/0xb80 [ 238.437012][ T5638] hci_conn_add_sysfs+0xd5/0x210 [ 238.437042][ T5638] le_conn_complete_evt+0xfef/0x1580 [ 238.437087][ T5638] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 238.437122][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.437149][ T5638] ? __mutex_unlock_slowpath+0x731/0x900 [ 238.437181][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.437207][ T5638] ? skb_pull_data+0xf0/0x200 [ 238.437242][ T5638] hci_le_conn_complete_evt+0x187/0x470 [ 238.437283][ T5638] hci_event_packet+0x67a/0xf10 [ 238.437318][ T5638] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 238.437349][ T5638] ? __pfx_hci_event_packet+0x10/0x10 [ 238.437381][ T5638] ? audit_tree_freeing_mark+0x760/0xb20 [ 238.437413][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.437438][ T5638] ? hci_send_to_monitor+0xe2/0x590 [ 238.437478][ T5638] hci_rx_work+0x3ee/0x1020 [ 238.437515][ T5638] ? process_scheduled_works+0xa20/0x14e0 [ 238.437544][ T5638] process_scheduled_works+0xa8e/0x14e0 [ 238.437600][ T5638] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.437633][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.437659][ T5638] ? assign_work+0x3cf/0x5d0 [ 238.437691][ T5638] worker_thread+0xa47/0xfb0 [ 238.437727][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.437763][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.437789][ T5638] ? __kthread_parkme+0x71/0x1f0 [ 238.437829][ T5638] kthread+0x388/0x470 [ 238.437864][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 238.437889][ T5638] ? __pfx_kthread+0x10/0x10 [ 238.437930][ T5638] ret_from_fork+0x514/0xb70 [ 238.437968][ T5638] ? __pfx_ret_from_fork+0x10/0x10 [ 238.438002][ T5638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.438028][ T5638] ? __switch_to+0xc89/0x1420 [ 238.438060][ T5638] ? __pfx_kthread+0x10/0x10 [ 238.438096][ T5638] ret_from_fork_asm+0x1a/0x30 [ 238.438136][ T5638] [ 238.439832][ T5638] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 238.748678][ T10] net_ratelimit: 2 callbacks suppressed [ 238.748703][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.771683][ T5638] Bluetooth: hci6: failed to register connection device [ 239.025480][ T7642] netlink: 'syz.7.477': attribute type 2 has an invalid length. [ 239.205268][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.6.474'. [ 239.439200][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.474'. [ 239.462954][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.745905][ T7629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.793753][ T7639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.808348][ T7639] bond1: (slave bond0): Enslaving as an active interface with an up link [ 240.295660][ T5922] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 240.576081][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 240.768191][ T5922] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.887365][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.976017][ T5922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.009422][ T5922] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 241.069038][ T5922] usb 4-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 241.103258][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.138295][ T5922] usb 4-1: Product: syz [ 241.152062][ T5922] usb 4-1: Manufacturer: syz [ 241.176742][ T5922] usb 4-1: SerialNumber: syz [ 241.634167][ T5753] usb 4-1: USB disconnect, device number 15 [ 241.718747][ T7369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.798751][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.999840][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.087077][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.280528][ T7693] loop4: detected capacity change from 0 to 128 [ 244.281960][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.505129][ T7703] syzkaller0: entered promiscuous mode [ 244.523941][ T7703] syzkaller0: entered allmulticast mode [ 244.607029][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.836903][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.942111][ T7369] veth0_vlan: entered promiscuous mode [ 245.041486][ T7369] veth1_vlan: entered promiscuous mode [ 245.113391][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.7.499'. [ 245.292515][ T7369] veth0_macvtap: entered promiscuous mode [ 245.310634][ T7369] veth1_macvtap: entered promiscuous mode [ 245.324318][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.347688][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.359406][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.516536][ T138] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.529356][ T138] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.550115][ T138] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.566904][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 245.582892][ T138] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.747471][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.783750][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.880879][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.939588][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.950403][ T7499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.962405][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.986043][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.991368][ T7499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.047184][ T7741] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 246.382087][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.431187][ T7749] 9p: Bad value for 'rfdno' [ 247.487049][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.572155][ T7772] fuse: Bad value for 'fd' [ 249.848383][ T5753] net_ratelimit: 15 callbacks suppressed [ 249.848414][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.110099][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.721831][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.961809][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.978377][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.019412][ T7812] fuse: Bad value for 'fd' [ 252.117200][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.162794][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.080265][ T7816] loop8: detected capacity change from 0 to 32768 [ 254.197954][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.206472][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.157931][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.238666][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.480165][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.486715][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.757769][ T7865] fuse: Bad value for 'fd' [ 255.875844][ T7867] syzkaller0: entered promiscuous mode [ 255.893333][ T7867] syzkaller0: entered allmulticast mode [ 256.936906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 257.346520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 257.618119][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.190809][ T7867] tipc: Started in network mode [ 258.200073][ T7867] tipc: Node identity f225d332dd3a, cluster identity 4711 [ 258.205658][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.208214][ T7867] tipc: Enabled bearer , priority 0 [ 258.258411][ T7866] tipc: Resetting bearer [ 258.318477][ T7866] tipc: Disabling bearer [ 259.821666][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.247799][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.261927][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.327394][ T7900] netlink: 'syz.8.557': attribute type 12 has an invalid length. [ 261.335875][ T7900] netlink: 'syz.8.557': attribute type 29 has an invalid length. [ 261.346636][ T7900] netlink: 148 bytes leftover after parsing attributes in process `syz.8.557'. [ 261.355758][ T7900] netlink: 'syz.8.557': attribute type 1 has an invalid length. [ 261.364818][ T7900] netlink: 'syz.8.557': attribute type 2 has an invalid length. [ 261.373444][ T7900] netlink: 11 bytes leftover after parsing attributes in process `syz.8.557'. [ 262.280443][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.296983][ T7857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.309335][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.318146][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.398156][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.795207][ T7918] loop4: detected capacity change from 0 to 40427 [ 263.969710][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.089397][ T7918] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 264.127550][ T7918] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 264.178436][ T7918] F2FS-fs (loop4): invalid crc value [ 264.296866][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.914566][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.969606][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 264.983115][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 264.991517][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 264.999768][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 265.007900][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 265.144148][ T7918] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 265.280517][ T7918] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 265.308247][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 265.392992][ T7918] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 265.706829][ T7918] F2FS-fs (loop4): Start checkpoint disabled! [ 265.844380][ T7936] can: request_module (can-proto-3) failed. [ 265.902152][ T7950] netlink: 'syz.7.570': attribute type 12 has an invalid length. [ 265.959904][ T7950] netlink: 'syz.7.570': attribute type 29 has an invalid length. [ 266.017992][ T7950] netlink: 148 bytes leftover after parsing attributes in process `syz.7.570'. [ 266.139507][ T7950] netlink: 59 bytes leftover after parsing attributes in process `syz.7.570'. [ 266.201705][ T7918] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 266.270520][ T7918] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 266.318958][ T7918] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 266.447918][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:201' [ 266.457715][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 266.457745][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 266.457762][ T51] Workqueue: hci7 hci_rx_work [ 266.457796][ T51] Call Trace: [ 266.457806][ T51] [ 266.457816][ T51] dump_stack_lvl+0xe8/0x150 [ 266.457858][ T51] sysfs_create_dir_ns+0x271/0x2a0 [ 266.457899][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 266.457947][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.457978][ T51] ? do_raw_spin_unlock+0xf5/0x210 [ 266.458015][ T51] kobject_add_internal+0x622/0xcd0 [ 266.458061][ T51] kobject_add+0x163/0x240 [ 266.458093][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.458131][ T51] ? __pfx_kobject_add+0x10/0x10 [ 266.458163][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.458195][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.458228][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.458278][ T51] ? get_device_parent+0x366/0x3a0 [ 266.458313][ T51] device_add+0x3fa/0xb80 [ 266.458345][ T51] hci_conn_add_sysfs+0xd5/0x210 [ 266.458379][ T51] le_conn_complete_evt+0xfef/0x1580 [ 266.458429][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 266.458468][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.458497][ T51] ? __mutex_unlock_slowpath+0x731/0x900 [ 266.458533][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.458562][ T51] ? skb_pull_data+0xf0/0x200 [ 266.458602][ T51] hci_le_conn_complete_evt+0x187/0x470 [ 266.458648][ T51] hci_event_packet+0x67a/0xf10 [ 266.458688][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 266.458722][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 266.458759][ T51] ? audit_tree_freeing_mark+0x760/0xb20 [ 266.458793][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.458822][ T51] ? hci_send_to_monitor+0xe2/0x590 [ 266.458867][ T51] hci_rx_work+0x3ee/0x1020 [ 266.458908][ T51] ? process_scheduled_works+0xa20/0x14e0 [ 266.458949][ T51] process_scheduled_works+0xa8e/0x14e0 [ 266.459017][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 266.459054][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.459083][ T51] ? assign_work+0x3cf/0x5d0 [ 266.459118][ T51] worker_thread+0xa47/0xfb0 [ 266.459223][ T51] kthread+0x388/0x470 [ 266.459262][ T51] ? __pfx_worker_thread+0x10/0x10 [ 266.459291][ T51] ? __pfx_kthread+0x10/0x10 [ 266.459330][ T51] ret_from_fork+0x514/0xb70 [ 266.459373][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 266.459410][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.459439][ T51] ? __switch_to+0xc89/0x1420 [ 266.459475][ T51] ? __pfx_kthread+0x10/0x10 [ 266.459514][ T51] ret_from_fork_asm+0x1a/0x30 [ 266.459558][ T51] [ 266.460696][ T51] kobject: kobject_add_internal failed for hci7:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 266.747833][ T51] Bluetooth: hci7: failed to register connection device [ 266.755004][ T7958] netlink: 'syz.8.573': attribute type 2 has an invalid length. [ 266.997519][ T5753] net_ratelimit: 1 callbacks suppressed [ 266.997539][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.076431][ T51] Bluetooth: hci8: command tx timeout [ 267.117256][ T7962] syzkaller0: entered promiscuous mode [ 267.147937][ T7962] syzkaller0: entered allmulticast mode [ 267.316860][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.322733][ T5638] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 267.338300][ T5638] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 267.360204][ T5638] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 267.443877][ T5638] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 267.456430][ T5638] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 268.048029][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.279375][ T7851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.288265][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.300260][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.737902][ T7990] netlink: 'syz.8.582': attribute type 12 has an invalid length. [ 268.766084][ T7990] netlink: 'syz.8.582': attribute type 29 has an invalid length. [ 268.785274][ T7990] netlink: 148 bytes leftover after parsing attributes in process `syz.8.582'. [ 268.823710][ T7990] netlink: 59 bytes leftover after parsing attributes in process `syz.8.582'. [ 268.894338][ T51] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 269.124733][ T7997] netlink: 'syz.7.584': attribute type 2 has an invalid length. [ 269.156667][ T51] Bluetooth: hci8: command tx timeout [ 269.559493][ T51] Bluetooth: hci9: command tx timeout [ 269.610735][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.647589][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.697891][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.340177][ T51] Bluetooth: hci8: command tx timeout [ 271.636479][ T51] Bluetooth: hci9: command tx timeout [ 271.831290][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.564677][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.581989][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.609664][ T7931] bridge_slave_0: entered allmulticast mode [ 272.639305][ T7931] bridge_slave_0: entered promiscuous mode [ 272.651844][ T7931] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.671389][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.696499][ T7931] bridge_slave_1: entered allmulticast mode [ 272.724042][ T7931] bridge_slave_1: entered promiscuous mode [ 272.852556][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.937349][ T8034] syzkaller0: entered promiscuous mode [ 272.962427][ T8034] syzkaller0: entered allmulticast mode [ 273.091850][ T8054] netlink: 'syz.3.596': attribute type 12 has an invalid length. [ 273.101306][ T8054] netlink: 'syz.3.596': attribute type 29 has an invalid length. [ 273.109737][ T8054] netlink: 148 bytes leftover after parsing attributes in process `syz.3.596'. [ 273.135661][ T8054] netlink: 59 bytes leftover after parsing attributes in process `syz.3.596'. [ 273.224867][ T8058] bridge0: port 3(syz_tun) entered blocking state [ 273.227414][ T8064] Bluetooth: MGMT ver 1.23 [ 273.254213][ T8058] bridge0: port 3(syz_tun) entered disabled state [ 273.284249][ T8058] syz_tun: entered allmulticast mode [ 273.305753][ T8058] syz_tun: entered promiscuous mode [ 273.333436][ T8058] bridge0: port 3(syz_tun) entered blocking state [ 273.340088][ T8058] bridge0: port 3(syz_tun) entered forwarding state [ 273.394704][ T7931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.406842][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.408204][ T5638] Bluetooth: hci8: command tx timeout [ 273.424562][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 273.424789][ T7860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.442163][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.454021][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.653937][ T8065] loop4: detected capacity change from 0 to 32768 [ 273.662719][ T8065] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.600 (8065) [ 273.716681][ T5638] Bluetooth: hci9: command tx timeout [ 273.717229][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.748851][ T8069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.759428][ T8069] IPv4: Oversized IP packet from 127.202.26.0 [ 273.761350][ T7931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.780436][ T8065] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.390046][ T8065] BTRFS info (device loop4): using sha256 checksum algorithm [ 274.520369][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.635636][ T7931] team0: Port device team_slave_0 added [ 274.713211][ T8065] BTRFS info (device loop4): enabling ssd optimizations [ 274.742014][ T8065] BTRFS info (device loop4): turning on async discard [ 274.766479][ T8065] BTRFS info (device loop4): enabling free space tree [ 274.792829][ T8092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.973979][ T7931] team0: Port device team_slave_1 added [ 275.006715][ T5628] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.544876][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.593896][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 275.613953][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.664750][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 275.698022][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 275.730406][ T7931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.808083][ T5638] Bluetooth: hci9: command tx timeout [ 275.927570][ T8097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.020709][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.034544][ T8105] bond1: (slave bond0): Enslaving as an active interface with an up link [ 276.066149][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.083888][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.115393][ T7931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.182861][ T8120] netlink: 'syz.7.612': attribute type 12 has an invalid length. [ 276.202656][ T8120] netlink: 'syz.7.612': attribute type 29 has an invalid length. [ 276.226798][ T8120] netlink: 148 bytes leftover after parsing attributes in process `syz.7.612'. [ 276.251867][ T8120] netlink: 59 bytes leftover after parsing attributes in process `syz.7.612'. [ 276.442130][ T8135] CIFS: Attempting to mount //127.0.0.1/share [ 276.467503][ T8124] syzkaller0: entered promiscuous mode [ 276.473560][ T8124] syzkaller0: entered allmulticast mode [ 276.522765][ T8127] syzkaller0: entered promiscuous mode [ 276.529634][ T8127] syzkaller0: entered allmulticast mode [ 277.582456][ T8135] CIFS: VFS: cifs_mount failed w/return code = -112 [ 278.775482][ T5753] net_ratelimit: 17 callbacks suppressed [ 278.775508][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.176965][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.185931][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.194843][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.277851][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.859471][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.991791][ T7931] hsr_slave_0: entered promiscuous mode [ 281.031692][ T7931] hsr_slave_1: entered promiscuous mode [ 281.065608][ T7931] debugfs: 'hsr0' already exists in 'hsr' [ 281.088258][ T7931] Cannot create hsr debugfs directory [ 281.169914][ T8174] netlink: 'syz.3.624': attribute type 12 has an invalid length. [ 281.196394][ T8174] netlink: 'syz.3.624': attribute type 29 has an invalid length. [ 281.239874][ T8174] netlink: 148 bytes leftover after parsing attributes in process `syz.3.624'. [ 281.278310][ T8174] netlink: 59 bytes leftover after parsing attributes in process `syz.3.624'. [ 281.317403][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.341355][ T8185] CIFS: Attempting to mount //127.0.0.1/share [ 282.014566][ T8191] fuse: Bad value for 'fd' [ 282.151749][ T8185] CIFS: VFS: cifs_mount failed w/return code = -112 [ 282.336092][ T7969] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.343903][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.356568][ T7969] bridge_slave_0: entered allmulticast mode [ 282.372946][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.314115][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.326225][ T7969] bridge_slave_0: entered promiscuous mode [ 283.336230][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.343408][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.350782][ T7969] bridge_slave_1: entered allmulticast mode [ 283.361285][ T7969] bridge_slave_1: entered promiscuous mode [ 283.400906][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.877067][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.499805][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.650225][ T7969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.747788][ T8224] syzkaller0: entered promiscuous mode [ 284.769191][ T8224] syzkaller0: entered allmulticast mode [ 284.810200][ T7969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.879051][ T8233] loop8: detected capacity change from 0 to 256 [ 284.895876][ T8233] exfat: Deprecated parameter 'utf8' [ 284.927067][ T8220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.938071][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.956080][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.028789][ T8233] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 285.221739][ T7969] team0: Port device team_slave_0 added [ 285.261196][ T7969] team0: Port device team_slave_1 added [ 285.419123][ T8241] fuse: Bad value for 'fd' [ 285.450485][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.490366][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.547822][ T7969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.595999][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.603539][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.645245][ T7969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.721416][ T8245] syzkaller0: entered promiscuous mode [ 285.740539][ T8245] syzkaller0: entered allmulticast mode [ 285.922393][ T8245] tipc: Started in network mode [ 285.936404][ T8245] tipc: Node identity 5a6c5b7708e5, cluster identity 4711 [ 285.962405][ T8245] tipc: Enabled bearer , priority 0 [ 286.009107][ T5638] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 286.046975][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.063302][ T7969] hsr_slave_0: entered promiscuous mode [ 286.071703][ T7969] hsr_slave_1: entered promiscuous mode [ 286.079756][ T7969] debugfs: 'hsr0' already exists in 'hsr' [ 286.085555][ T7969] Cannot create hsr debugfs directory [ 286.156566][ T8244] tipc: Resetting bearer [ 286.185765][ T8244] tipc: Disabling bearer [ 286.410798][ T7931] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 286.430319][ T7931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.455280][ T7931] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 286.470129][ T7931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.479992][ T7931] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 286.491783][ T7931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.520710][ T7931] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 286.547278][ T7931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.564861][ T8259] syzkaller0: entered promiscuous mode [ 286.580601][ T8259] syzkaller0: entered allmulticast mode [ 286.876581][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 286.921429][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.077754][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.089550][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 287.139854][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 287.913443][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 287.922638][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.931027][ T9] usb 4-1: Product: syz [ 287.935228][ T9] usb 4-1: Manufacturer: syz [ 287.946427][ T9] usb 4-1: SerialNumber: syz [ 287.970440][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 288.140950][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.224276][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 288.332216][ T9] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 288.444314][ T7931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.217182][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.957074][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.560502][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.624106][ T7931] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.754649][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 290.765387][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 290.765435][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 290.765458][ T51] Workqueue: hci2 hci_rx_work [ 290.765504][ T51] Call Trace: [ 290.765516][ T51] [ 290.765527][ T51] dump_stack_lvl+0xe8/0x150 [ 290.765581][ T51] sysfs_create_dir_ns+0x271/0x2a0 [ 290.765629][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 290.765669][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.765699][ T51] ? do_raw_spin_unlock+0xf5/0x210 [ 290.765741][ T51] kobject_add_internal+0x622/0xcd0 [ 290.765802][ T51] kobject_add+0x163/0x240 [ 290.765838][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.765875][ T51] ? __pfx_kobject_add+0x10/0x10 [ 290.765907][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.765938][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.765972][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.766000][ T51] ? get_device_parent+0x366/0x3a0 [ 290.766040][ T51] device_add+0x3fa/0xb80 [ 290.766073][ T51] hci_conn_add_sysfs+0xd5/0x210 [ 290.766111][ T51] le_conn_complete_evt+0xfef/0x1580 [ 290.766161][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 290.766198][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.766226][ T51] ? __mutex_unlock_slowpath+0x731/0x900 [ 290.766261][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.766290][ T51] ? skb_pull_data+0xf0/0x200 [ 290.766330][ T51] hci_le_conn_complete_evt+0x187/0x470 [ 290.766375][ T51] hci_event_packet+0x67a/0xf10 [ 290.766413][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 290.766453][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 290.766490][ T51] ? audit_tree_freeing_mark+0x760/0xb20 [ 290.766524][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.766552][ T51] ? hci_send_to_monitor+0xe2/0x590 [ 290.766596][ T51] hci_rx_work+0x3ee/0x1020 [ 290.766637][ T51] ? process_scheduled_works+0xa20/0x14e0 [ 290.766667][ T51] process_scheduled_works+0xa8e/0x14e0 [ 290.766731][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.766769][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.766797][ T51] ? assign_work+0x3cf/0x5d0 [ 290.766833][ T51] worker_thread+0xa47/0xfb0 [ 290.766897][ T51] kthread+0x388/0x470 [ 290.766935][ T51] ? __pfx_worker_thread+0x10/0x10 [ 290.766965][ T51] ? __pfx_kthread+0x10/0x10 [ 290.767005][ T51] ret_from_fork+0x514/0xb70 [ 290.767052][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 290.767089][ T51] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.767118][ T51] ? __switch_to+0xc89/0x1420 [ 290.767153][ T51] ? __pfx_kthread+0x10/0x10 [ 290.767213][ T51] ret_from_fork_asm+0x1a/0x30 [ 290.767258][ T51] [ 291.037500][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 291.054569][ T51] Bluetooth: hci2: failed to register connection device [ 291.165544][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.172852][ T8275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.229000][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.236328][ T8275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.645085][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.597263][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.996743][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.552966][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.609232][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.757938][ T8406] netlink: 132 bytes leftover after parsing attributes in process `syz.4.670'. [ 295.744757][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.098128][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.193474][ T7969] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.281676][ T8386] loop3: detected capacity change from 0 to 32768 [ 296.311008][ T8386] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 296.400489][ T7969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.065870][ T5638] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 297.196408][ T7969] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.283557][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.292779][ T7969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.359607][ T7969] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.469893][ T7969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.511987][ T7969] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.598374][ T7969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.717108][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 298.450433][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.709074][ T5631] ocfs2: Unmounting device (7,3) on (node local) [ 298.899919][ T7969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.088643][ T7969] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.157811][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.689508][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.024350][ T7931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.034400][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.041640][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.074344][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.081644][ T8162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.604284][ T8485] netlink: 132 bytes leftover after parsing attributes in process `syz.7.684'. [ 302.683914][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.696331][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.747427][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.240111][ T8498] loop7: detected capacity change from 0 to 512 [ 303.383353][ T8498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.483494][ T8498] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.639049][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.8.688'. [ 303.789743][ T7006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.809118][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.025402][ T7931] veth0_vlan: entered promiscuous mode [ 304.104774][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.689'. [ 304.122439][ T7931] veth1_vlan: entered promiscuous mode [ 305.211539][ T8524] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.262744][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.495263][ T7931] veth0_macvtap: entered promiscuous mode [ 305.594673][ T7931] veth1_macvtap: entered promiscuous mode [ 305.716918][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.749986][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.826330][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.901502][ T8215] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.948678][ T8215] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.015308][ T8370] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.052420][ T8370] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.449533][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.207890][ T7969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.513200][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.362216][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.538886][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.556631][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.708987][ T8567] syzkaller0: entered promiscuous mode [ 308.720972][ T8567] syzkaller0: entered allmulticast mode [ 308.790345][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.836328][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 309.271869][ T8155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.411884][ T8155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.584062][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.798187][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.807158][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.740695][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.918626][ T8609] CIFS: Attempting to mount //127.0.0.1/share [ 313.738766][ T8609] CIFS: VFS: cifs_mount failed w/return code = -112 [ 314.033117][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.875075][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.077374][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.130094][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.520864][ T992] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 316.683117][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 316.694280][ T992] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 316.710690][ T992] usb 4-1: config 0 has no interface number 0 [ 316.717150][ T992] usb 4-1: config 0 interface 12 has no altsetting 0 [ 316.757295][ T992] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 316.766533][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.774628][ T992] usb 4-1: Product: syz [ 316.779875][ T992] usb 4-1: Manufacturer: syz [ 316.784499][ T992] usb 4-1: SerialNumber: syz [ 316.795663][ T992] usb 4-1: config 0 descriptor?? [ 316.923033][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.931880][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.953697][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.168458][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.439166][ T992] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 317.448937][ T992] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 317.464749][ T992] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 317.472832][ T992] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 317.526284][ T992] usb 4-1: USB disconnect, device number 17 [ 317.879371][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.079918][ T8670] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 318.373042][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.996769][ T5638] Bluetooth: hci6: command 0x0406 tx timeout [ 319.140005][ T8642] syzkaller0: entered promiscuous mode [ 319.160719][ T8642] syzkaller0: entered allmulticast mode [ 319.399303][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.762187][ T7969] veth0_vlan: entered promiscuous mode [ 319.972180][ T7969] veth1_vlan: entered promiscuous mode [ 320.391605][ T7969] veth0_macvtap: entered promiscuous mode [ 320.437932][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.450339][ T7969] veth1_macvtap: entered promiscuous mode [ 320.962322][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.478527][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.486029][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.573731][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.684552][ T8272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.765895][ T8272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.805933][ T8712] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 321.825660][ T8272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.870782][ T8272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.828603][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.263078][ T8163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.295577][ T8163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.369187][ T8751] syzkaller0: entered promiscuous mode [ 323.400739][ T8751] syzkaller0: entered allmulticast mode [ 323.649774][ T8759] xt_connbytes: Forcing CT accounting to be enabled [ 323.671737][ T8362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.706833][ T8362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.978248][ T32] INFO: task syz.0.287:6813 blocked for more than 143 seconds. [ 324.727022][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.740933][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.756457][ T32] Not tainted syzkaller #0 [ 324.794083][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.817636][ T32] task:syz.0.287 state:D stack:27304 pid:6813 tgid:6809 ppid:5625 task_flags:0x400040 flags:0x00080002 [ 324.867114][ T8767] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 324.883295][ T32] Call Trace: [ 324.890298][ T32] [ 324.897051][ T32] __schedule+0x17d9/0x56c0 [ 324.910239][ T32] ? __lock_acquire+0x683/0x2cf0 [ 324.934559][ T32] ? __pfx___schedule+0x10/0x10 [ 324.963620][ T32] ? schedule+0x90/0x2b0 [ 324.981996][ T32] schedule+0x164/0x2b0 [ 324.990685][ T32] schedule_preempt_disabled+0x13/0x30 [ 325.029437][ T32] __mutex_lock+0x7bf/0x1550 [ 325.041333][ T32] ? nfsctl_transaction_write+0xc7/0x160 [ 325.064877][ T32] ? __mutex_lock+0x5d4/0x1550 [ 325.091376][ T32] ? write_threads+0x39d/0x5a0 [ 325.106323][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 325.117295][ T32] ? simple_strntoull+0x111/0x190 [ 325.123936][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.129953][ T32] ? qword_get+0x5ad/0x650 [ 325.139082][ T32] write_threads+0x39d/0x5a0 [ 325.143716][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.150723][ T32] ? __pfx_write_threads+0x10/0x10 [ 325.155891][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.163212][ T32] ? _copy_from_user+0x94/0xb0 [ 325.170912][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.179173][ T32] ? simple_transaction_get+0x12d/0x160 [ 325.184781][ T32] nfsctl_transaction_write+0x10f/0x160 [ 325.190709][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 325.198781][ T32] vfs_write+0x296/0xba0 [ 325.203079][ T32] ? __pfx_vfs_write+0x10/0x10 [ 325.209133][ T32] ? __fget_files+0x2a/0x420 [ 325.213779][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.219689][ T32] ? __fget_files+0x3a2/0x420 [ 325.224410][ T32] ? __fget_files+0x2a/0x420 [ 325.229391][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.235070][ T32] ksys_write+0x150/0x270 [ 325.247609][ T32] ? __pfx_ksys_write+0x10/0x10 [ 325.252519][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.258752][ T32] do_syscall_64+0x174/0x580 [ 325.263358][ T32] ? trace_irq_disable+0x3b/0x140 [ 325.268898][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.274827][ T32] RIP: 0033:0x7f891599de99 [ 325.279781][ T32] RSP: 002b:00007f89168a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.288408][ T32] RAX: ffffffffffffffda RBX: 00007f8915c26090 RCX: 00007f891599de99 [ 325.297125][ T32] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 325.305133][ T32] RBP: 00007f8915a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 325.314374][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.324555][ T32] R13: 00007f8915c26128 R14: 00007f8915c26090 R15: 00007ffd8f253e88 [ 325.343185][ T32] [ 325.351493][ T32] [ 325.351493][ T32] Showing all locks held in the system: [ 325.453129][ T32] 3 locks held by kworker/0:0/9: [ 325.481929][ T32] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 325.523955][ T32] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 325.543141][ T32] #2: ffff8880b8643198 (&ACCESS_PRIVATE(sdp, lock)){....}-{2:2}, at: srcu_invoke_callbacks+0x3a2/0x5a0 [ 325.568760][ T32] 1 lock held by khungtaskd/32: [ 325.581606][ T32] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 325.602266][ T32] 2 locks held by kworker/u8:3/49: [ 325.608533][ T32] #0: ffff88801e786140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 325.628606][ T32] #1: ffffc90000b97c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 325.642893][ T32] 2 locks held by getty/5375: [ 325.651222][ T32] #0: ffff8880366010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 325.661323][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 325.671918][ T32] 3 locks held by syz.0.287/6810: [ 325.678437][ T32] #0: ffff888035d2b430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 325.697728][ T32] #1: ffff88802986e450 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 325.719833][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 325.739907][ T32] 3 locks held by syz.0.287/6813: [ 325.753509][ T32] #0: ffff88802c0a09b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 325.776562][ T32] #1: ffff88802986e450 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 325.797711][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 325.797916][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.815179][ T32] 3 locks held by syz.2.364/7145: [ 325.821998][ T32] #0: ffff888020b87970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 325.848581][ T32] #1: ffff88807ced4450 (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 325.874013][ T32] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 325.885022][ T32] 1 lock held by syz.2.364/7147: [ 325.894250][ T32] #0: ffff888020b87970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 325.903675][ T32] 1 lock held by syz.2.364/7149: [ 325.910650][ T32] #0: ffff888020b87970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 325.920114][ T32] 1 lock held by syz.2.364/7151: [ 325.925068][ T32] #0: ffff888020b87970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 325.936382][ T32] 2 locks held by dhcpcd/7199: [ 325.941195][ T32] #0: ffff88803523e9c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 325.952804][ T32] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 325.968039][ T32] 3 locks held by syz.6.521/7779: [ 325.973083][ T32] #0: ffff88802735feb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 325.982615][ T32] #1: ffff8880367d2450 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 325.991889][ T32] #2: ffff888040339c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 326.003145][ T32] 3 locks held by syz.5.530/7802: [ 326.008517][ T32] #0: ffff88802a2d1970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 326.019277][ T32] #1: ffff8880367d2450 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 326.028509][ T32] #2: ffff888067f80880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 326.038651][ T32] 1 lock held by syz.5.530/7809: [ 326.043608][ T32] #0: ffff88802a2d1970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 326.053397][ T32] 2 locks held by kworker/u8:21/7851: [ 326.069609][ T32] #0: ffff88801e786140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 326.081120][ T32] #1: ffffc900033d7c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 326.093623][ T32] 2 locks held by kworker/u8:53/8350: [ 326.099630][ T32] #0: ffff88801e786140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 326.111473][ T32] #1: ffffc9001df57c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 326.124019][ T32] 3 locks held by dhcpcd-run-hook/8789: [ 326.131228][ T32] [ 326.133599][ T32] ============================================= [ 326.133599][ T32] [ 326.225306][ T32] NMI backtrace for cpu 0 [ 326.225344][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 326.225372][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 326.225387][ T32] Call Trace: [ 326.225397][ T32] [ 326.225409][ T32] dump_stack_lvl+0xe8/0x150 [ 326.225464][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 326.225505][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.225536][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 326.225578][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 326.225620][ T32] sys_info+0x135/0x170 [ 326.225655][ T32] watchdog+0xfd7/0x1030 [ 326.225697][ T32] ? watchdog+0x1c7/0x1030 [ 326.225738][ T32] kthread+0x388/0x470 [ 326.225775][ T32] ? __pfx_watchdog+0x10/0x10 [ 326.225800][ T32] ? __pfx_kthread+0x10/0x10 [ 326.225838][ T32] ret_from_fork+0x514/0xb70 [ 326.225882][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 326.225918][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.225945][ T32] ? __switch_to+0xc89/0x1420 [ 326.225982][ T32] ? __pfx_kthread+0x10/0x10 [ 326.226019][ T32] ret_from_fork_asm+0x1a/0x30 [ 326.226063][ T32] [ 326.226090][ T32] Sending NMI from CPU 0 to CPUs 1: [ 326.352077][ C1] NMI backtrace for cpu 1 [ 326.352096][ C1] CPU: 1 UID: 0 PID: 8791 Comm: rm Not tainted syzkaller #0 PREEMPT(full) [ 326.352121][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 326.352134][ C1] RIP: 0010:unwind_next_frame+0x505/0x2550 [ 326.352165][ C1] Code: 49 8d 1c 47 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 48 39 e8 <4c> 0f 46 f9 48 8d 43 fc 4c 0f 47 e0 4c 0f 46 eb 4d 39 e7 76 a9 e9 [ 326.352183][ C1] RSP: 0000:ffffc9000d05f300 EFLAGS: 00000297 [ 326.352202][ C1] RAX: ffffffff81001280 RBX: ffffffff906ada60 RCX: ffffffff906ada64 [ 326.352219][ C1] RDX: ffffffff906ada20 RSI: ffffffff90e5b9f2 RDI: ffffffff8c4bdc20 [ 326.352235][ C1] RBP: ffffffff810012a5 R08: 000000000000001c R09: 0000000000000000 [ 326.352249][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff906ada6c [ 326.352264][ C1] R13: ffffffff906ada54 R14: ffffc9000d05f3a8 R15: ffffffff906ada58 [ 326.352284][ C1] FS: 0000000000000000(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 326.352302][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.352317][ C1] CR2: 00007f2ae3fab010 CR3: 000000003d30f000 CR4: 0000000000350ef0 [ 326.352335][ C1] Call Trace: [ 326.352342][ C1] [ 326.352355][ C1] ? asm_exc_page_fault+0x26/0x30 [ 326.352377][ C1] ? unwind_next_frame+0x8f/0x2550 [ 326.352403][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 326.352432][ C1] arch_stack_walk+0x11b/0x150 [ 326.352460][ C1] ? asm_exc_page_fault+0x26/0x30 [ 326.352485][ C1] stack_trace_save+0xa9/0x100 [ 326.352519][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 326.352552][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.352580][ C1] save_stack+0x122/0x230 [ 326.352612][ C1] ? __pfx_save_stack+0x10/0x10 [ 326.352639][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.352664][ C1] ? post_alloc_hook+0x1f9/0x250 [ 326.352690][ C1] ? get_page_from_freelist+0x21fa/0x2270 [ 326.352725][ C1] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 326.352756][ C1] ? alloc_pages_mpol+0x212/0x380 [ 326.352789][ C1] ? folio_alloc_mpol_noprof+0x39/0x160 [ 326.352822][ C1] ? vma_alloc_folio_noprof+0xe1/0x1e0 [ 326.352855][ C1] ? do_pte_missing+0x598/0x34b0 [ 326.352884][ C1] ? handle_mm_fault+0x1b36/0x3080 [ 326.352907][ C1] ? do_user_addr_fault+0xa4d/0x1340 [ 326.352940][ C1] ? exc_page_fault+0x6a/0xc0 [ 326.352962][ C1] ? asm_exc_page_fault+0x26/0x30 [ 326.352995][ C1] __set_page_owner+0x8d/0x4c0 [ 326.353027][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 326.353057][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 326.353082][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.353107][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 326.353131][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.353157][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.353186][ C1] post_alloc_hook+0x1f9/0x250 [ 326.353215][ C1] get_page_from_freelist+0x21fa/0x2270 [ 326.353249][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.353289][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.353320][ C1] ? prepare_alloc_pages+0x230/0x650 [ 326.353356][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 326.353391][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 326.353427][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 326.353460][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.353487][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.353520][ C1] alloc_pages_mpol+0x212/0x380 [ 326.353558][ C1] folio_alloc_mpol_noprof+0x39/0x160 [ 326.353594][ C1] vma_alloc_folio_noprof+0xe1/0x1e0 [ 326.353631][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 326.353668][ C1] ? do_pte_missing+0x30df/0x34b0 [ 326.353702][ C1] do_pte_missing+0x598/0x34b0 [ 326.353737][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.353764][ C1] ? handle_mm_fault+0xec/0x3080 [ 326.353792][ C1] handle_mm_fault+0x1b36/0x3080 [ 326.353826][ C1] ? handle_mm_fault+0xec/0x3080 [ 326.353858][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 326.353882][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 326.353911][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.353945][ C1] ? __fget_files+0x2a/0x420 [ 326.353983][ C1] do_user_addr_fault+0xa4d/0x1340 [ 326.354022][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.354048][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.354073][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 326.354108][ C1] exc_page_fault+0x6a/0xc0 [ 326.354133][ C1] asm_exc_page_fault+0x26/0x30 [ 326.354153][ C1] RIP: 0033:0x7f2ae42e0070 [ 326.354172][ C1] Code: 30 c3 0f 1f 84 00 00 00 00 00 66 48 0f 7e c6 83 fa 08 7d 16 83 fa 04 7d 1a 83 fa 01 7f 1c 7c 03 40 88 37 c3 66 0f 1f 44 00 00 <48> 89 37 48 89 74 17 f8 c3 89 37 89 74 17 fc c3 66 89 37 40 88 74 [ 326.354191][ C1] RSP: 002b:00007ffc53396768 EFLAGS: 00010246 [ 326.354208][ C1] RAX: 00007f2ae3fab010 RBX: 0000000000000004 RCX: 00007f2ae3fab018 [ 326.354223][ C1] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00007f2ae3fab010 [ 326.354237][ C1] RBP: 00007ffc53396af0 R08: 00007f2ae3fab010 R09: 0000000000000003 [ 326.354251][ C1] R10: 0000000000000812 R11: 00007ffc53396bd8 R12: 00007ffc53396818 [ 326.354266][ C1] R13: 00007f2ae3fb66b0 R14: 00007ffc53396b90 R15: 00007f2ae3fab018 [ 326.354296][ C1] [ 326.852862][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.888265][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.902742][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 326.909590][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 326.918689][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 326.928735][ T32] Call Trace: [ 326.932013][ T32] [ 326.934936][ T32] vpanic+0x56c/0xa60 [ 326.938943][ T32] ? __pfx___schedule+0x10/0x10 [ 326.943804][ T32] ? __pfx_vpanic+0x10/0x10 [ 326.948319][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.953959][ T32] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 326.960145][ T32] panic+0xc5/0xd0 [ 326.963884][ T32] ? __pfx_panic+0x10/0x10 [ 326.968314][ T32] ? preempt_schedule_common+0x82/0xd0 [ 326.973775][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 326.979154][ T32] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 326.985328][ T32] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 326.991504][ T32] watchdog+0x1030/0x1030 [ 326.995850][ T32] ? watchdog+0x1c7/0x1030 [ 327.000284][ T32] kthread+0x388/0x470 [ 327.004366][ T32] ? __pfx_watchdog+0x10/0x10 [ 327.009051][ T32] ? __pfx_kthread+0x10/0x10 [ 327.013657][ T32] ret_from_fork+0x514/0xb70 [ 327.018279][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 327.023405][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.029045][ T32] ? __switch_to+0xc89/0x1420 [ 327.033736][ T32] ? __pfx_kthread+0x10/0x10 [ 327.038340][ T32] ret_from_fork_asm+0x1a/0x30 [ 327.043128][ T32] [ 327.046374][ T32] Kernel Offset: disabled [ 327.050682][ T32] Rebooting in 86400 seconds..