last executing test programs: 5m27.788275676s ago: executing program 1 (id=17): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0x0, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x4e}, {0x9, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) uname(&(0x7f0000000080)=""/209) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) migrate_pages(r0, 0x3, &(0x7f00000002c0)=0xb, &(0x7f0000000380)=0x3) writev(r5, &(0x7f0000000040), 0x0) 5m26.655117471s ago: executing program 1 (id=21): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0x80, 0x0}, 0x40) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @private=0xa010100}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 5m21.934856218s ago: executing program 1 (id=27): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r3, 0x0, 0x44, 0x4000000, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000003b40)="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", 0x1000}, {&(0x7f0000004b40)="55b3d9405b21e2dcb9f89407e37234f2e9edb4094c38477ae0f3c016", 0x1c}, {&(0x7f0000004b80)="07bfe949e2c12561def625963fbbbb0497b003a8e4a3fea8cb14e5bde963599c9ccf5f50dd8ec48a79a08bad8b3b566c78409d6c02537e4e660b9991b4e6ad68736bca1f58acaf5040ac007aaa510b4aa6a182e74f36660c563e0cf3ff9c4fb2b0bdaa9c638af4899b7074499e3f2b2b37f8f4cf825840821c0745521ec1f3057ab2464652b3457e8dc14d1323ff8ae6857625dffcc6d49d8a81ecddbe5b27e83ce7d40dde77f16a99b485aee8f134158a5f8c80cda93fcf302748672e2f0588adfbdaa6eb8874e41dd18cfc4be5d5c0bf18ecf0d8eab7e98ef3e220809ddb0fa73886ef78d854b4c9b89aaab87cce137806cbe72b21a0d5b26681b09173782206f32305d7fa1438922120fed99d4f084b88a9e618146e57c12cd1135e0a8d2ad9302c8781c3015bc186af4318cb7ccbf6e576dcac485d72ac34a1e0f0b903ee331ca5a9a2daa2e481c568f88b76c2bd5d51fdc74573837d819cf92f534ce37edc84629bfa0b543d107423befd760f82da994dc709d26d9d9fd77aebed77278e1759ecfcde0e5c8964d412fffc2fc8c4e9660d2f12724f8f057b955c6a76f03a4f5ca7ab26cb2b1ab2d1e5ead5e6d6e0f144c3c20bc104eb58c37e26f491c3dee6c6c80429de93428eac6069986f72ecc046ee100b195acd6f99d1750d0db599876e518dc1d26923d8b2bbf944c86952916059341c3a76d8c728671f189300fc8a0a6039dd3585fc91cac567c069b391c49c8f1c72b43934a1dff5055b0cdd537692288e3aa6c488f53f1ca712d87a0b4c526167279879ff450d6bb5a5ebfc9821aabfb637ce2b392ca4c8a9c363edf6d820d0aef6da211dc574867faf52e2c97d469ae0886bd56274a73238ea0e507b2fe02d463ff8b42052f6310d225713ab5139ea2a55ce5ce73e2a84062743e3a0cfb5c5ef4f5c5cc294fd65c6e6a9983c2fb48565dcc2c2903c06f640ad75c096dbd143f6e28dd78259bec4e4862498869e9be0264dff4b9f5ccd0c1c6520bdfad6db964b5d6960b04ad4ff7e2a8b74ed9f068c41c45097e88ebdadf57598f43a10ac4e4d54956ff4a4c4907a556cb0a53a666e38ac0ea50f8c4dd650114da88b5b178a2de31c05b624d931f397c5f1618d9e427aa5e79857052edb41ea31cd9d6c63820079f290537cd8609c45ede72144d342da407b4d43b7e0b7233173ff759eec92ebd7d8a3dd9fae55591c3c85f4e9fb26a8a90a12b33ee6725f1dff5a2d52262db3f4f7c2968e46ba9043783929ab5b67ae0a405376a602394ad99e220a91c8159773b341091bdf0b75bf2a3217bd755f67c9f241dd88fdf6f03ca967f58d2d7bcbd9603f432c36354a8c91f39d1b3e6c3d0237cbe8f77d7dc25b95a67220eb63eaf9ba9dea77d6b8fa938dafd453c3d77459b9f2c4855cd4fbaef3505e53ac369fb313e09d64241a176b65d24397b75875187fb021c589af65602b4da1e9fe2879f9b0fafdd30a73cbe2d42b8f52241cb40b765f94638443c96309b2b2a77caf4e94ffb508f1d7a4e94e9fca540bbdf044d3e216680638d2a464ae4079829d075f15b653146b1fffcfb7326f8980ff256f215dd435a7651515c3d0ce4a917817995ce33eb49234ebce6cfa53d1bf7ab5675ab97fb8d6aaedcd69bd84857c0dc38f478340998312b7de36d53743b4517e4d669eec6eade489cfd9ad200a378d245542eb1007520e7ca6431f72e43c280d0337aec2b3eb5e6f1f59dd0d227d4885ac36b6571dde288a9f196e41f8ab0b16b9b956a2db15fcdcdf3e772e7f8a19b227d1b67c87c2eb23baa546307f12d912136175a31da35a64c78c2cfcad14dbad3a02f0020ae0896e358af8b2eb3dca247579455056cbe027d9eb9fcf016ae870791e6b27a96962036e55d8f752b834bd749f2ce744c69ecc198142dada015a0a44da42d7ba2d97b2271115537adff1d6b46dbac6df61426f101c60becba00a2c088b2714f90fd859addbb5325be9d4f2bd81f43a44e26e75d6ff3997bf34427a2e5aea0cfc91364732ba51dfc858bee7030a94c6f87a3a35e952354bd630473c5625097b8b1c033da60c5fa109065e35cd5f549e4fedc56e99a59e4dc50b69dc01fafa4551f9a5efb2989207b87ee5f78fed8a2cfe1f1773633e3c78d2c0c0a2896cfb5fbebb20729c0a708eebf4e9817b1a13930585b8dc5f630c3cbead8da5eb73a0b9d053d8a4f15980c917ec8119af71ced9f9875e4ccacb306bd2d6a1b51d30172fc72d83dabb669b7423c4425dc9331130ad053d5eb162a5364afeefd3708780c94b68e0b5387f538571915acf23c48b649c44dcfc12535eb73d78086bcf6467b799ead40d51e548ef10f0bcbf377febbb777d53a2bcb78e67d9d7982287bc36fd2b1b8757c476c98ea37c24864d117052133463dbace0fbca6266601efcba5ea93217790aec1cc1becbd556b65eb4fa3f23f032190177daa933811ef792b09e093183d993da94f86f0d3fc1d136ba7ab31cfce67258701c1884c541743f122d24af10d7f6a93976802d243f0d082758690da245f04b492a7bc679183ec3662b1ae614025f1f7fd6f178e6ba91dd993654a52ec2f8fdcf66a24760712d4f66c9ebb72212fe65380c2916dded5a6f73d3f244c409631832941afe3c766a2e80b098f29828f803f892254924100234e62b9d6ca6cda842657b019a4c3e95d214c7954526b312870b0549f5089d7ee415b5be837911adf9f0b44a5af86036dda3a79425d980c1f795aee1200e950cc2b3a47ac3cae8a0d90750a490fd87696190e92b80aae68becc13476aa533c148bb6803e0a74868a274cda8d5fd6025e4285c8f44efc49e0f5b6a936920774db7886ebe3eba0f9af93142bb7a34fbaf02c21c776445343192daa4fe47043ad457fd4d9259eea45c148de854db07461963312a2e48610e0ebfcaaeb348124afe59e18057a07ac829b04bdcc9bfde2c3bc8cd7df874d4a1e75908fd61f202c58001bda92c70bcf96763da2b1dfe9d78076c76ad391ae6536a66d88c1800ee8bef2854214b51eab74885c0f3450d2d7c9fc75d5a0fbf0454bbe02c22e93ed1b65ed07a0edc11da3727dddb777d82096bdbbaefc447ceb0653cd149464d70e9d562a6aeed3549a633732239cccf9df0fe10694427cf0e3a37f20202c8dc235eacdab2eecf4856f5ca7f9de4a7971efb2be0c79f36e1a28df82d76f6f3ceb7d1c953ade2d413f71a29e0697841e830e2b2afb97af8317fe72f7bd255da2cf34c8d608029c74daaba72eeff92874b24ad161aaffdd7d0b3d18f532de0a9d5023062bbf4a2e52c5d5b82ae162d7531fb59f1c41963d2136fde03f5d2ffd2cdadbbeb4f976078afb8334bd77e5aca75ae562a0971248ff42d7e3c63fb0b323de0329e5899d1fd4e033f35582f0970388fa26268159b05cfac9200a93083300ad378d69a696ac29452ab33d498d696576f35e49b554d08ca4e330a1d8b5eae18eb60df02d2f82ee8941f5696c00a9ae6214850785aa1a87c6edc25b3a2ab6c2151df01216ecc0dfe896b04bc2859c2d270e747f9fbff6823aac236f2e05e4946e7a8c30a3212eb1f1943a8d7cc823b997e4de5273dd86c16619f263959b46653e91a338ecaf3c2946e1e613d0c4760133ccbc323798ebc8f48491321bb12e9f1f0586e6ec60801b8880c3a21c7fb997fc2625656d441222a1c11f981f980c0ee6262a7b95c881200dd7f690d3715bb5d02995aee01b3e7dce4ec74deb213591189e92a71f6beb6e9d2d1da50e1e3500d45365bf199b40045af113df522cdccb85aca90cc59a5e2a63a64cbc0f51d5cffd8ffa49f57e753377904928ced9648885a24b5f6490e698977479a7de7b66caca663683b79702139dee779bd7f4c129bd4ad3788dc7bed0a572614bb84a5e0794ede7ec88ec8cbcd02de26e4d84b42f1b437462863facb7a0dd1fa04ce67cbcb4043748df9f65ab9cf8e807a2102cfbc8343a08bd61b1db5bca51248732673f444e72a9cd2f2b2c0cea600734fd5138371d996760248d7038512b8b10662aa08ed1c4935fdfcf9b4468029b118bbca41518bc5f449b85529443602630a3b68f1c11512612454c981e80ceb4b631142be998009db07d8f1828757db6471496e7dceaff3da7fde9f7abb522508319bb8523da7f240948ee06da131bf4412980fb8125c9eba202bb952844e6a9ec0c7eafaabc44f4c0fc0871b7ac4ec00e7b81bf6de843e372ad8f29707b3ab957929e45cef44bc021d76be3469144f98b6ff84923e47154d13d23b999c67df553ec4b0b3e21568e823416d2e7846b2bfcb6e92a237a8d2ab657cb519bd17ef85637c70a73c2f56478618eefec916254074bbf8f104e3cbfb2d8e978c81e268c4e3ef47d5d356089968d0f14c3bc35238dd02b7947ab9d392657a6c71d5bc05a90f5fa991a1a0267b48e90c12f7ef67e6335455389f36b2f3dcb5cec6c87a6f6c17608f520bf493ed54f6e937a05939f782c3247f7a5ca38359b45839dbaa8996876b3b5ed62d0ec9d281971776f573fd03db1b7ac4940ec691c6b8fc8f9ab3a8c4d376721aca05fb32422c86c1ed5ba1b47c14ed83f6a240ffe7ad7bf7efa39e2440c9a5d008f624e5d1c2c578e2049d78c92729933b3655c62dcc6d459709626673a7ef6cdf036ef2f68875fe6828c4728bb499b386a4c0cf8688e6230ad3904603f6fcd6fd9f2ba9cef63c615785d73bd019270aa46adfc7b742cdd642c3949c9757ddae3c7c98671a88eeb2a6aded6ad45896a4421e875224adf42a52b83a742ff46bcbc0d2378d30e47a43cfb0c400db1af9d5263e1071a392db91785988f90300e88c3fb2891efa6b8b6bdab2e2829b64d449369166d007b7b7ddb0cc79cca656965910d2b5cc30c7ed4c946b9ff93164187b1f530cb6dc35dda7a0a69ca8ce2c6d068a98587ef6f00d2281fdbde43dd547872d2b3a400bd41483bd38beb3072abe6d9dc1aa29f17a34c3d35424e782be8845c3d37603854c7e279dea3639311b64d1857bdae4a68b6d9ef4eb1c0a762bca3c0b89339aac590cb46906e99c5d76505df2d2b4814691f3ab0f0bbb4851fad5710524b9f49c65fde01cecfef1203cf86bc6a6785685ebbbd225eb8a8421299614c389807aa2a42546820beca22b983abc0d2a41d8bf43164add12739916c23c14ae6c37a4425aa18233452440718257193b7db43960926be1b6c8ce44f1f415cc583ae017a686fd7dc49fa6c1da71382a41cffa47d153f38b3fe9a97c844ac1502ca3482038a29d99523d6aefa2c305c8a19aabe5c2ef3dbd0f86e9e10e06bb93b98e650e4dbdb87781ee152e738fd14c2b1a70213933747dcda4bb81e776a51b11112b5e822b45ef5d69db8012e194b5548db5f79a9cc373ab8afe1144bbeff8e05c0da19d931b0842adbfff80e846843206cb85c7331afa100abb65a13b0a56f043c29c3eb299e35e9d2ffc11f7cade773a1a9bb761dedff4aa65b82859c023a22c6c9612e33152db88520e3c00966528327c86f318929d7f467e6866b55bc160cde9d851a576111e7d687780139929b3ca06069a8ebbf9080a80f459989cfb740b357b8c2e68aeb55b55559ccfa25238f0a1faa09539941bb20a8b1a71158a48d9222ee5d57e56436a6dc970f016922254308914a2f66d5a264e460aac982bf6b21c4f789e80b616888fecf1e682eb56429d6f69d929933a7470a08347c907dd91ea87e8f111253a477161d88ddfc5edd6dd5c166f77ea4aed530ce42b5ca4185144923d6834642a3833bc3da1b26a9", 0x1000}, {&(0x7f0000005b80)="4a19ab59cf60081edc4c87f73af7c46c769ebc6c822cebdc2905fa8a818aa7db40673866d377374b2baaa4d9eb1ed3d9fe835997cca3ad3a6d39d3b55af8d0103218082263df792c839f63ca1fe5bcd28dfffdd0b9458d2cbeeb7135e94155f306a5540751cc9c5ba7255949e5e7dbea26c987ec8e5f70ba12142046391fc61cb5737f09e9a4fdf768f22e465dbc96b449ed5ebbb9008643613552d22b49ab1e161fc104b68b703848bad04b4fe5a0", 0xaf}, {&(0x7f0000005c40)="62529a27e66bfc851c5d399bafb7cd1e480477ee4dd81e107b2db16366a33e66756fe32d1465b21cb721ad7c7e9bbdbec7c411ee3c3f5aca9ddfc693", 0x3c}, {&(0x7f0000005c80)="eb408da27b5cd05dff9f40e4eb43717816b2543fb041941c2e9356bf8f63728b25a12478b0b3f057da6149a8e2f9d8ffaee59947cee50a549357ac9b933f8ffef5c62d3c7130397944f6f922c77e4c83cabb93507b84c1852b3961ba1ad2ea", 0x5f}, {&(0x7f0000005d00)="8c4d3fde713b0808a7ea8b9e1845bfae9ed065fbe83f6f90e039266a19df30438af124cc5d7b24d340bc8690976144b6863735bbf240af165a6800e9284ae888acc16ec4e1b7725980c9858406e6d31635b020e70caeb6f168df0ae630386d81d2ec8c13e939824d6c87f0450a3019fbf3d343372b058555d39eedf26779b4a933592c43a6a519369fbdbb8310ac9200b72b04d5c50cc4745baf3f9e6cf814a32cfbb7cad34f5c33bf050a9bf2bb8f51152f065fbd7a27815fab05b03bfb602113bcc7af10b2845c", 0xc8}], 0x7, 0x0, 0x0, 0x800}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ppoll(&(0x7f0000000000)=[{r1, 0x7000}, {r1, 0x2333}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x6]}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001700), 0x80640, 0x0) read$FUSE(r7, &(0x7f0000001b00)={0x2020}, 0x2020) 5m18.363643211s ago: executing program 1 (id=31): landlock_create_ruleset(&(0x7f0000000040)={0xc8b1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x30, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x121002, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x0, 0x246, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000280)={0xe000003, 0x40000000000001b6, &(0x7f0000000080), 0x0, 0x4000007}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000000040)) getdents(r6, &(0x7f0000000ec0)=""/4096, 0x1000) 5m14.273007947s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) syz_open_dev$video4linux(&(0x7f0000000280), 0x20000000000000, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 5m1.072529395s ago: executing program 1 (id=48): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 4m59.03493292s ago: executing program 32 (id=48): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 3m59.156134619s ago: executing program 0 (id=118): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007fc0), r6) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f00000080c0)={0x0, 0x0, &(0x7f0000008080)={&(0x7f0000008000)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xc}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400d4}, 0x24000000) listen(r0, 0x400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4c850) 3m56.460417057s ago: executing program 0 (id=120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) 3m51.278066985s ago: executing program 0 (id=129): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) connect$802154_dgram(r2, &(0x7f0000000200)={0x2, @long}, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) read$FUSE(r4, &(0x7f0000002240)={0x2020}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x0, 0x0, {0x43, 0x3, 0x5, 0xffff, 0x1000, 0x80000000400000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket(0x2b, 0x1, 0x1) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r7, 0x5) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m45.121829549s ago: executing program 0 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x240008c4, &(0x7f0000000100)={0x2, 0x4e03, @empty}, 0x10) r1 = getpid() syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x30160f8, 0x0, 0x81, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x9]}, 0x8, 0x80000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500180600fe80f70000000000000000000000bbfe8000000000000000000000000000aa44244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000000000000"], 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x50, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r3, 0x24}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) 3m44.029913951s ago: executing program 0 (id=139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) 3m37.706105184s ago: executing program 0 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) 3m22.48420952s ago: executing program 33 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) 3m19.038560743s ago: executing program 4 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) 3m9.374121503s ago: executing program 4 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = dup(r1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0x81, 0xc11, 0xc8, 0x2, 0x3, "511b8560a5766f9d"}) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@getchain={0x3c, 0x66, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff6, 0xc}, {0xfff3, 0xf}, {0xffe0, 0x10}}, [{0x8, 0xb, 0x7ff}, {0x8}, {0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) syz_open_dev$mouse(0x0, 0x3279d4a0, 0x4000) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0301010059230800090000000100000000000000b4f2751bc7db4f1f00003fc6e780e405a444c9743544cd731fe185a9f959010bf0f2acc7c74d2b003fd092936462657ada36795a184d3672e93aa3da24929151002d35f3dfe4db5d8493f38eb1dbcc9f069c749dca1e556106e73e348d939689fa12934f07eaad2b51e4ac0d57e69ae485ecdba0b6b8ea73b66b"], 0xfffffec8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1, 0x9, 0xe45) pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 3m7.923391943s ago: executing program 4 (id=184): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) syz_usbip_server_init(0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fanotify_init(0x20, 0x1000) r4 = fcntl$dupfd(r2, 0x406, r2) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) r5 = syz_io_uring_setup(0x91a, &(0x7f0000000540)={0x0, 0x40c3b1, 0x800, 0x1, 0x80082, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r10, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r5}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x76d, 0xfffff129}, 0x10) write(r11, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 3m5.841619922s ago: executing program 4 (id=186): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3m5.488992048s ago: executing program 4 (id=187): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 3m5.357629923s ago: executing program 4 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) 2m49.345802709s ago: executing program 34 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x796c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$netlink(0x10, 0x3, 0xf) 1m53.946975063s ago: executing program 7 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0xff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000000), 0x0}, 0x20) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffdc0, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="01040200e0d679"], 0xa) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206010100000000000000000020000005000100070000000900020073797a3100000000050005000a000000050004000000000011000300686173683a6970"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r7, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x87, 0x0, &(0x7f0000000180)="e0b9547eecfffd57a80f65c39f14c6254be0990e439f95924ee5713fbca773d198613b4f4f9475d59b1ee7944e65b9abb78a3be819931e80efcadfe06155940e2f9aefef46e97dc4c1063dd85ce241095b3d75e7ac262508ddd22d8d1e0c29911ada89a68946176400a8732d8c1738414bedf9f8be6b981812c68a82ac054118a2b18497ea01a8", 0x0, 0xe00, 0x0, 0x0, 0xfffffffffffffeb0, 0x0, 0x0, 0x0, 0x0, 0x7fd}, 0x50) 1m52.3697434s ago: executing program 7 (id=283): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x28) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x67) r4 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x1000000d}) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x208000, 0xc95a, 0xf, 0xc, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0xfffe, 0x5, 0x6, 0x100006, 0x5, 0x0, 0x40], [0x10000007, 0x9, 0x80000130, 0x8204, 0x5, 0xfffffff7, 0x7, 0xc8, 0x6, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f32, 0xd, 0x40000101, 0x1, 0x2, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x13, 0x3, 0x9, 0x1, 0x3, 0x8, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x3, 0x5, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x4000001, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x10, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xffffff00, 0x8986, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x7, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x6, 0xa1, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x10, 0xf40, 0x6, 0x1, 0x6c1b, 0xfffffffd, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r8}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f00000002c0)=0x3) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) 1m51.223807984s ago: executing program 7 (id=285): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f00000003c0)=[{0xa, 0xe, 0x40, 0x3}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x106}, 0x400c054) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000001780)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x1, [{}, {0x2, 0x2}, {0xfffffffd}]}}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r9, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) 1m47.873969224s ago: executing program 7 (id=291): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000040)=0x91fc, 0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) close(r6) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1m45.536942748s ago: executing program 7 (id=294): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1m44.121666528s ago: executing program 7 (id=299): fsmount(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x1004408, 0x0) prctl$PR_SET_MM_MAP(0x34, 0xe, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f00000001c0)={0x9, 0x6}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r5, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r5, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x3, r5, r5, 0x3, 0xffffffffffffbffe, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f000034f000/0x4000)=nil, 0x4000, 0x10}) sched_setscheduler(0x0, 0x1, 0x0) getpid() sendto$inet(r3, &(0x7f0000000140)='^', 0x1, 0x48815, &(0x7f0000004ff0)={0x2, 0xffff, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e27, @private=0xa010100}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10) 1m27.578356267s ago: executing program 35 (id=299): fsmount(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x1004408, 0x0) prctl$PR_SET_MM_MAP(0x34, 0xe, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f00000001c0)={0x9, 0x6}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r5, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r5, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x3, r5, r5, 0x3, 0xffffffffffffbffe, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f000034f000/0x4000)=nil, 0x4000, 0x10}) sched_setscheduler(0x0, 0x1, 0x0) getpid() sendto$inet(r3, &(0x7f0000000140)='^', 0x1, 0x48815, &(0x7f0000004ff0)={0x2, 0xffff, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e27, @private=0xa010100}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10) 56.40216283s ago: executing program 2 (id=381): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, 0x0}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf25010000ca000000000c41000000030014"], 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000) 49.865211759s ago: executing program 2 (id=389): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 47.795458087s ago: executing program 2 (id=393): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e8deb2f04"], 0xf) 47.4210464s ago: executing program 2 (id=395): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) 45.391442336s ago: executing program 2 (id=398): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) 44.044944321s ago: executing program 2 (id=399): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000001480)=@ublk_io_need_get_data_sqe={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x3, 0xc3a, 0xc86, 0x0}}) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(0xffffffffffffffff, 0x20, 0x20, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r3}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 28.454058089s ago: executing program 36 (id=399): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000001480)=@ublk_io_need_get_data_sqe={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x3, 0xc3a, 0xc86, 0x0}}) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(0xffffffffffffffff, 0x20, 0x20, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r3}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 10.12185283s ago: executing program 5 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x6, 0x4}, {0xd4c8, 0x5}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0xf00, 0x0) pwrite64(r2, &(0x7f0000000c00)='W', 0x1, 0x4) open(0x0, 0x108843, 0x190) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket(0x23, 0x80805, 0x0) 9.793738538s ago: executing program 3 (id=465): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYBLOB="00000000000000007608000000c000001800000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, &(0x7f00000005c0)={[{}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x33, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) accept4(r2, 0x0, 0x0, 0x80000) signalfd(0xffffffffffffffff, &(0x7f0000000500), 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 8.164819368s ago: executing program 5 (id=466): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000001500)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000001240)={@my=0x0}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe3a) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4f}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x10000, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") 7.959283899s ago: executing program 3 (id=467): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000880)=""/240, 0xf0}, {0x0}], 0x2) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.161602535s ago: executing program 6 (id=468): getdents(0xffffffffffffffff, &(0x7f0000000440)=""/4090, 0xffa) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='adfs\x00', 0x208000, 0x0) 5.250672139s ago: executing program 3 (id=469): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x700, 0x8}, 0x1c) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) open(0x0, 0x105200, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$nl_route(r5, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffc}}) 5.236534872s ago: executing program 6 (id=470): bind$tipc(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0x8e2, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x5) 4.908189149s ago: executing program 5 (id=471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x1a4, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x8, 0x3, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@private2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "1a000b000000366a6a849a73904500240062227cd910ff80008000e8ffffff80"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 4.093628031s ago: executing program 6 (id=472): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x62, 0x37, 0x30, 0x35, 0x38, 0x62, 0x62, 0x32, 0x62, 0x64, 0x33, 0x63, 0x62, 0x65, 0x32, 0x39]}, &(0x7f0000000280)={0x0, "341347c74c840b386c5fd6e2c51cc374f2c9a3f903ebf6da3aadf9a06c585a9cf2fb55ed0604db9daae64cd22c3e6869c7596ed499f3b3da6f959245a2802336", 0x3a}, 0x48, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) 4.090680597s ago: executing program 3 (id=473): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000880)=""/240, 0xf0}, {0x0}], 0x2) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.854091811s ago: executing program 6 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x6, 0x4}, {0xd4c8, 0x5}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0xf00, 0x0) pwrite64(r2, &(0x7f0000000c00)='W', 0x1, 0x4) open(0x0, 0x108843, 0x190) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket(0x23, 0x80805, 0x0) 2.981445657s ago: executing program 3 (id=475): socket$kcm(0x2, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1001, 0x4900}, 0x50) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/176, 0xcd) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r4) open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x9}) close(0x3) 2.8532061s ago: executing program 6 (id=476): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, 0x0}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf25010000ca000000000c41000000030014"], 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000) 2.602410485s ago: executing program 5 (id=477): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000880)=""/240, 0xf0}, {0x0}], 0x2) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 706.134557ms ago: executing program 5 (id=478): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 699.308689ms ago: executing program 3 (id=479): r0 = open(0x0, 0x0, 0x120) getdents(r0, &(0x7f0000000440)=""/4090, 0xffa) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='adfs\x00', 0x208000, 0x0) 248.369µs ago: executing program 6 (id=480): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x200c9a, &(0x7f0000000280)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8841, 0x17d) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000240)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='\x85\xb1\xccBpy\xc1s\xf9\\\x98\xce\xa4g\xd2\xd4\xdei\xa1\x8e\x9c\xe4\x82\x05\xf3u\fe\x87\xa5+8u@6\xefq\xa1\x9a\xfb\x1f$\x19\xd3\xa5r\xcc\x84\xdc\xcfJ\t\x04z\xc9\x89D\xadc\x11@\xdc\xb51\x8a\xc9_\xc3|\xb2^g\xe5Gt\x1e\xc6\x81\xb4\xdd\xd7V\"\x92\xbci\x978\xfce\b\xcc\xf7\'&\xe0\xa2\xb6\xb3\xfc\xd5[\xd9\xf6\xb7\xa8\xa7\xaf\\\xc1\x89]K\x9c\xc9IM\x02tM\x19\xdb\xf2U%L\x11\fx\xd2/*\xa9\xbd2\xd6\x9c+') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) r4 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) link(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file2\x00') syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000400), 0x0, 0x240, &(0x7f0000000940)="$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") r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101041, 0x66) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101042, 0x6c) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 0s ago: executing program 5 (id=481): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) kernel console output (not intermixed with test programs): offset 8192 [ 118.872253][ T5620] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 119.015981][ T5620] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 119.100406][ T5620] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 119.193393][ T5620] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 119.350306][ T5620] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 119.706863][ T13] IPVS: starting estimator thread 0... [ 119.762771][ T5954] loop4: detected capacity change from 0 to 512 [ 119.793930][ T5954] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.830682][ T5954] EXT4-fs (loop4): orphan cleanup on readonly fs [ 119.830910][ T5954] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 119.830963][ T5954] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 119.830985][ T5954] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.33: bad orphan inode 768 [ 119.831168][ T5954] loop4: lost filesystem error report for type 5 error -117 [ 119.836159][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 119.836187][ C1] EXT4-fs (loop4): initial error at time 1786052451: ext4_orphan_get:1425 [ 119.836231][ C1] EXT4-fs (loop4): last error at time 1786052451: ext4_orphan_get:1425 [ 119.838705][ T5957] IPVS: using max 24 ests per chain, 57600 per kthread [ 119.948908][ T5954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.123065][ T5970] loop2: detected capacity change from 0 to 16 [ 122.183972][ T5970] erofs (device loop2): mounted with root inode @ nid 36. [ 122.814325][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.173230][ T5973] loop0: detected capacity change from 0 to 2048 [ 123.250656][ T5973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.316469][ T5620] EXT4-fs error: 192 callbacks suppressed [ 123.316540][ T5620] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 123.319521][ T5620] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 123.325980][ T5620] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 123.330285][ T5620] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 123.340705][ T5620] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 123.349052][ T5620] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 123.354129][ T5620] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 123.374672][ T5620] EXT4-fs error (device loop1): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 123.415825][ T5620] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 123.419593][ T5620] EXT4-fs error (device loop1): ext4_readdir:226: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 126.049904][ T5981] loop2: detected capacity change from 0 to 128 [ 128.068328][ T5987] loop0: detected capacity change from 0 to 512 [ 128.069209][ T5987] ======================================================= [ 128.069209][ T5987] WARNING: The mand mount option has been deprecated and [ 128.069209][ T5987] and is ignored by this kernel. Remove the mand [ 128.069209][ T5987] option from the mount to silence this warning. [ 128.069209][ T5987] ======================================================= [ 129.046917][ T5992] netlink: 'syz.0.42': attribute type 29 has an invalid length. [ 129.255761][ T5994] capability: warning: `syz.3.45' uses deprecated v2 capabilities in a way that may be insecure [ 129.960857][ T5995] netlink: 168 bytes leftover after parsing attributes in process `syz.3.45'. [ 130.106251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.732542][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.757670][ T5620] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.335547][ T6003] serio: Serial port ttyS3 [ 132.178638][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.400994][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.579923][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.829934][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.831394][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.727517][ T6013] Zero length message leads to an empty skb [ 135.018628][ T6015] loop0: detected capacity change from 0 to 131072 [ 135.038647][ T6015] F2FS-fs (loop0): invalid crc value [ 135.137430][ T6015] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 135.148291][ T6015] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 135.685862][ T6023] netlink: 67 bytes leftover after parsing attributes in process `syz.4.52'. [ 135.686564][ T6023] IPv6: Can't replace route, no match found [ 136.146241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.773553][ T59] bridge_slave_1: left allmulticast mode [ 136.773619][ T59] bridge_slave_1: left promiscuous mode [ 136.775370][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.312473][ T6028] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 137.609941][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.619279][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.627724][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.638613][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.648881][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.173855][ T59] bridge_slave_0: left allmulticast mode [ 138.190928][ T59] bridge_slave_0: left promiscuous mode [ 138.212331][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.142061][ T6043] netlink: 'syz.3.47': attribute type 4 has an invalid length. [ 139.638880][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.659070][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.687234][ T59] bond0 (unregistering): Released all slaves [ 140.188549][ T52] Bluetooth: hci3: command tx timeout [ 140.823652][ T6065] loop4: detected capacity change from 0 to 2048 [ 140.852971][ T6065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.152225][ T6051] loop3: detected capacity change from 0 to 64 [ 142.719496][ T52] Bluetooth: hci3: command tx timeout [ 142.746021][ T59] hsr_slave_0: left promiscuous mode [ 142.758607][ T59] hsr_slave_1: left promiscuous mode [ 142.768588][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.777365][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.327687][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.330958][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.434900][ T59] veth1_macvtap: left promiscuous mode [ 143.435098][ T59] veth0_macvtap: left promiscuous mode [ 143.435645][ T59] veth1_vlan: left promiscuous mode [ 143.441107][ T59] veth0_vlan: left promiscuous mode [ 144.239231][ T6087] loop4: detected capacity change from 0 to 32768 [ 144.362946][ T6087] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.432986][ T6087] XFS (loop4): Ending clean mount [ 144.555732][ T6099] mmap: syz.2.62 (6099) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.983348][ T52] Bluetooth: hci3: command tx timeout [ 145.620912][ T5621] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.714296][ T6104] loop2: detected capacity change from 0 to 2048 [ 145.984235][ T6104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.120216][ T52] Bluetooth: hci3: command tx timeout [ 148.148540][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.175661][ T6123] random: crng reseeded on system resumption [ 148.929055][ T5756] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.624796][ T59] team0 (unregistering): Port device team_slave_1 removed [ 149.649995][ T5756] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.677343][ T5756] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 149.677388][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.677422][ T5756] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 149.677447][ T5756] usb 1-1: config 1 has no interface number 1 [ 149.677494][ T5756] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 149.732039][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.732085][ T5756] usb 1-1: Product: syz [ 149.732126][ T5756] usb 1-1: Manufacturer: syz [ 149.732147][ T5756] usb 1-1: SerialNumber: syz [ 149.757482][ T59] team0 (unregistering): Port device team_slave_0 removed [ 150.936115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 151.486104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.996532][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 152.544206][ T5756] usb 1-1: USB disconnect, device number 2 [ 152.556367][ T6136] loop3: detected capacity change from 0 to 32768 [ 152.557566][ T6136] btrfs: Unknown parameter 'usebackuproot' [ 153.015976][ T6136] loop3: detected capacity change from 0 to 32768 [ 153.018301][ T6136] jfs: Unknown parameter './file0' [ 153.183359][ T6139] loop0: detected capacity change from 0 to 4096 [ 153.209401][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.242948][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 153.243171][ T6136] overlayfs: missing 'lowerdir' [ 153.255594][ T6128] warning: `syz.2.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.264142][ T6136] netlink: 48 bytes leftover after parsing attributes in process `syz.3.71'. [ 153.732808][ T6139] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 153.929361][ T6139] ntfs3(loop0): Failed to load $Extend (-22). [ 153.955959][ T6139] ntfs3(loop0): Failed to initialize $Extend. [ 156.942351][ T6179] loop4: detected capacity change from 0 to 4096 [ 157.036458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 157.162539][ T6184] loop2: detected capacity change from 0 to 32768 [ 157.180733][ T6184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.79 (6184) [ 157.206439][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 157.208330][ T6184] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.208381][ T6184] BTRFS info (device loop2): using crc32c checksum algorithm [ 157.283522][ T6179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.307683][ T1177] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x2388648b level 0 [ 157.308295][ T6184] BTRFS error (device loop2): failed to load root extent [ 157.353852][ T6184] BTRFS error (device loop2): open_ctree failed: -EIO [ 157.372210][ T30] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 157.514946][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.515000][ T30] usb 4-1: Product: syz [ 157.515033][ T30] usb 4-1: Manufacturer: syz [ 157.515103][ T30] usb 4-1: SerialNumber: syz [ 157.662405][ T30] usb 4-1: config 0 descriptor?? [ 157.803518][ T6202] loop0: detected capacity change from 0 to 1024 [ 157.803951][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.804070][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.804254][ T6031] bridge_slave_0: entered allmulticast mode [ 157.804544][ T6202] EXT4-fs: Ignoring removed bh option [ 157.804644][ T6202] EXT4-fs: Ignoring removed bh option [ 157.812698][ T30] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 002 [ 157.836870][ T6031] bridge_slave_0: entered promiscuous mode [ 158.367069][ T6207] Bluetooth: MGMT ver 1.23 [ 158.785454][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.808912][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.816860][ T6031] bridge_slave_1: entered allmulticast mode [ 158.899169][ T6202] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 158.931004][ T31] audit: type=1800 audit(1786052490.154:3): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.70" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 159.062592][ T30] (null): failure reading functionality [ 159.136853][ T6207] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.70: corrupted inode contents [ 159.142532][ T6207] EXT4-fs error (device loop4): ext4_dirty_inode:6731: inode #15: comm syz.4.70: mark_inode_dirty error [ 159.149376][ T6207] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.70: corrupted inode contents [ 159.149413][ T6031] bridge_slave_1: entered promiscuous mode [ 159.149876][ T6207] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.70: mark_inode_dirty error [ 159.155060][ T6207] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.70: corrupted inode contents [ 159.157356][ T6207] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.70: mark_inode_dirty error [ 159.162611][ T6207] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.70: corrupted inode contents [ 159.173312][ T6207] EXT4-fs error (device loop4): ext4_truncate:4721: inode #15: comm syz.4.70: mark_inode_dirty error [ 159.175320][ T6207] EXT4-fs error (device loop4) in ext4_setattr:6247: Corrupt filesystem [ 159.379901][ T30] i2c i2c-1: connected i2c-tiny-usb device [ 159.412463][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.469884][ T6202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.610079][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.631359][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.753404][ T6031] team0: Port device team_slave_0 added [ 161.270439][ T6218] random: crng reseeded on system resumption [ 161.385858][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.590913][ T6031] team0: Port device team_slave_1 added [ 163.773331][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.780440][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.807314][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.830659][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.837880][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.856603][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.888963][ T30] usb 4-1: USB disconnect, device number 2 [ 163.963467][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 164.018950][ T6231] loop0: detected capacity change from 0 to 256 [ 164.207938][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 164.447156][ T31] audit: type=1800 audit(1786052495.644:4): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.85" name="file2" dev="loop0" ino=1048607 res=0 errno=0 [ 165.368235][ T6242] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 167.078167][ T882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.072539][ T6031] hsr_slave_0: entered promiscuous mode [ 168.083019][ T6031] hsr_slave_1: entered promiscuous mode [ 168.092879][ T6031] debugfs: 'hsr0' already exists in 'hsr' [ 168.092921][ T6031] Cannot create hsr debugfs directory [ 168.339737][ T6257] capability: warning: `syz.0.88' uses 32-bit capabilities (legacy support in use) [ 169.773115][ T6262] loop2: detected capacity change from 0 to 40427 [ 169.800472][ T6262] F2FS-fs (loop2): invalid crc value [ 170.032576][ T6262] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 170.057575][ T6262] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 170.057648][ T6262] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 170.057728][ T6262] F2FS-fs (loop2): Start checkpoint disabled! [ 170.079320][ T6262] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 170.088153][ T6262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 172.668299][ T6285] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.361375][ T6031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.383925][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.393775][ T6031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.410478][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.420663][ T6031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.440121][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.469199][ T6031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.512901][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.917109][ T6296] netlink: zone id is out of range [ 173.924217][ T6296] netlink: zone id is out of range [ 175.440379][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.554848][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 175.630108][ T6031] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.920301][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.920430][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.557382][ T5822] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 176.676618][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.676848][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.783184][ T5822] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 176.795150][ T5822] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 176.795242][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.795338][ T5822] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.795457][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.795547][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.827621][ T5822] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 176.827759][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.827843][ T5822] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.827924][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.828017][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.872362][ T5822] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 176.872520][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.872603][ T5822] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.872689][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.872768][ T5822] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.943067][ T5822] usb 3-1: string descriptor 0 read error: -22 [ 176.943509][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.151779][ T5822] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 177.629203][ T6340] loop4: detected capacity change from 0 to 128 [ 180.175093][ T6351] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 180.824558][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 180.874934][ T6367] netlink: 'syz.0.103': attribute type 6 has an invalid length. [ 182.319361][ T25] usb 3-1: USB disconnect, device number 3 [ 182.955782][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.045462][ T6383] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by ""[6383] [ 185.373511][ T6031] veth0_vlan: entered promiscuous mode [ 185.404415][ T6031] veth1_vlan: entered promiscuous mode [ 185.446537][ T882] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.484267][ T6031] veth0_macvtap: entered promiscuous mode [ 185.499196][ T6031] veth1_macvtap: entered promiscuous mode [ 185.541581][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.570649][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.606845][ T882] usb 3-1: Using ep0 maxpacket: 32 [ 185.615245][ T882] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 185.626719][ T882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.638591][ T882] usb 3-1: config 0 descriptor?? [ 185.646214][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.736990][ T1155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.749343][ T1177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.759027][ T1155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.768125][ T1155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.817527][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 185.823114][ T30] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.841456][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.841506][ T30] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.863613][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.863684][ T30] usb 4-1: Product: syz [ 185.863713][ T30] usb 4-1: Manufacturer: syz [ 185.863731][ T30] usb 4-1: SerialNumber: syz [ 185.908302][ T882] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 185.929750][ T882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.940262][ T882] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 185.940351][ T882] usb 3-1: media controller created [ 186.005873][ T882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.070674][ T30] usb 4-1: 0:2 : does not exist [ 186.070862][ T30] usb 4-1: unit 15 not found! [ 186.197770][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.197834][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.260172][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.269829][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.356318][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 186.367222][ T30] usb 4-1: USB disconnect, device number 3 [ 186.408780][ T1155] IPVS: starting estimator thread 0... [ 186.496227][ T6418] IPVS: using max 24 ests per chain, 57600 per kthread [ 186.606092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 188.191427][ T882] az6027: usb out operation failed. (-110) [ 188.195927][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 188.197583][ T882] az6027: usb out operation failed. (-32) [ 188.197598][ T882] stb0899_attach: Driver disabled by Kconfig [ 188.197608][ T882] az6027: no front-end attached [ 188.197608][ T882] [ 188.203037][ T882] az6027: usb out operation failed. (-32) [ 188.203055][ T882] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 188.255693][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 188.300816][ T882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 188.304260][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.304345][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.346341][ T882] dvb-usb: schedule remote query interval to 400 msecs. [ 188.352035][ T25] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 188.352125][ T25] usb 5-1: Product: syz [ 188.352174][ T25] usb 5-1: Manufacturer: syz [ 188.372290][ T882] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 188.510629][ T988] usb 3-1: USB disconnect, device number 4 [ 188.523642][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.591554][ T25] hub 5-1:4.0: USB hub found [ 188.804967][ T25] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 188.926351][ T6427] NILFS (loop3): device size too small [ 189.932426][ T6431] loop2: detected capacity change from 0 to 16 [ 190.236664][ T6431] erofs (device loop2): mounted with root inode @ nid 36. [ 190.584487][ T25] usb 5-1: USB disconnect, device number 3 [ 191.811323][ T6440] loop3: detected capacity change from 0 to 2048 [ 192.008635][ T988] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 192.068770][ T6440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.330301][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 192.842738][ T988] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 192.908404][ T6448] loop4: detected capacity change from 0 to 128 [ 192.936902][ T6448] EXT4-fs (loop4): Test dummy encryption mode enabled [ 192.988684][ T6448] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.005884][ T6448] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.026607][ T988] usb 3-1: Using ep0 maxpacket: 16 [ 193.027378][ T988] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 193.034720][ T988] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 193.034808][ T988] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 193.034869][ T988] usb 3-1: config 166 has no interface number 0 [ 193.034910][ T988] usb 3-1: config 166 has no interface number 1 [ 193.035051][ T988] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 193.035109][ T988] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 193.035225][ T988] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 193.035294][ T988] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 193.035370][ T988] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 193.035438][ T988] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 193.035501][ T988] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 193.035567][ T988] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 193.035642][ T988] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 193.035715][ T988] usb 3-1: config 166 interface 177 has no altsetting 0 [ 193.035773][ T988] usb 3-1: config 166 interface 34 has no altsetting 0 [ 193.050223][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.050309][ T988] usb 3-1: Product: syz [ 193.050350][ T988] usb 3-1: Manufacturer: syz [ 193.050392][ T988] usb 3-1: SerialNumber: syz [ 193.236359][ T6448] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 194.316095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.047684][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.047803][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.466453][ T6459] workqueue: Failed to create a rescuer kthread for wq "blk_crypto_wq": -EINTR [ 195.813939][ T988] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 195.861762][ T6459] fscrypt (loop4): Error -12 starting to use blk-crypto [ 196.064686][ T5621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.053114][ T988] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 198.369594][ T988] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 198.905802][ T988] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 198.921166][ T988] uvcvideo 3-1:166.34: No valid video chain found. [ 199.800209][ T988] usb 3-1: USB disconnect, device number 5 [ 199.999850][ T6489] loop5: detected capacity change from 0 to 2048 [ 200.203912][ T6489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.392655][ T5873] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 202.302704][ T6504] netlink: 44 bytes leftover after parsing attributes in process `syz.4.127'. [ 202.601210][ T6505] loop5: detected capacity change from 0 to 32768 [ 202.646725][ T6505] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.125 (6505) [ 202.673176][ T6505] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.673224][ T6505] BTRFS info (device loop5): using sha256 checksum algorithm [ 202.796473][ T6505] BTRFS info (device loop5): enabling ssd optimizations [ 202.796525][ T6505] BTRFS info (device loop5): turning on sync discard [ 202.796557][ T6505] BTRFS info (device loop5): enabling free space tree [ 202.796592][ T6505] BTRFS info (device loop5): use zlib compression, level 3 [ 203.087931][ T5349] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 203.946427][ T5349] usb 1-1: Using ep0 maxpacket: 32 [ 203.949543][ T5349] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 203.978836][ T5349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.120897][ T5349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.120943][ T5349] usb 1-1: Product: syz [ 204.120974][ T5349] usb 1-1: Manufacturer: syz [ 204.120993][ T5349] usb 1-1: SerialNumber: syz [ 204.146020][ T5349] usb 1-1: config 0 descriptor?? [ 204.169964][ T6031] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.219359][ T5349] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 204.372579][ T5349] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 204.373204][ T5349] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 204.722646][ T5349] usb 1-1: USB disconnect, device number 4 [ 206.632002][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 207.016397][ T5873] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 207.166107][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 207.176509][ T5873] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.187744][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.187789][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.210600][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.210648][ T5873] usb 3-1: Product: syz [ 207.210683][ T5873] usb 3-1: Manufacturer: syz [ 207.210704][ T5873] usb 3-1: SerialNumber: syz [ 207.694862][ T6571] loop5: detected capacity change from 0 to 32768 [ 207.714667][ T5873] usb 3-1: 0:2 : does not exist [ 207.736345][ T5873] usb 3-1: unit 15 not found! [ 207.741519][ T6571] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 207.968813][ T6571] XFS (loop5): Ending clean mount [ 208.978844][ T6031] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 208.991325][ T5873] usb 3-1: USB disconnect, device number 6 [ 209.142116][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.606158][ T5749] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 210.806146][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 210.812073][ T5749] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 210.823190][ T5749] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 210.832029][ T5749] usb 4-1: config 254 has no interface number 0 [ 210.838719][ T5749] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 210.838774][ T5749] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.838804][ T5749] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.838835][ T5749] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 210.838862][ T5749] usb 4-1: config 254 interface 235 has no altsetting 0 [ 210.920500][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.920547][ T5749] usb 4-1: Product: syz [ 210.920580][ T5749] usb 4-1: Manufacturer: syz [ 210.920600][ T5749] usb 4-1: SerialNumber: syz [ 210.962042][ T6595] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.354286][ T6595] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.369730][ T5749] usbtest 4-1:254.235: Linux gadget zero [ 211.377267][ T5749] usbtest 4-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 213.490736][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 213.494518][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 213.501343][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 213.505246][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 214.003924][ T5349] usb 4-1: USB disconnect, device number 5 [ 215.349001][ T5633] Bluetooth: hci0: unexpected event for opcode 0x6b2f [ 217.383613][ T6648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.066200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 218.429751][ T6652] netlink: 9 bytes leftover after parsing attributes in process `syz.5.150'. [ 218.431439][ T6652] 0·: renamed from hsr0 (while UP) [ 218.972344][ T6652] 0·: entered allmulticast mode [ 218.977898][ T6652] hsr_slave_0: entered allmulticast mode [ 218.984003][ T6652] hsr_slave_1: entered allmulticast mode [ 218.999846][ T6652] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 221.911561][ T6680] loop5: detected capacity change from 0 to 16 [ 223.237885][ T6680] erofs (device loop5): mounted with root inode @ nid 36. [ 224.003196][ T6691] loop4: detected capacity change from 0 to 512 [ 224.012483][ T6691] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.933326][ T6692] binder: 6686:6692 ioctl c0306201 200000000040 returned -14 [ 226.178476][ T6696] loop2: detected capacity change from 0 to 512 [ 226.249026][ T6696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 226.916254][ T5349] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 227.627375][ T5349] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 227.640080][ T5349] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 227.640136][ T5349] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 227.640180][ T5349] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 227.640213][ T5349] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.640245][ T5349] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 227.640276][ T5349] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 227.640308][ T5349] usb 3-1: config 168 interface 0 has no altsetting 0 [ 227.696582][ T5349] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 227.696623][ T5349] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 227.696713][ T5349] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 227.696742][ T5349] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.696768][ T5349] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 227.696794][ T5349] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 227.696821][ T5349] usb 3-1: config 168 interface 0 has no altsetting 0 [ 227.796947][ T5349] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 227.796987][ T5349] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 227.797028][ T5349] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 227.797056][ T5349] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.797082][ T5349] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 227.797109][ T5349] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 227.797137][ T5349] usb 3-1: config 168 interface 0 has no altsetting 0 [ 227.875544][ T5349] usb 3-1: string descriptor 0 read error: -22 [ 227.875704][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.017791][ T5349] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 228.199769][ T988] usb 3-1: USB disconnect, device number 7 [ 228.391222][ T6696] adutux: No device or device unplugged -19 [ 228.399875][ T6696] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #2: block 3: comm syz.2.152: lblock 0 mapped to illegal pblock 3 (length 1) [ 228.456343][ T6721] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 228.466532][ T6696] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.152: error -EUCLEAN reading directory block [ 228.470021][ T6721] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 229.065057][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.664824][ T6728] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 230.222776][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.232349][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.240780][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.249587][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.258939][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.785044][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.167'. [ 231.457661][ T6749] netlink: 'syz.5.159': attribute type 2 has an invalid length. [ 231.458658][ T6749] netlink: 'syz.5.159': attribute type 2 has an invalid length. [ 232.014269][ T6747] netlink: 168 bytes leftover after parsing attributes in process `syz.4.168'. [ 232.098303][ T5873] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 232.306509][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 232.330447][ T5873] usb 6-1: unable to get BOS descriptor or descriptor too short [ 232.330689][ T5873] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 232.349754][ T5873] usb 6-1: config 16 has an invalid interface number: 44 but max is 0 [ 232.349828][ T5873] usb 6-1: config 16 has no interface number 0 [ 232.349938][ T5873] usb 6-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 232.350010][ T5873] usb 6-1: config 16 interface 44 has no altsetting 0 [ 232.358447][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.358518][ T5873] usb 6-1: Product: syz [ 232.358552][ T5873] usb 6-1: Manufacturer: syz [ 232.358593][ T5873] usb 6-1: SerialNumber: syz [ 232.572378][ T6750] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.749285][ T5633] Bluetooth: hci5: command tx timeout [ 232.846809][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.124545][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.838687][ T5633] Bluetooth: hci5: command tx timeout [ 235.066258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 235.110140][ T5873] cypress_cy7c63 6-1:16.44: Cypress CY7C63xxx device now attached [ 235.125674][ T5633] Bluetooth: hci4: unexpected event for opcode 0x6b2f [ 235.144889][ T5873] usb 6-1: USB disconnect, device number 2 [ 235.169601][ T5873] cypress_cy7c63 6-1:16.44: Cypress CY7C63xxx device now disconnected [ 235.482143][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.508783][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.922820][ T5633] Bluetooth: hci5: command tx timeout [ 237.784173][ T6778] loop5: detected capacity change from 0 to 512 [ 237.849161][ T6778] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 237.849210][ T6778] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 237.849245][ T6778] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.174: Corrupt directory, running e2fsck is recommended [ 237.934574][ T6778] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 237.934862][ T6778] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.174: corrupted in-inode xattr: invalid ea_ino [ 237.935498][ T6778] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 237.944253][ T6778] EXT4-fs (loop5): Remounting filesystem read-only [ 238.237164][ T6778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.292631][ T6778] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 238.305032][ T6778] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 238.315564][ T6778] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.174: Corrupt directory, running e2fsck is recommended [ 238.349278][ T6778] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 238.361567][ T6778] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 238.372533][ T6778] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.174: Corrupt directory, running e2fsck is recommended [ 238.395618][ T6784] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 238.395706][ T6784] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 238.395747][ T6784] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 238.999271][ T5633] Bluetooth: hci5: command tx timeout [ 239.143583][ T6778] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 239.169526][ T6778] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 239.179442][ T6778] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.174: Corrupt directory, running e2fsck is recommended [ 239.221051][ T6788] input: syz1 as /devices/virtual/input/input7 [ 239.765755][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.781493][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.781680][ T6734] bridge_slave_0: entered allmulticast mode [ 239.817360][ T6734] bridge_slave_0: entered promiscuous mode [ 239.882422][ T80] bridge_slave_1: left allmulticast mode [ 239.889461][ T80] bridge_slave_1: left promiscuous mode [ 239.895332][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.943001][ T80] bridge_slave_0: left allmulticast mode [ 239.947938][ T6031] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.967375][ T80] bridge_slave_0: left promiscuous mode [ 239.973428][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.306320][ T6810] loop2: detected capacity change from 0 to 32768 [ 240.315120][ T882] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 240.337153][ T6810] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 240.337210][ T6810] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 240.400662][ T6810] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 240.458522][ T882] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 240.467295][ T5822] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 240.467389][ T5822] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 240.493136][ T882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.493191][ T882] usb 4-1: Product: syz [ 240.493223][ T882] usb 4-1: Manufacturer: syz [ 240.493289][ T882] usb 4-1: SerialNumber: syz [ 240.784777][ T5822] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 317ms [ 240.806309][ T882] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 240.806345][ T882] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 240.899664][ T5822] gfs2: fsid=syz:syz.0: jid=0: Done [ 240.905110][ T6810] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 241.697796][ T6810] gfs2: fsid=syz:syz.0: found 1 quota changes [ 241.771244][ T31] audit: type=1800 audit(1786052572.994:5): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.178" name="file1" dev="loop2" ino=2341 res=0 errno=0 [ 242.043242][ T31] audit: type=1800 audit(1786052573.264:6): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.178" name="file1" dev="loop2" ino=2341 res=0 errno=0 [ 242.200713][ T6823] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 242.200776][ T6823] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 242.200825][ T6823] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:6823 [gfs2_quotad/syz] gfs2_quota_sync+0x353/0x450 [ 242.200875][ T6823] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 242.200924][ T6823] CPU: 0 UID: 0 PID: 6823 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT(full) [ 242.200958][ T6823] Tainted: [L]=SOFTLOCKUP [ 242.200966][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.200988][ T6823] Call Trace: [ 242.201007][ T6823] [ 242.201016][ T6823] dump_stack_lvl+0xe8/0x150 [ 242.201043][ T6823] gfs2_withdraw+0xc3/0x1b0 [ 242.201060][ T6823] inode_go_instantiate+0xbc1/0x12b0 [ 242.201085][ T6823] ? queue_delayed_work_on+0x12f/0x1e0 [ 242.201110][ T6823] ? preempt_schedule_common+0x82/0xd0 [ 242.201129][ T6823] ? __pfx_inode_go_instantiate+0x10/0x10 [ 242.201162][ T6823] gfs2_instantiate+0x168/0x220 [ 242.201181][ T6823] gfs2_glock_wait+0x1d4/0x2a0 [ 242.201200][ T6823] do_sync+0x49c/0xbb0 [ 242.201219][ T6823] ? gfs2_quota_sync+0x353/0x450 [ 242.201246][ T6823] ? __pfx_do_sync+0x10/0x10 [ 242.201264][ T6823] ? do_raw_spin_lock+0x12b/0x2f0 [ 242.201291][ T6823] ? gfs2_quota_sync+0x353/0x450 [ 242.201315][ T6823] ? do_raw_spin_unlock+0xf5/0x210 [ 242.201338][ T6823] gfs2_quota_sync+0x353/0x450 [ 242.201366][ T6823] gfs2_quotad+0x2ab/0x6f0 [ 242.201396][ T6823] ? __pfx_gfs2_quotad+0x10/0x10 [ 242.201419][ T6823] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 242.201435][ T6823] ? __kthread_parkme+0x71/0x1f0 [ 242.201457][ T6823] ? __kthread_parkme+0x196/0x1f0 [ 242.201482][ T6823] kthread+0x388/0x470 [ 242.201497][ T6823] ? __pfx_gfs2_quotad+0x10/0x10 [ 242.201516][ T6823] ? __pfx_kthread+0x10/0x10 [ 242.201537][ T6823] ret_from_fork+0x514/0xb70 [ 242.201564][ T6823] ? __pfx_ret_from_fork+0x10/0x10 [ 242.201588][ T6823] ? __switch_to+0xc89/0x1420 [ 242.201611][ T6823] ? __pfx_kthread+0x10/0x10 [ 242.201626][ T6823] ret_from_fork_asm+0x1a/0x30 [ 242.201661][ T6823] [ 242.210990][ T6823] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 242.798462][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.810359][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.821323][ T80] bond0 (unregistering): Released all slaves [ 242.831218][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.831600][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.831957][ T6734] bridge_slave_1: entered allmulticast mode [ 242.840813][ T6734] bridge_slave_1: entered promiscuous mode [ 242.873728][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 243.069075][ T6734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.102266][ T6734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.270779][ T6734] team0: Port device team_slave_0 added [ 243.336262][ T6734] team0: Port device team_slave_1 added [ 243.415173][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.422511][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.448813][ T6734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.081651][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.081700][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.083771][ T6734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.547589][ T6855] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 244.547618][ T6855] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 244.679243][ T6855] vhci_hcd vhci_hcd.0: Device attached [ 244.819588][ T80] hsr_slave_0: left promiscuous mode [ 244.833643][ T80] hsr_slave_1: left promiscuous mode [ 244.852986][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.862493][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.890756][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.905114][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.934283][ T80] veth1_macvtap: left promiscuous mode [ 244.943163][ T80] veth0_macvtap: left promiscuous mode [ 244.952874][ T80] veth1_vlan: left promiscuous mode [ 244.960551][ T80] veth0_vlan: left promiscuous mode [ 245.441130][ T6856] vhci_hcd: connection closed [ 245.449741][ T1177] vhci_hcd vhci_hcd.4: stop threads [ 245.463484][ T1177] vhci_hcd vhci_hcd.4: release socket [ 245.494319][ T1177] vhci_hcd vhci_hcd.4: disconnect device [ 245.678261][ T5823] usb 4-1: USB disconnect, device number 6 [ 246.439402][ T6862] tipc: Trying to set illegal importance in message [ 246.660505][ T6870] loop5: detected capacity change from 0 to 512 [ 246.731642][ T6870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.731785][ T6870] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.973268][ T5633] Bluetooth: hci4: unexpected event for opcode 0x6b2f [ 247.579691][ T5822] gfs2: fsid=syz:syz.0: file system withdrawn [ 247.813451][ T80] team0 (unregistering): Port device team_slave_1 removed [ 247.840072][ T6031] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.911710][ T80] team0 (unregistering): Port device team_slave_0 removed [ 249.141212][ T31] audit: type=1326 audit(1786052580.364:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1f9e0d9 code=0x7ffc0000 [ 249.141285][ T31] audit: type=1326 audit(1786052580.364:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1f9e0d9 code=0x7ffc0000 [ 249.206585][ T31] audit: type=1326 audit(1786052580.424:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17a1f9e0d9 code=0x7ffc0000 [ 249.206656][ T31] audit: type=1326 audit(1786052580.434:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1f9e0d9 code=0x7ffc0000 [ 249.206717][ T31] audit: type=1326 audit(1786052580.434:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1f9e0d9 code=0x7ffc0000 [ 249.295688][ T31] audit: type=1326 audit(1786052580.514:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f17a1f9e0d9 code=0x7ffc0000 [ 249.295740][ T31] audit: type=1326 audit(1786052580.514:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1f9e0d9 code=0x7ffc0000 [ 249.295784][ T31] audit: type=1326 audit(1786052580.514:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1f9e0d9 code=0x7ffc0000 [ 249.380501][ T31] audit: type=1326 audit(1786052580.604:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f17a1f9e0d9 code=0x7ffc0000 [ 249.380540][ T31] audit: type=1326 audit(1786052580.604:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a1f9e0d9 code=0x7ffc0000 [ 249.807500][ T6895] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 250.191946][ T6897] loop2: detected capacity change from 0 to 512 [ 250.653924][ T6897] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 250.818276][ T6897] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 250.818808][ T6897] block device autoloading is deprecated and will be removed. [ 250.821650][ T6897] EXT4-fs (loop2): couldn't read superblock of external journal [ 251.133304][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 251.325724][ T6734] hsr_slave_0: entered promiscuous mode [ 251.355470][ T6734] hsr_slave_1: entered promiscuous mode [ 252.003231][ T6734] debugfs: 'hsr0' already exists in 'hsr' [ 252.012993][ T6734] Cannot create hsr debugfs directory [ 252.435022][ T6904] infiniband syz2: set active [ 252.435068][ T6904] infiniband syz2: added team_slave_1 [ 252.440605][ T6904] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 252.444463][ T6904] infiniband syz2: Couldn't open port 1 [ 252.444768][ T6904] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 252.444809][ T6904] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 252.444857][ T6904] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 252.670490][ T6904] RDS/IB: syz2: added [ 252.670959][ T6904] smc: adding ib device syz2 with port count 1 [ 252.671114][ T6904] smc: ib device syz2 port 1 has no pnetid [ 254.898924][ T80] IPVS: stop unused estimator thread 0... [ 255.229910][ T6734] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 255.716953][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.717058][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.174854][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.269182][ T6734] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 256.300516][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.310117][ T6734] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.335791][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.349417][ T6734] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 256.407368][ T6734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.442594][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.771037][ T6734] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.826806][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.826888][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.862941][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.863048][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.972240][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 258.345531][ T6960] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by "¨˜s¨µs…µ¿‘¸(p„œE»û{بDî¡­8ÖHEV÷[\x0c˜œŽEààâ0ƒ´‚p2›½\x09'÷Ø›6ä 9\x076Ã\x0cä)Í\x0a³!'V¡v>¦yð1lV3¦Š5‚ÈФšÀ®›ˆ¸i…ÝÕAVD¯oÏâU¬9û•Ýì­Ç)Kb°•V¡ŸDcÑ\x07žäojcÒÝ9xáNRH‹Ëì9p·\x22Lž+Xp>¡iŒN¡ô¸0zïÃR¬>»:MÒLã¶oÄøâìHËI£óòGÊÓó“\x07B¡9Ùr¡(dKf^7Æ_N䀟´è\x5c-ÄD}™i;ZÂzd8ö:\x072h¢nª‰çk*Žø—®d-Âl¯1Nà5Ky“\x22b%“¡l‡Û¬¥5.ÖÙd¸sUk·c©òâÙÍð$¢ª 1 [ 263.975948][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.990460][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.000959][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.005028][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.027893][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.772975][ T7020] loop5: detected capacity change from 0 to 32768 [ 265.511241][ T7020] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 265.517193][ T7020] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 265.573853][ T7020] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 265.590397][ T882] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 265.590465][ T882] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 266.120309][ T52] Bluetooth: hci0: command tx timeout [ 266.651698][ T882] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1061ms [ 266.651924][ T882] gfs2: fsid=syz:syz.0: jid=0: Done [ 266.651983][ T7020] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 266.778549][ T7033] xt_CT: No such helper "netbios-ns" [ 266.906769][ T7020] gfs2: fsid=syz:syz.0: found 1 quota changes [ 267.183472][ T7042] loop3: detected capacity change from 0 to 256 [ 267.633379][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 267.633450][ T31] audit: type=1800 audit(1786052598.824:34): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.211" name="file1" dev="loop5" ino=2341 res=0 errno=0 [ 268.216796][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 268.216931][ T52] Bluetooth: hci0: command tx timeout [ 268.604595][ T6031] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 268.604653][ T6031] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 268.604705][ T6031] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:6031 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 268.604756][ T6031] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 268.604792][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 268.604822][ T6031] Tainted: [L]=SOFTLOCKUP [ 268.604830][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.604843][ T6031] Call Trace: [ 268.604852][ T6031] [ 268.604862][ T6031] dump_stack_lvl+0xe8/0x150 [ 268.604896][ T6031] gfs2_withdraw+0xc3/0x1b0 [ 268.604921][ T6031] inode_go_instantiate+0xbc1/0x12b0 [ 268.604956][ T6031] ? queue_delayed_work_on+0x12f/0x1e0 [ 268.604990][ T6031] ? preempt_schedule_common+0x82/0xd0 [ 268.605018][ T6031] ? __pfx_inode_go_instantiate+0x10/0x10 [ 268.605069][ T6031] gfs2_instantiate+0x168/0x220 [ 268.605096][ T6031] gfs2_glock_wait+0x1d4/0x2a0 [ 268.605125][ T6031] do_sync+0x49c/0xbb0 [ 268.605152][ T6031] ? gfs2_quota_sync+0x353/0x450 [ 268.605188][ T6031] ? __pfx_do_sync+0x10/0x10 [ 268.605225][ T6031] ? gfs2_quota_sync+0x353/0x450 [ 268.605258][ T6031] ? do_raw_spin_unlock+0xf5/0x210 [ 268.605293][ T6031] gfs2_quota_sync+0x353/0x450 [ 268.605334][ T6031] gfs2_sync_fs+0x4c/0xb0 [ 268.605363][ T6031] sync_filesystem+0xf1/0x240 [ 268.605393][ T6031] generic_shutdown_super+0x77/0x2d0 [ 268.605439][ T6031] kill_block_super+0x44/0xa0 [ 268.605465][ T6031] deactivate_locked_super+0xbc/0x110 [ 268.605500][ T6031] cleanup_mnt+0x3d3/0x460 [ 268.605529][ T6031] task_work_run+0x1d9/0x270 [ 268.605555][ T6031] ? __pfx_task_work_run+0x10/0x10 [ 268.605589][ T6031] exit_to_user_mode_loop+0x1fa/0x730 [ 268.605623][ T6031] ? rcu_is_watching+0x15/0xb0 [ 268.605653][ T6031] do_syscall_64+0x328/0x510 [ 268.605677][ T6031] ? trace_irq_disable+0x3b/0x140 [ 268.605696][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.605719][ T6031] ? clear_bhb_loop+0x40/0x90 [ 268.605769][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.605832][ T6031] RIP: 0033:0x7f17a1f9f317 [ 268.605905][ T6031] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 268.605951][ T6031] RSP: 002b:00007ffc5924e098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 268.606008][ T6031] RAX: 0000000000000000 RBX: 00007f17a2034474 RCX: 00007f17a1f9f317 [ 268.606049][ T6031] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5924e150 [ 268.606082][ T6031] RBP: 00007ffc5924e150 R08: 00007ffc5924f150 R09: 00000000ffffffff [ 268.606123][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5924f1e0 [ 268.606157][ T6031] R13: 00007f17a2034474 R14: 0000000000041507 R15: 00007ffc5924f220 [ 268.606251][ T6031] [ 268.620771][ T6031] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 270.046966][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 270.075595][ T7056] ALSA: mixer_oss: invalid OSS volume '' [ 270.075643][ T7056] ALSA: mixer_oss: invalid OSS volume '÷uÑdFÿ¾ÞÙÙdèÚÿ³sïj@JŒ¶×uïg0ácd' [ 270.075673][ T7056] ALSA: mixer_oss: invalid OSS volume 'Óâ¯Ó÷Në—WÖ“YZ£µëS%®¢¢‡†fØèè¾V' [ 270.075697][ T7056] ALSA: mixer_oss: invalid OSS volume 'ò'ëlÈ¿D†ªTBxÝN' [ 270.075717][ T7056] ALSA: mixer_oss: invalid OSS volume 'ªày' [ 270.075799][ T7056] ALSA: mixer_oss: invalid OSS volume 'ø5y«’µ}›9´—r~¯M†¨+¨õÃÏ3óó' [ 270.075840][ T7056] ALSA: mixer_oss: invalid OSS volume '϶×Ï*kC9þ¨dË7ë¦2§;°"' [ 270.075872][ T7056] ALSA: mixer_oss: invalid OSS volume '*n’dVÅé8”mÝE¶§¤âÊ5×:êð4' [ 270.075893][ T7056] ALSA: mixer_oss: invalid OSS volume '¥çÍÊPKŒóÚµ1}Âæ {N&I„½½Ða 8*ʇ' [ 270.075920][ T7056] ALSA: mixer_oss: invalid OSS volume '€OCÔØ"¸Ê[ñƒ'måþïÕ/AÏO^ìþG&º-Û' [ 270.076235][ T7056] ALSA: mixer_oss: invalid OSS volume 'Êø§' [ 270.076268][ T7056] ALSA: mixer_oss: invalid OSS volume 'ƒ¿Àð@H²ÅÅV¬É-=f#o´»)ÉU.Nƒ' [ 270.076289][ T7056] ALSA: mixer_oss: invalid OSS volume '¼ùï^á&‡ƒ8ëîÏàHåLV^\LPÅË&Ò‰\‡¿' [ 270.076309][ T7056] ALSA: mixer_oss: invalid OSS volume '8»2œ°p¨<ö2IqܹUÿAÀÔº–ÎÇ%„A' [ 270.076365][ T7056] ALSA: mixer_oss: invalid OSS volume '»Š˜’Q' [ 270.076381][ T7056] ALSA: mixer_oss: invalid OSS volume 'å£Ñ' [ 270.095168][ T6734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.292971][ T5633] Bluetooth: hci0: command tx timeout [ 270.793430][ T1177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.223376][ T1155] IPVS: starting estimator thread 0... [ 271.351823][ T7077] IPVS: using max 24 ests per chain, 57600 per kthread [ 271.588210][ T1177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.992567][ T5633] Bluetooth: hci0: command tx timeout [ 273.252472][ T1177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.452969][ T7097] netlink: 136 bytes leftover after parsing attributes in process `syz.3.223'. [ 273.488241][ T1177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.604703][ T6734] veth0_vlan: entered promiscuous mode [ 273.657720][ T6734] veth1_vlan: entered promiscuous mode [ 273.707514][ T6031] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 273.723613][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 273.723648][ T6031] Tainted: [L]=SOFTLOCKUP [ 273.723657][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.723670][ T6031] Call Trace: [ 273.723679][ T6031] [ 273.723689][ T6031] dump_stack_lvl+0xe8/0x150 [ 273.723725][ T6031] gfs2_assert_warn_i+0x18c/0x2c0 [ 273.723756][ T6031] gfs2_make_fs_ro+0x30d/0x320 [ 273.723786][ T6031] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 273.723817][ T6031] ? __pfx_autoremove_wake_function+0x10/0x10 [ 273.723852][ T6031] ? flush_work+0xd/0x30 [ 273.723887][ T6031] gfs2_put_super+0x235/0x870 [ 273.723921][ T6031] ? __pfx_gfs2_put_super+0x10/0x10 [ 273.723958][ T6031] generic_shutdown_super+0x13d/0x2d0 [ 273.723996][ T6031] kill_block_super+0x44/0xa0 [ 273.724022][ T6031] deactivate_locked_super+0xbc/0x110 [ 273.724063][ T6031] cleanup_mnt+0x3d3/0x460 [ 273.724090][ T6031] task_work_run+0x1d9/0x270 [ 273.724115][ T6031] ? __pfx_task_work_run+0x10/0x10 [ 273.724146][ T6031] exit_to_user_mode_loop+0x1fa/0x730 [ 273.724177][ T6031] ? rcu_is_watching+0x15/0xb0 [ 273.724202][ T6031] do_syscall_64+0x328/0x510 [ 273.724224][ T6031] ? trace_irq_disable+0x3b/0x140 [ 273.724241][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.724260][ T6031] ? clear_bhb_loop+0x40/0x90 [ 273.724284][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.724303][ T6031] RIP: 0033:0x7f17a1f9f317 [ 273.724322][ T6031] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 273.724338][ T6031] RSP: 002b:00007ffc5924e098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 273.724362][ T6031] RAX: 0000000000000000 RBX: 00007f17a2034474 RCX: 00007f17a1f9f317 [ 273.724375][ T6031] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5924e150 [ 273.724386][ T6031] RBP: 00007ffc5924e150 R08: 00007ffc5924f150 R09: 00000000ffffffff [ 273.724399][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5924f1e0 [ 273.724412][ T6031] R13: 00007f17a2034474 R14: 0000000000041507 R15: 00007ffc5924f220 [ 273.724445][ T6031] [ 273.888595][ T5625] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 274.027023][ T5625] usb 4-1: device descriptor read/64, error -71 [ 274.212184][ T6734] veth0_macvtap: entered promiscuous mode [ 274.267443][ T5625] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 274.277757][ T6734] veth1_macvtap: entered promiscuous mode [ 274.354671][ T1177] bridge_slave_1: left allmulticast mode [ 274.354792][ T1177] bridge_slave_1: left promiscuous mode [ 274.355490][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.377525][ T1177] bridge_slave_0: left allmulticast mode [ 274.377593][ T1177] bridge_slave_0: left promiscuous mode [ 274.389370][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.400961][ T5625] usb 4-1: device descriptor read/64, error -71 [ 274.511417][ T5625] usb usb4-port1: attempt power cycle [ 274.729560][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.770928][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.792753][ T1177] bond0 (unregistering): Released all slaves [ 274.857993][ T5625] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 274.880942][ T5625] usb 4-1: device descriptor read/8, error -71 [ 274.924775][ T7117] loop5: detected capacity change from 0 to 512 [ 275.013078][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.116176][ T5625] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 275.218659][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.301315][ T2239] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.340122][ T5625] usb 4-1: device descriptor read/8, error -71 [ 275.396409][ T7117] EXT4-fs error (device loop5): __ext4_fill_super:5621: inode #2: comm syz.5.226: inode has both inline data and extents flags [ 275.412880][ T7117] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 275.415279][ T7117] EXT4-fs (loop5): get root inode failed [ 275.424505][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 275.424527][ C1] EXT4-fs (loop5): initial error at time 1786052606: __ext4_fill_super:5621: inode 2 [ 275.424557][ C1] EXT4-fs (loop5): last error at time 1786052606: __ext4_fill_super:5621: inode 2 [ 275.547054][ T7117] EXT4-fs (loop5): mount failed [ 275.986811][ T5625] usb usb4-port1: unable to enumerate USB device [ 276.129158][ T6012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.133708][ T6012] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.135336][ T6012] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.409640][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.417729][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.492717][ T7154] loop5: detected capacity change from 0 to 128 [ 279.555783][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 281.426236][ T7171] input: syz0 as /devices/virtual/input/input8 [ 281.588576][ T7174] loop5: detected capacity change from 0 to 16 [ 281.595758][ T7174] erofs: Unknown parameter '' [ 282.066117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 282.520031][ T1177] hsr_slave_0: left promiscuous mode [ 282.531925][ T1177] hsr_slave_1: left promiscuous mode [ 282.546577][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.555214][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.570572][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.578963][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.609836][ T1177] veth1_macvtap: left promiscuous mode [ 282.609907][ T1177] veth0_macvtap: left promiscuous mode [ 282.626964][ T1177] veth1_vlan: left promiscuous mode [ 282.636726][ T1177] veth0_vlan: left promiscuous mode [ 283.302934][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 283.340252][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 285.104469][ T7192] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 285.728100][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.728131][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.263727][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.275804][ T7001] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.276047][ T7001] bridge_slave_0: entered allmulticast mode [ 286.303706][ T7001] bridge_slave_0: entered promiscuous mode [ 286.320056][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.327840][ T7001] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.335709][ T7001] bridge_slave_1: entered allmulticast mode [ 286.354738][ T7001] bridge_slave_1: entered promiscuous mode [ 286.495692][ T7001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.568657][ T7001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.763562][ T7001] team0: Port device team_slave_0 added [ 286.793475][ T7001] team0: Port device team_slave_1 added [ 286.987036][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.994218][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.020913][ T7001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.040679][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.047913][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.075329][ T7001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.193311][ T7196] loop3: detected capacity change from 0 to 32768 [ 287.294582][ T7204] fuse: Bad value for 'fd' [ 288.040451][ T31] audit: type=1800 audit(1786052619.234:35): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.238" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 288.197929][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.239'. [ 288.362748][ T7001] hsr_slave_0: entered promiscuous mode [ 288.364058][ T7001] hsr_slave_1: entered promiscuous mode [ 288.364881][ T7001] debugfs: 'hsr0' already exists in 'hsr' [ 288.364908][ T7001] Cannot create hsr debugfs directory [ 288.501484][ T59] read_mapping_page failed! [ 288.501560][ T59] ERROR: (device loop3): txCommit: [ 288.501560][ T59] [ 288.526848][ T59] jfs_write_inode: jfs_commit_inode failed! [ 288.762656][ T7202] loop6: detected capacity change from 0 to 32768 [ 288.848130][ T7202] (syz.6.164,7202,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 288.872487][ T7202] (syz.6.164,7202,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 289.462469][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 289.519041][ T1177] IPVS: stop unused estimator thread 0... [ 289.966336][ T7202] JBD2: Ignoring recovery information on journal [ 290.151319][ T7238] Bluetooth: MGMT ver 1.23 [ 290.402358][ T7202] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 290.693679][ T7242] loop3: detected capacity change from 0 to 16 [ 290.934672][ T7242] erofs: Unknown parameter 'nouser_xCttr' [ 291.885123][ T6734] ocfs2: Unmounting device (7,6) on (node local) [ 291.999936][ T7242] loop3: detected capacity change from 0 to 32768 [ 292.001217][ T7242] XFS (loop3): sunit and swidth must be specified together [ 292.202286][ T7259] fuse: fd is not a fuse device [ 293.300499][ T7265] misc userio: The device must be registered before sending interrupts [ 294.009781][ T7001] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 294.290673][ T7001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.318073][ T7001] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 294.767050][ T7001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.778902][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 294.787511][ T7001] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 294.803278][ T7001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.815066][ T7001] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 295.045370][ T7001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.578475][ T7292] netlink: 236 bytes leftover after parsing attributes in process `syz.6.251'. [ 296.578591][ T7292] netlink: 236 bytes leftover after parsing attributes in process `syz.6.251'. [ 296.614988][ T7292] loop6: detected capacity change from 0 to 512 [ 296.620962][ T7292] ext4: Unknown parameter 'nouser_xattr' [ 296.644054][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.251'. [ 297.326974][ T7001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.395636][ T7001] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.439433][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.439562][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.514432][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.514696][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.429124][ T7317] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 300.508716][ T7322] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 300.508920][ T7322] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 300.509054][ T7322] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 300.953521][ T31] audit: type=1326 audit(2000000012.120:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.257" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0259e0d9 code=0x7ffc0000 [ 300.953643][ T31] audit: type=1326 audit(2000000012.120:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.257" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0259e0d9 code=0x7ffc0000 [ 300.953935][ T31] audit: type=1326 audit(2000000012.120:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.257" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7b0259e0d9 code=0x7ffc0000 [ 300.954049][ T31] audit: type=1326 audit(2000000012.120:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.257" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0259e0d9 code=0x7ffc0000 [ 300.954165][ T31] audit: type=1326 audit(2000000012.120:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.257" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0259e0d9 code=0x7ffc0000 [ 301.174918][ T31] audit: type=1326 audit(2000000012.330:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.257" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b0259de42 code=0x7ffc0000 [ 301.273063][ T31] audit: type=1326 audit(2000000012.420:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.257" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b0255e90e code=0x7ffc0000 [ 301.351807][ T31] audit: type=1326 audit(2000000012.520:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.257" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7b0259df07 code=0x7ffc0000 [ 301.465460][ T31] audit: type=1326 audit(2000000012.620:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.257" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b0255e90e code=0x7ffc0000 [ 301.495361][ T31] audit: type=1326 audit(2000000012.620:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.257" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7b0255e90e code=0x7ffc0000 [ 301.735731][ T7321] loop5: detected capacity change from 0 to 512 [ 301.840759][ T7321] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.258: missing EA_INODE flag [ 301.891221][ T7321] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 301.896039][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 301.896091][ C1] EXT4-fs (loop5): initial error at time 2000000013: ext4_xattr_inode_iget:437: inode 12 [ 301.896152][ C1] EXT4-fs (loop5): last error at time 2000000013: ext4_xattr_inode_iget:437: inode 12 [ 302.004091][ T7321] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.258: error while reading EA inode 12 err=-117 [ 302.004163][ T7321] loop5: lost filesystem error report for type 5 error -117 [ 302.010322][ T7321] EXT4-fs (loop5): 1 orphan inode deleted [ 302.111597][ T7321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.326357][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 302.471072][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 304.539134][ T7348] netlink: 76 bytes leftover after parsing attributes in process `syz.3.259'. [ 304.770680][ T6031] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.071748][ T7337] syz.2.260 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 305.071825][ T7337] CPU: 0 UID: 0 PID: 7337 Comm: syz.2.260 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.071858][ T7337] Tainted: [L]=SOFTLOCKUP [ 305.071867][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.071881][ T7337] Call Trace: [ 305.071891][ T7337] [ 305.071901][ T7337] dump_stack_lvl+0xe8/0x150 [ 305.071941][ T7337] dump_header+0xd3/0x4b0 [ 305.071974][ T7337] oom_kill_process+0x3ab/0x9e0 [ 305.072015][ T7337] out_of_memory+0x1064/0x1480 [ 305.072047][ T7337] ? try_charge_memcg+0xbff/0x15a0 [ 305.072095][ T7337] ? __pfx_out_of_memory+0x10/0x10 [ 305.072126][ T7337] ? do_raw_spin_unlock+0xf5/0x210 [ 305.072169][ T7337] try_charge_memcg+0xca9/0x15a0 [ 305.072224][ T7337] ? __pfx_try_charge_memcg+0x10/0x10 [ 305.072255][ T7337] ? lock_acquire+0x115/0x350 [ 305.072314][ T7337] ? charge_memcg+0x20/0x2b0 [ 305.072350][ T7337] charge_memcg+0x19c/0x2b0 [ 305.072383][ T7337] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 305.072415][ T7337] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 305.072452][ T7337] swap_cache_alloc_folio+0x4de/0x990 [ 305.072492][ T7337] swap_cluster_readahead+0x4f2/0x630 [ 305.072525][ T7337] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 305.072577][ T7337] swapin_readahead+0x1a3/0xc50 [ 305.072616][ T7337] ? __pfx_swapin_readahead+0x10/0x10 [ 305.072647][ T7337] ? swap_table_get+0x1e/0x260 [ 305.072683][ T7337] ? swap_table_get+0x1e/0x260 [ 305.072717][ T7337] ? swap_table_get+0x1e/0x260 [ 305.072763][ T7337] ? swap_table_get+0x216/0x260 [ 305.072802][ T7337] ? swap_cache_get_folio+0x2e7/0x2f0 [ 305.072847][ T7337] do_swap_page+0x3fb/0x4c10 [ 305.072903][ T7337] ? __lock_acquire+0x6df/0x2e50 [ 305.072938][ T7337] ? do_swap_page+0x126/0x4c10 [ 305.072973][ T7337] ? __pfx_do_swap_page+0x10/0x10 [ 305.073005][ T7337] ? __pte_offset_map+0x1ae/0x240 [ 305.073045][ T7337] ? pte_offset_map_rw_nolock+0xea/0x160 [ 305.073085][ T7337] handle_mm_fault+0x1332/0x3720 [ 305.073137][ T7337] ? handle_mm_fault+0xf4/0x3720 [ 305.073184][ T7337] ? __pfx_handle_mm_fault+0x10/0x10 [ 305.073218][ T7337] ? lock_vma_under_rcu+0x45a/0x500 [ 305.073272][ T7337] do_user_addr_fault+0xa4d/0x1340 [ 305.073323][ T7337] ? trace_page_fault_user+0x84/0x1e0 [ 305.073364][ T7337] exc_page_fault+0x6a/0xc0 [ 305.073393][ T7337] asm_exc_page_fault+0x26/0x30 [ 305.073416][ T7337] RIP: 0033:0x7f7b024524ce [ 305.073440][ T7337] Code: bf 40 0d 03 00 89 c3 e8 40 c7 14 00 48 83 c4 10 48 63 c3 5b c3 0f 1f 80 00 00 00 00 41 54 55 53 48 89 fb 48 81 ec d0 00 00 00 <48> 89 74 24 28 48 89 54 24 30 48 89 4c 24 38 4c 89 44 24 40 4c 89 [ 305.073460][ T7337] RSP: 002b:00007f7b033f9f60 EFLAGS: 00010206 [ 305.073482][ T7337] RAX: 0000000000000000 RBX: 00007f7b026359f0 RCX: 00007f7b02649a6d [ 305.073498][ T7337] RDX: 0000000000035fce RSI: 0000000000000000 RDI: 00007f7b026359f0 [ 305.073514][ T7337] RBP: 00007f7b02649a6d R08: 000000000000000b R09: 3fffffffffffffff [ 305.073530][ T7337] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.073545][ T7337] R13: 00007f7b02826038 R14: 00007f7b02825fa0 R15: 00007ffc76a040c8 [ 305.073583][ T7337] [ 305.073619][ T7337] memory: usage 307200kB, limit 307200kB, failcnt 5585 [ 305.073639][ T7337] memory+swap: usage 311544kB, limit 9007199254740988kB, failcnt 0 [ 305.073659][ T7337] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 305.073678][ T7337] Memory cgroup stats for /syz2: [ 305.074003][ T7337] cache 73728 [ 305.074019][ T7337] rss 0 [ 305.074031][ T7337] rss_huge 0 [ 305.074043][ T7337] shmem 0 [ 305.074055][ T7337] mapped_file 0 [ 305.074067][ T7337] dirty 0 [ 305.074078][ T7337] writeback 0 [ 305.074090][ T7337] workingset_refault_anon 108 [ 305.074103][ T7337] workingset_refault_file 17 [ 305.074116][ T7337] swap 4448256 [ 305.074128][ T7337] swapcached 16654336 [ 305.074140][ T7337] pgpgin 250609 [ 305.074152][ T7337] pgpgout 250574 [ 305.074164][ T7337] pgfault 188009 [ 305.074176][ T7337] pgmajfault 51 [ 305.074188][ T7337] inactive_anon 4096 [ 305.074201][ T7337] active_anon 0 [ 305.074213][ T7337] inactive_file 0 [ 305.074225][ T7337] active_file 135168 [ 305.074237][ T7337] unevictable 0 [ 305.074249][ T7337] hierarchical_memory_limit 314572800 [ 305.074262][ T7337] hierarchical_memsw_limit 9223372036854771712 [ 305.074276][ T7337] total_cache 73728 [ 305.074288][ T7337] total_rss 0 [ 305.074300][ T7337] total_rss_huge 0 [ 305.074312][ T7337] total_shmem 0 [ 305.074324][ T7337] total_mapped_file 0 [ 305.074336][ T7337] total_dirty 0 [ 305.074349][ T7337] total_writeback 0 [ 305.074361][ T7337] total_workingset_refault_anon 108 [ 305.074374][ T7337] total_workingset_refault_file 17 [ 305.074387][ T7337] total_swap 4448256 [ 305.074399][ T7337] total_swapcached 16654336 [ 305.074412][ T7337] total_pgpgin 250609 [ 305.074425][ T7337] total_pgpgout 250574 [ 305.074437][ T7337] total_pgfault 188009 [ 305.074449][ T7337] total_pgmajfault 51 [ 305.074462][ T7337] total_inactive_anon 4096 [ 305.074474][ T7337] total_active_anon 0 [ 305.074487][ T7337] total_inactive_file 0 [ 305.074499][ T7337] total_active_file 135168 [ 305.074512][ T7337] total_unevictable 0 [ 305.074524][ T7337] anon_cost 0 [ 305.074536][ T7337] file_cost 0 [ 305.074548][ T7337] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.260,pid=7335,uid=0 [ 305.076396][ T7337] Memory cgroup out of memory: Killed process 7335 (syz.2.260) total-vm:108800kB, anon-rss:1252kB, file-rss:27340kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 307.292766][ T7371] comedi comedi0: comedi_config --init_data is deprecated [ 308.853042][ T7001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.254823][ T7391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.891412][ T7001] veth0_vlan: entered promiscuous mode [ 311.924639][ T7001] veth1_vlan: entered promiscuous mode [ 312.019108][ T7001] veth0_macvtap: entered promiscuous mode [ 312.078613][ T7001] veth1_macvtap: entered promiscuous mode [ 312.721173][ T7423] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 312.950674][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.063484][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.176380][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.176507][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.176637][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.176834][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.765419][ T6156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.765469][ T6156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.950481][ T6156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.950527][ T6156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.993767][ T7461] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.278'. [ 317.151984][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.152067][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.446253][ T7465] loop3: detected capacity change from 0 to 32768 [ 318.465946][ T7468] tmpfs: Unknown parameter 'grpquota_block_har' [ 318.505017][ T7465] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 318.577775][ T7465] XFS (loop3): Ending clean mount [ 318.695393][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 318.695456][ T31] audit: type=1326 audit(2000000029.860:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.3.280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf9939e0d9 code=0x7fc00000 [ 320.478019][ T7492] loop6: detected capacity change from 0 to 64 [ 320.775855][ T5618] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 320.855119][ T7501] loop5: detected capacity change from 0 to 1024 [ 321.296149][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.7.285'. [ 322.038356][ T7501] hfsplus: failed to load extents file [ 322.122845][ T7510] block device autoloading is deprecated and will be removed. [ 322.369104][ T7501] loop5: detected capacity change from 0 to 128 [ 322.381293][ T7501] EXT4-fs: Ignoring removed orlov option [ 322.444722][ T7501] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.464074][ T7501] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.853268][ T7530] netlink: 56 bytes leftover after parsing attributes in process `syz.3.286'. [ 324.091724][ T6031] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.161171][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.288'. [ 326.314159][ T7548] loop3: detected capacity change from 0 to 256 [ 326.325131][ T7548] vfat: Deprecated parameter 'posix' [ 326.325161][ T7548] FAT-fs: "posix" option is obsolete, not supported now [ 327.910902][ T7570] loop6: detected capacity change from 0 to 128 [ 330.141881][ T7593] loop3: detected capacity change from 0 to 8 [ 330.325656][ T7593] SQUASHFS error: lzo decompression failed, data probably corrupt [ 330.325742][ T7593] SQUASHFS error: Failed to read block 0x91: -5 [ 330.325846][ T7593] SQUASHFS error: Unable to read metadata cache entry [8f] [ 330.325896][ T7593] SQUASHFS error: Unable to read inode 0x11f [ 332.731932][ T7613] loop6: detected capacity change from 0 to 40427 [ 332.753331][ T7613] F2FS-fs (loop6): invalid crc value [ 333.309822][ T7613] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 333.323023][ T7613] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 333.323061][ T7613] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 333.323093][ T7613] F2FS-fs (loop6): Start checkpoint disabled! [ 333.349932][ T7613] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 333.357298][ T7613] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 333.691741][ T7626] wlan0 speed is unknown, defaulting to 1000 [ 333.691849][ T7626] wlan0 speed is unknown, defaulting to 1000 [ 333.817938][ T7628] xt_TPROXY: Can be used only with -p tcp or -p udp [ 333.933329][ T7627] smc: removing ib device syz2 [ 333.989845][ T7626] wlan0 speed is unknown, defaulting to 1000 [ 333.992848][ T7626] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 333.992965][ T7626] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 333.993083][ T7626] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 334.001887][ T7626] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 334.030731][ T7626] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 334.048515][ T7626] wlan0 speed is unknown, defaulting to 1000 [ 334.050025][ T7626] wlan0 speed is unknown, defaulting to 1000 [ 334.051482][ T7626] wlan0 speed is unknown, defaulting to 1000 [ 334.052896][ T7626] wlan0 speed is unknown, defaulting to 1000 [ 334.054376][ T7626] wlan0 speed is unknown, defaulting to 1000 [ 334.142764][ T7627] smbdirect: ib_dev[syz2] removed [ 335.859454][ T7633] loop5: detected capacity change from 0 to 256 [ 335.887615][ T7633] vfat: Deprecated parameter 'posix' [ 335.887665][ T7633] FAT-fs: "posix" option is obsolete, not supported now [ 338.062786][ T5633] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 342.565216][ T7695] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 345.702752][ T7706] tmpfs: Bad value for 'mpol' [ 347.024874][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.046401][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.053902][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.062257][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.070365][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.327633][ T5630] Bluetooth: hci4: command tx timeout [ 350.412828][ T7739] netlink: 'syz.3.338': attribute type 7 has an invalid length. [ 351.435671][ T5630] Bluetooth: hci4: command tx timeout [ 352.669229][ T7745] loop5: detected capacity change from 0 to 512 [ 352.904659][ T7745] EXT4-fs error (device loop5): __ext4_fill_super:5621: inode #2: comm syz.5.341: inode has both inline data and extents flags [ 352.904720][ T7745] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 352.906238][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 352.906307][ C0] EXT4-fs (loop5): initial error at time 2000000064: __ext4_fill_super:5621: inode 2 [ 352.906410][ C0] EXT4-fs (loop5): last error at time 2000000064: __ext4_fill_super:5621: inode 2 [ 352.911610][ T7745] EXT4-fs (loop5): get root inode failed [ 352.911662][ T7745] EXT4-fs (loop5): mount failed [ 353.494809][ T5630] Bluetooth: hci4: command tx timeout [ 353.555909][ T7760] loop5: detected capacity change from 0 to 256 [ 353.562058][ T7760] exfat: Unknown parameter 'smackfsfloor' [ 354.431906][ T7763] loop5: detected capacity change from 0 to 1024 [ 354.583274][ T80] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.925521][ T80] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.174465][ T80] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.279567][ T7719] wlan0 speed is unknown, defaulting to 1000 [ 355.546872][ T5630] Bluetooth: hci4: command tx timeout [ 355.712155][ T80] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.160430][ T5630] Bluetooth: to_multiplier 0 < 10 [ 356.958348][ T7791] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 358.196303][ T5630] Bluetooth: hci5: command tx timeout [ 358.582369][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.349'. [ 358.587144][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.349'. [ 359.131297][ T7805] loop5: detected capacity change from 0 to 128 [ 362.397793][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.399206][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.400833][ T7719] bridge_slave_0: entered allmulticast mode [ 363.468994][ T7719] bridge_slave_0: entered promiscuous mode [ 363.691357][ T80] bridge_slave_1: left allmulticast mode [ 363.691404][ T80] bridge_slave_1: left promiscuous mode [ 363.691651][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.717963][ T80] bridge_slave_0: left allmulticast mode [ 363.718028][ T80] bridge_slave_0: left promiscuous mode [ 363.730225][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.055815][ T5630] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 366.442462][ T5630] Bluetooth: hci1: unexpected event for opcode 0x201c [ 366.480314][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.702049][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.728392][ T80] bond0 (unregistering): Released all slaves [ 367.880081][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.880220][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.880432][ T7719] bridge_slave_1: entered allmulticast mode [ 367.970018][ T7719] bridge_slave_1: entered promiscuous mode [ 368.464701][ T7880] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by ""[7880] [ 370.468690][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.726259][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.290488][ T7719] team0: Port device team_slave_0 added [ 371.315440][ T7719] team0: Port device team_slave_1 added [ 371.503794][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.503852][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.503884][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.582834][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.589978][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.616180][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.734470][ T7719] hsr_slave_0: entered promiscuous mode [ 371.741527][ T7719] hsr_slave_1: entered promiscuous mode [ 371.748354][ T7719] debugfs: 'hsr0' already exists in 'hsr' [ 371.755282][ T7719] Cannot create hsr debugfs directory [ 371.880178][ T80] hsr_slave_0: left promiscuous mode [ 371.920259][ T80] hsr_slave_1: left promiscuous mode [ 371.940811][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.940889][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.958456][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.958522][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.050979][ T80] veth1_macvtap: left promiscuous mode [ 372.051044][ T80] veth0_macvtap: left promiscuous mode [ 372.051401][ T80] veth1_vlan: left promiscuous mode [ 372.051610][ T80] veth0_vlan: left promiscuous mode [ 372.448473][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.376'. [ 372.448698][ T7901] netlink: 48 bytes leftover after parsing attributes in process `syz.5.376'. [ 373.182254][ T7902] loop5: detected capacity change from 0 to 32768 [ 373.183091][ T7902] jfs: Unknown parameter '@' [ 377.256109][ T7921] loop3: detected capacity change from 0 to 1024 [ 377.281191][ T7921] EXT4-fs (loop3): invalid #clusters per group: 598016 [ 377.632475][ T7924] loop3: detected capacity change from 0 to 136 [ 377.819378][ T7924] ISOFS: Unable to identify CD-ROM format. [ 378.182978][ T80] team0 (unregistering): Port device team_slave_1 removed [ 378.292358][ T80] team0 (unregistering): Port device team_slave_0 removed [ 378.333385][ T7926] loop3: detected capacity change from 0 to 4096 [ 378.414899][ T7926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.461067][ T7916] loop6: detected capacity change from 0 to 32768 [ 378.461975][ T7916] btrfs: Unknown parameter 'usebackuproot' [ 378.680003][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.687290][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.868814][ T7930] netlink: 388 bytes leftover after parsing attributes in process `syz.3.384'. [ 379.702987][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.702510][ T5633] Bluetooth: hci5: command 0x0406 tx timeout [ 381.969376][ T7945] loop3: detected capacity change from 0 to 32768 [ 382.006776][ T7945] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 382.165035][ T7945] XFS (loop3): Ending clean mount [ 383.292196][ T5618] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 384.476181][ T5630] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 384.487052][ T5630] Bluetooth: hci2: unexpected event for opcode 0x042f [ 385.618690][ T5630] Bluetooth: hci2: unexpected event for opcode 0x202d [ 386.466109][ T5625] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 386.664806][ T5625] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 386.706645][ T5625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.706699][ T5625] usb 4-1: Product: syz [ 386.706716][ T5625] usb 4-1: Manufacturer: syz [ 386.706731][ T5625] usb 4-1: SerialNumber: syz [ 386.749068][ T5625] usb 4-1: config 0 descriptor?? [ 388.035615][ T7719] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 388.042091][ T5625] usb 4-1: selecting invalid altsetting 3 [ 388.042174][ T5625] comedi comedi5: could not set alternate setting 3 in high speed [ 388.042224][ T5625] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 388.111368][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.137109][ T7719] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 388.181275][ T5625] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 388.207326][ T5625] usb 4-1: USB disconnect, device number 11 [ 388.370007][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.382170][ T7719] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 388.479947][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.489950][ T7719] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 388.536859][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.116380][ T5630] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 391.249110][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.400616][ T8025] netlink: 168 bytes leftover after parsing attributes in process `syz.3.404'. [ 391.563373][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.571117][ T5349] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 391.870539][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.870650][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.900986][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.901124][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.919553][ T5349] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 391.933411][ T5349] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.944941][ T5349] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.960960][ T5349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 391.970595][ T5349] usb 6-1: SerialNumber: syz [ 392.401372][ T5349] usb 6-1: cannot find UAC_HEADER [ 393.569058][ T5349] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 393.594800][ T5349] usb 6-1: USB disconnect, device number 3 [ 394.391655][ T5768] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 394.925886][ T7203] udevd[7203]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.945753][ T5768] usb 4-1: Using ep0 maxpacket: 8 [ 395.018539][ T5768] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.029587][ T5768] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.029683][ T5768] usb 4-1: config 1 interface 1 has no altsetting 1 [ 395.073780][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.073817][ T5768] usb 4-1: Product: syz [ 395.073841][ T5768] usb 4-1: Manufacturer: syz [ 395.073855][ T5768] usb 4-1: SerialNumber: syz [ 395.149139][ T5630] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 395.149246][ T5630] Bluetooth: hci5: Injecting HCI hardware error event [ 395.151377][ T5633] Bluetooth: hci5: hardware error 0x00 [ 395.508823][ T5768] usb 4-1: selecting invalid altsetting 1 [ 395.521760][ T5768] cdc_ncm 4-1:1.0: bind() failure [ 395.538612][ T5768] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 395.545573][ T5768] cdc_ncm 4-1:1.1: bind() failure [ 395.563294][ T5768] usb 4-1: USB disconnect, device number 12 [ 397.311921][ T5633] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 401.518662][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13 [ 401.990666][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.683144][ T8114] netlink: 168 bytes leftover after parsing attributes in process `syz.5.418'. [ 404.789120][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.809462][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.824346][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.845293][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.878039][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.054699][ T8136] loop6: detected capacity change from 0 to 256 [ 405.135409][ T8136] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 405.281037][ T7719] veth0_vlan: entered promiscuous mode [ 405.345236][ T7719] veth1_vlan: entered promiscuous mode [ 405.438981][ T7719] veth0_macvtap: entered promiscuous mode [ 405.861740][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 405.878059][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 405.901584][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 405.910485][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 405.918422][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 406.456591][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14 [ 406.910611][ T5630] Bluetooth: hci0: command tx timeout [ 407.189841][ T8128] wlan0 speed is unknown, defaulting to 1000 [ 408.466465][ T5630] Bluetooth: hci6: command tx timeout [ 408.633667][ T5630] Bluetooth: hci3: unexpected subevent 0x0e length: 32 > 15 [ 408.633736][ T5630] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 408.946561][ T8188] binder: 8185:8188 ioctl c0306201 0 returned -14 [ 410.050779][ T5630] Bluetooth: hci0: command tx timeout [ 410.581493][ T8191] binder: 8185:8191 ioctl c0306201 200000000040 returned -22 [ 411.554813][ T5633] Bluetooth: hci6: command tx timeout [ 412.106169][ T5633] Bluetooth: hci0: command tx timeout [ 412.966520][ T8208] netlink: 168 bytes leftover after parsing attributes in process `syz.6.436'. [ 413.587415][ T8146] wlan0 speed is unknown, defaulting to 1000 [ 413.626512][ T5633] Bluetooth: hci6: command tx timeout [ 414.090219][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15 [ 414.123255][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.138938][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.186645][ T5633] Bluetooth: hci0: command tx timeout [ 414.422389][ T8220] loop3: detected capacity change from 0 to 2048 [ 414.516468][ T8220] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 414.516519][ T8220] UDF-fs: Scanning with blocksize 512 failed [ 414.580304][ T8220] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 414.588408][ T8220] UDF-fs: Scanning with blocksize 1024 failed [ 414.606644][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.606902][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.612550][ T8128] bridge_slave_0: entered allmulticast mode [ 414.633676][ T8220] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=515, location=515 [ 414.644727][ T8220] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 414.645140][ T8128] bridge_slave_0: entered promiscuous mode [ 414.659098][ T8220] UDF-fs: Scanning with blocksize 2048 failed [ 414.667364][ T8220] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=259, location=259 [ 414.690900][ T8220] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=515, location=515 [ 414.690952][ T8220] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 414.690973][ T8220] UDF-fs: Scanning with blocksize 4096 failed [ 414.690989][ T8220] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 415.022696][ T8227] loop6: detected capacity change from 0 to 2048 [ 415.023424][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.023774][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.030022][ T8128] bridge_slave_1: entered allmulticast mode [ 415.037454][ T8128] bridge_slave_1: entered promiscuous mode [ 415.789625][ T8227] /dev/loop6: Can't open blockdev [ 415.816172][ T5633] Bluetooth: hci6: command tx timeout [ 416.073390][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.118582][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.145488][ T5633] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 416.145555][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.145589][ T5633] Tainted: [L]=SOFTLOCKUP [ 416.145598][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.145613][ T5633] Workqueue: hci1 hci_rx_work [ 416.145649][ T5633] Call Trace: [ 416.145664][ T5633] [ 416.145674][ T5633] dump_stack_lvl+0xe8/0x150 [ 416.145712][ T5633] sysfs_create_dir_ns+0x271/0x2a0 [ 416.145741][ T5633] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 416.145771][ T5633] ? do_raw_spin_unlock+0xf5/0x210 [ 416.145807][ T5633] kobject_add_internal+0x622/0xcd0 [ 416.145849][ T5633] kobject_add+0x163/0x240 [ 416.145885][ T5633] ? __pfx_kobject_add+0x10/0x10 [ 416.145924][ T5633] ? get_device_parent+0x366/0x3a0 [ 416.145966][ T5633] device_add+0x3fa/0xb80 [ 416.146004][ T5633] hci_conn_add_sysfs+0xd5/0x210 [ 416.146033][ T5633] le_conn_complete_evt+0xfb7/0x1690 [ 416.146076][ T5633] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 416.146110][ T5633] ? __mutex_unlock_slowpath+0x731/0x900 [ 416.146143][ T5633] ? skb_pull_data+0xf0/0x200 [ 416.146172][ T5633] hci_le_enh_conn_complete_evt+0x189/0x490 [ 416.146228][ T5633] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 416.146265][ T5633] hci_event_packet+0x67a/0xf10 [ 416.146299][ T5633] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 416.146326][ T5633] ? __pfx_hci_event_packet+0x10/0x10 [ 416.146358][ T5633] ? audit_alloc_mark+0x480/0x550 [ 416.146392][ T5633] ? hci_send_to_monitor+0xe2/0x590 [ 416.146428][ T5633] hci_rx_work+0x3ee/0x1020 [ 416.146463][ T5633] ? process_scheduled_works+0x97e/0x1630 [ 416.146494][ T5633] process_scheduled_works+0xc4e/0x1630 [ 416.146558][ T5633] ? __pfx_process_scheduled_works+0x10/0x10 [ 416.146595][ T5633] ? assign_work+0x3cf/0x5d0 [ 416.146628][ T5633] worker_thread+0xa47/0xfb0 [ 416.146688][ T5633] kthread+0x388/0x470 [ 416.146707][ T5633] ? __pfx_worker_thread+0x10/0x10 [ 416.146734][ T5633] ? __pfx_kthread+0x10/0x10 [ 416.146757][ T5633] ret_from_fork+0x514/0xb70 [ 416.146797][ T5633] ? __pfx_ret_from_fork+0x10/0x10 [ 416.146833][ T5633] ? __switch_to+0xc89/0x1420 [ 416.146866][ T5633] ? __pfx_kthread+0x10/0x10 [ 416.146888][ T5633] ret_from_fork_asm+0x1a/0x30 [ 416.146940][ T5633] [ 416.160521][ T5633] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 416.160570][ T5633] Bluetooth: hci1: failed to register connection device [ 416.610899][ T8128] team0: Port device team_slave_0 added [ 417.321309][ T8128] team0: Port device team_slave_1 added [ 417.475588][ T8256] loop6: detected capacity change from 0 to 512 [ 417.570234][ T8256] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 417.635990][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 417.636032][ C1] EXT4-fs (loop6): initial error at time 2000000128: ext4_mb_generate_buddy:1317 [ 417.636059][ C1] EXT4-fs (loop6): last error at time 2000000128: ext4_mb_generate_buddy:1317 [ 417.668093][ T8260] loop3: detected capacity change from 0 to 512 [ 417.669205][ T8260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.669254][ T8260] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.721538][ T8260] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 417.721594][ T8260] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 417.748534][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.748579][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.748628][ T8128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.758871][ T8256] EXT4-fs (loop6): Remounting filesystem read-only [ 417.831470][ T8256] EXT4-fs (loop6): 1 truncate cleaned up [ 417.858457][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.858518][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.858550][ T8128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.871083][ T8256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.923779][ T8260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 417.971206][ T8260] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.447: bad symlink. [ 417.981720][ T8260] EXT4-fs (loop3): Remounting filesystem read-only [ 417.994939][ T6734] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.099398][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.025906][ T8296] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 420.562888][ T153] bridge_slave_1: left allmulticast mode [ 420.562939][ T153] bridge_slave_1: left promiscuous mode [ 420.563246][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.722799][ T153] bridge_slave_0: left allmulticast mode [ 420.730434][ T153] bridge_slave_0: left promiscuous mode [ 420.743641][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.147791][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.165486][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.198212][ T153] bond0 (unregistering): Released all slaves [ 422.399995][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16 [ 422.721331][ T8128] hsr_slave_0: entered promiscuous mode [ 422.735404][ T8128] hsr_slave_1: entered promiscuous mode [ 423.261219][ T8128] debugfs: 'hsr0' already exists in 'hsr' [ 423.261336][ T8128] Cannot create hsr debugfs directory [ 423.963934][ T153] hsr_slave_0: left promiscuous mode [ 423.975148][ T153] hsr_slave_1: left promiscuous mode [ 423.990699][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.013714][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.038538][ T153] veth0_macvtap: left promiscuous mode [ 424.045115][ T153] veth1_vlan: left promiscuous mode [ 424.052550][ T153] veth0_vlan: left promiscuous mode [ 424.438214][ T153] team0 (unregistering): Port device team_slave_1 removed [ 424.473955][ T153] team0 (unregistering): Port device team_slave_0 removed [ 425.223871][ T8345] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 426.498123][ T8343] loop5: detected capacity change from 0 to 40427 [ 426.516999][ T8343] F2FS-fs (loop5): invalid crc value [ 426.674953][ T8343] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 426.701674][ T8343] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 426.701730][ T8343] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 426.701773][ T8343] F2FS-fs (loop5): Start checkpoint disabled! [ 426.735050][ T8343] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 426.735444][ T8343] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 426.931958][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.932097][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.932312][ T8146] bridge_slave_0: entered allmulticast mode [ 426.974062][ T8146] bridge_slave_0: entered promiscuous mode [ 427.136262][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.136403][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.136592][ T8146] bridge_slave_1: entered allmulticast mode [ 427.138654][ T8146] bridge_slave_1: entered promiscuous mode [ 427.966912][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.989060][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.199925][ T8146] team0: Port device team_slave_0 added [ 428.234425][ T8146] team0: Port device team_slave_1 added [ 429.654356][ T8385] loop3: detected capacity change from 0 to 32768 [ 429.662274][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.662301][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.662335][ T8146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.706928][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.706970][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.707005][ T8146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.012913][ T8146] hsr_slave_0: entered promiscuous mode [ 430.024158][ T8385] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 430.041187][ T8146] hsr_slave_1: entered promiscuous mode [ 430.042044][ T8146] debugfs: 'hsr0' already exists in 'hsr' [ 430.042091][ T8146] Cannot create hsr debugfs directory [ 430.122685][ T8385] XFS (loop3): Ending clean mount [ 430.399706][ T8128] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 430.432366][ T8128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.440794][ T8128] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 430.466394][ T8128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.639252][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 431.138459][ T8128] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 431.154060][ T8128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.170078][ T8128] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 431.191803][ T8128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.293495][ T5618] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 431.321286][ T153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.131224][ T8419] loop5: detected capacity change from 0 to 512 [ 432.171106][ T8421] loop6: detected capacity change from 0 to 1024 [ 432.193797][ T8421] hfsplus: failed to load extents file [ 432.227132][ T8421] loop6: detected capacity change from 0 to 128 [ 432.227909][ T8421] EXT4-fs: Ignoring removed orlov option [ 432.242586][ T8419] ------------[ cut here ]------------ [ 432.242621][ T8419] EA inode 11 i_nlink=0 [ 432.242641][ T8419] WARNING: fs/ext4/xattr.c:1055 at ext4_xattr_inode_update_ref+0x4cc/0x590, CPU#1: syz.5.481/8419 [ 432.265323][ T8419] Modules linked in: [ 432.269867][ T8419] CPU: 1 UID: 0 PID: 8419 Comm: syz.5.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.280763][ T8419] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.285127][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.295924][ T8419] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590 [ 432.302994][ T8419] Code: 08 4c 89 e7 e8 b5 d5 93 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 45 6f 37 09 44 89 e9 80 e1 07 80 [ 432.322984][ T8419] RSP: 0018:ffffc9000333f340 EFLAGS: 00010246 [ 432.329248][ T8419] RAX: 0000000000000000 RBX: ffffffff905f47b0 RCX: dffffc0000000000 [ 432.337336][ T8419] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff905f47b0 [ 432.346595][ T8419] RBP: ffffc9000333f430 R08: ffff8880760ce7df R09: 1ffff1100ec19cfb [ 432.355017][ T8419] R10: dffffc0000000000 R11: ffffed100ec19cfc R12: 000000000000000b [ 432.363213][ T8419] R13: ffff8880760ce638 R14: 0000000000000000 R15: 1ffff1100ec19cc7 [ 432.371316][ T8419] FS: 00007f17a2f0c6c0(0000) GS:ffff888125018000(0000) knlGS:0000000000000000 [ 432.380379][ T8419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.387078][ T8419] CR2: 00007fa49c80b000 CR3: 000000006551e000 CR4: 00000000003526f0 [ 432.395604][ T8419] Call Trace: [ 432.399394][ T8419] [ 432.402376][ T8419] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 432.408316][ T8419] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 432.414709][ T8419] ? ext4_xattr_inode_iget+0x3eb/0x600 [ 432.420315][ T8419] ext4_xattr_inode_dec_ref_all+0x606/0xb50 [ 432.426313][ T8419] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 432.432815][ T8419] ? _raw_spin_unlock+0x28/0x50 [ 432.437775][ T8419] ? ext4_get_inode_loc+0xc5/0xf0 [ 432.442867][ T8419] ext4_xattr_delete_inode+0xb7c/0xd60 [ 432.448444][ T8419] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 432.454481][ T8419] ? __ext4_mark_inode_dirty+0x554/0x7b0 [ 432.460251][ T8419] ext4_evict_inode+0xb53/0xfe0 [ 432.464235][ T8421] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.477328][ T8419] ? __pfx_ext4_evict_inode+0x10/0x10 [ 432.482770][ T8419] evict+0x624/0xb50 [ 432.486773][ T8419] ? __pfx_evict+0x10/0x10 [ 432.491828][ T8419] ? do_raw_spin_unlock+0xf5/0x210 [ 432.498764][ T8419] ? _raw_spin_unlock+0x28/0x50 [ 432.503683][ T8419] ? iput+0xb84/0xf00 [ 432.507773][ T8419] ext4_orphan_cleanup+0xc7a/0x14c0 [ 432.513123][ T8419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.519505][ T8419] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 432.525202][ T8419] ? ext4_register_li_request+0x640/0x720 [ 432.531001][ T8419] ? errseq_check_and_advance+0x66/0x120 [ 432.536733][ T8419] ext4_fill_super+0x5cde/0x6600 [ 432.541741][ T8419] ? __pfx_ext4_fill_super+0x10/0x10 [ 432.547143][ T8419] ? snprintf+0xe8/0x140 [ 432.549708][ T153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.561817][ T8419] ? __pfx_snprintf+0x10/0x10 [ 432.566588][ T8419] ? set_blocksize+0x1c9/0x440 [ 432.571427][ T8419] ? sb_set_blocksize+0x155/0x240 [ 432.576595][ T8419] ? setup_bdev_super+0x586/0x680 [ 432.581688][ T8419] get_tree_bdev_flags+0x430/0x4f0 [ 432.586940][ T8419] ? __pfx_ext4_fill_super+0x10/0x10 [ 432.592290][ T8419] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 432.598650][ T8419] vfs_get_tree+0x92/0x2a0 [ 432.603584][ T8419] do_new_mount+0x319/0xdc0 [ 432.608246][ T8419] ? __pfx_do_new_mount+0x10/0x10 [ 432.613342][ T8419] ? ns_capable+0x89/0xe0 [ 432.617983][ T8419] ? path_mount+0x647/0x1050 [ 432.622680][ T8419] ? user_path_at+0xd4/0x160 [ 432.627398][ T8419] __se_sys_mount+0x31d/0x420 [ 432.632140][ T8419] ? __pfx___se_sys_mount+0x10/0x10 [ 432.637476][ T8419] ? __x64_sys_mount+0x20/0xc0 [ 432.642312][ T8419] do_syscall_64+0x166/0x510 [ 432.647028][ T8419] ? trace_irq_disable+0x3b/0x140 [ 432.652110][ T8419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.658474][ T8419] ? clear_bhb_loop+0x40/0x90 [ 432.663220][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.669475][ T8419] RIP: 0033:0x7f17a1f9f34a [ 432.673944][ T8419] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.679595][ T8421] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.704844][ T8419] RSP: 002b:00007f17a2f0be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 432.713857][ T8419] RAX: ffffffffffffffda RBX: 00007f17a2f0bee0 RCX: 00007f17a1f9f34a [ 432.721968][ T8419] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007f17a2f0bea0 [ 432.730097][ T8419] RBP: 0000200000000240 R08: 00007f17a2f0bee0 R09: 0000000000000000 [ 432.738185][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 432.746509][ T8419] R13: 00007f17a2f0bea0 R14: 000000000000047a R15: 000000000000002c [ 432.754694][ T8419] [ 432.759559][ T8419] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.766895][ T8419] CPU: 1 UID: 0 PID: 8419 Comm: syz.5.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.777713][ T8419] Tainted: [L]=SOFTLOCKUP [ 432.782085][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.792192][ T8419] Call Trace: [ 432.795522][ T8419] [ 432.798500][ T8419] vpanic+0x56c/0xa60 [ 432.802543][ T8419] ? __pfx__printk+0x10/0x10 [ 432.807190][ T8419] ? __pfx_vpanic+0x10/0x10 [ 432.811736][ T8419] ? is_bpf_text_address+0x292/0x2b0 [ 432.817098][ T8419] ? is_bpf_text_address+0x26/0x2b0 [ 432.822355][ T8419] panic+0xc5/0xd0 [ 432.826170][ T8419] ? __pfx_panic+0x10/0x10 [ 432.830658][ T8419] __warn+0x315/0x4c0 [ 432.834701][ T8419] ? ext4_xattr_inode_update_ref+0x4cc/0x590 [ 432.840771][ T8419] ? ext4_xattr_inode_update_ref+0x4cc/0x590 [ 432.846813][ T8419] __report_bug+0x276/0x570 [ 432.851365][ T8419] ? ext4_xattr_inode_update_ref+0x4cc/0x590 [ 432.857407][ T8419] ? __pfx___report_bug+0x10/0x10 [ 432.862519][ T8419] ? __ext4_get_inode_loc+0x6b4/0xf40 [ 432.867967][ T8419] ? set_normalized_timespec64+0xf0/0x1a0 [ 432.873746][ T8419] report_bug_entry+0x19a/0x290 [ 432.878647][ T8419] ? ext4_xattr_inode_update_ref+0x50c/0x590 [ 432.884678][ T8419] ? ext4_xattr_inode_update_ref+0x511/0x590 [ 432.890736][ T8419] handle_bug+0xce/0x200 [ 432.895033][ T8419] exc_invalid_op+0x1a/0x50 [ 432.899586][ T8419] asm_exc_invalid_op+0x1a/0x20 [ 432.904489][ T8419] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590 [ 432.911115][ T8419] Code: 08 4c 89 e7 e8 b5 d5 93 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 45 6f 37 09 44 89 e9 80 e1 07 80 [ 432.930766][ T8419] RSP: 0018:ffffc9000333f340 EFLAGS: 00010246 [ 432.936888][ T8419] RAX: 0000000000000000 RBX: ffffffff905f47b0 RCX: dffffc0000000000 [ 432.944896][ T8419] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff905f47b0 [ 432.952905][ T8419] RBP: ffffc9000333f430 R08: ffff8880760ce7df R09: 1ffff1100ec19cfb [ 432.960918][ T8419] R10: dffffc0000000000 R11: ffffed100ec19cfc R12: 000000000000000b [ 432.968919][ T8419] R13: ffff8880760ce638 R14: 0000000000000000 R15: 1ffff1100ec19cc7 [ 432.976949][ T8419] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 432.982807][ T8419] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 432.989182][ T8419] ? ext4_xattr_inode_iget+0x3eb/0x600 [ 432.994696][ T8419] ext4_xattr_inode_dec_ref_all+0x606/0xb50 [ 433.000661][ T8419] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 433.007123][ T8419] ? _raw_spin_unlock+0x28/0x50 [ 433.012020][ T8419] ? ext4_get_inode_loc+0xc5/0xf0 [ 433.017092][ T8419] ext4_xattr_delete_inode+0xb7c/0xd60 [ 433.022602][ T8419] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 433.028658][ T8419] ? __ext4_mark_inode_dirty+0x554/0x7b0 [ 433.034358][ T8419] ext4_evict_inode+0xb53/0xfe0 [ 433.039273][ T8419] ? __pfx_ext4_evict_inode+0x10/0x10 [ 433.044693][ T8419] evict+0x624/0xb50 [ 433.048636][ T8419] ? __pfx_evict+0x10/0x10 [ 433.053108][ T8419] ? do_raw_spin_unlock+0xf5/0x210 [ 433.058272][ T8419] ? _raw_spin_unlock+0x28/0x50 [ 433.063157][ T8419] ? iput+0xb84/0xf00 [ 433.067201][ T8419] ext4_orphan_cleanup+0xc7a/0x14c0 [ 433.072453][ T8419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 433.078501][ T8419] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 433.084186][ T8419] ? ext4_register_li_request+0x640/0x720 [ 433.089954][ T8419] ? errseq_check_and_advance+0x66/0x120 [ 433.095657][ T8419] ext4_fill_super+0x5cde/0x6600 [ 433.100678][ T8419] ? __pfx_ext4_fill_super+0x10/0x10 [ 433.106011][ T8419] ? snprintf+0xe8/0x140 [ 433.110317][ T8419] ? __pfx_snprintf+0x10/0x10 [ 433.115057][ T8419] ? set_blocksize+0x1c9/0x440 [ 433.119885][ T8419] ? sb_set_blocksize+0x155/0x240 [ 433.124971][ T8419] ? setup_bdev_super+0x586/0x680 [ 433.130040][ T8419] get_tree_bdev_flags+0x430/0x4f0 [ 433.135199][ T8419] ? __pfx_ext4_fill_super+0x10/0x10 [ 433.140531][ T8419] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 433.146218][ T8419] vfs_get_tree+0x92/0x2a0 [ 433.150685][ T8419] do_new_mount+0x319/0xdc0 [ 433.155247][ T8419] ? __pfx_do_new_mount+0x10/0x10 [ 433.160327][ T8419] ? ns_capable+0x89/0xe0 [ 433.164706][ T8419] ? path_mount+0x647/0x1050 [ 433.169348][ T8419] ? user_path_at+0xd4/0x160 [ 433.173984][ T8419] __se_sys_mount+0x31d/0x420 [ 433.178729][ T8419] ? __pfx___se_sys_mount+0x10/0x10 [ 433.183995][ T8419] ? __x64_sys_mount+0x20/0xc0 [ 433.188858][ T8419] do_syscall_64+0x166/0x510 [ 433.193530][ T8419] ? trace_irq_disable+0x3b/0x140 [ 433.198598][ T8419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.204719][ T8419] ? clear_bhb_loop+0x40/0x90 [ 433.209452][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.215388][ T8419] RIP: 0033:0x7f17a1f9f34a [ 433.219846][ T8419] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.239513][ T8419] RSP: 002b:00007f17a2f0be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 433.247978][ T8419] RAX: ffffffffffffffda RBX: 00007f17a2f0bee0 RCX: 00007f17a1f9f34a [ 433.256085][ T8419] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007f17a2f0bea0 [ 433.264099][ T8419] RBP: 0000200000000240 R08: 00007f17a2f0bee0 R09: 0000000000000000 [ 433.272121][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 433.280144][ T8419] R13: 00007f17a2f0bea0 R14: 000000000000047a R15: 000000000000002c [ 433.288188][ T8419] [ 433.291868][ T8419] Kernel Offset: disabled [ 433.296212][ T8419] Rebooting in 86400 seconds..