last executing test programs: 5m58.208882107s ago: executing program 0 (id=877): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = fanotify_init(0x1, 0x0) read(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x7, 0x4) io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x4000, 0x80, 0x0, 0x12ab}) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f00000007c0)="$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") syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0) 5m57.115967584s ago: executing program 0 (id=882): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000001240)={0xa, 0x4e24, 0x4, @remote, 0x8}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001280)='.', 0x1}], 0x1}}, {{&(0x7f0000000740)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000002740)=[{&(0x7f0000000780)='\b', 0x1}], 0x1}}], 0x2, 0x20000810) 5m55.900071446s ago: executing program 0 (id=885): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000300)="ab", 0xfffd, 0x8090, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00'], 0x60}}, 0x4) 5m55.823741771s ago: executing program 0 (id=887): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2008000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff) fallocate(r1, 0x20, 0x0, 0xfeffffff000) 5m55.758708884s ago: executing program 0 (id=888): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x40003) 5m55.52618112s ago: executing program 0 (id=889): move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m49.614308156s ago: executing program 2 (id=915): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000540)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000140)=""/88, 0x58}, {0x0}], 0x2, 0x6, 0x21a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x11) 5m48.219085773s ago: executing program 2 (id=920): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r1, 0x1, 0x7, &(0x7f0000000040)="c04bfa0a", 0xa) 5m47.324311881s ago: executing program 2 (id=926): socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket(0x11, 0x2, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000280)) 5m45.350001644s ago: executing program 2 (id=928): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) 5m45.008582372s ago: executing program 2 (id=930): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r1, 0x1, 0x7, &(0x7f0000000040)="c04bfa0a", 0xa) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 5m44.776030538s ago: executing program 2 (id=931): move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m40.445341019s ago: executing program 32 (id=889): move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m29.599244406s ago: executing program 33 (id=931): move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m19.75605157s ago: executing program 5 (id=1894): landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) 3m19.537028687s ago: executing program 5 (id=1898): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x814) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6_udp(0xa, 0x2, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x2d0, 0xffffff7a, 0xffffffff, 0x2d0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xffffffff, 0xffffffff, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x84, 0x1, 0x10}, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'kmp\x00', "00000100cbd047da9ca965f96ad5801f051443cbdd7424e1b316d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e00005a000000000000ffffff7f00", 0x71, 0x0, {0x4}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@loopback, [0xffffffff, 0xffffffff, 0xff000000, 0xff], @ipv6=@loopback, [0xff000000, 0xffffff00, 0xff, 0xffffffff], @ipv6=@loopback, [0xffffff00, 0xffffff00, 0xffffffff], @ipv4=@private=0xa010102, [0xffffffff, 0xff000000, 0xff000000, 0xff], 0x5, 0x10, 0x5c, 0x4e20, 0x4e24, 0x4e22, 0x4e21, 0x2800}, 0x80, 0x1008}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 3m19.29565544s ago: executing program 5 (id=1903): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000001800)=@keyring={'key_or_keyring:', r2}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x554, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x20045a, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}}], [{@hash}, {@dont_measure}]}) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x20000000000008d, 0x74}, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000000000000b70300000000f3ff850000007c000000b70000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m17.102370136s ago: executing program 5 (id=1920): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16=0xffffffffffffffff, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x1, 0x265, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x4b, 0xa, 0xff, {0x6, @tcp_ip6_spec={@rand_addr=' \x01\x00', @loopback, 0x4e23, 0x4e20, 0xfd}, {0x0, @broadcast, 0x56bd, 0xf8d, [0x6, 0x7ff]}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x14}, @remote, 0xffff2c2f, 0x9}, {0x0, @multicast, 0x3, 0x3524, [0x4f, 0x2]}, 0xfff, 0x4}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000a80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b62", @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x65c, &(0x7f0000002280)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) getdents64(r3, 0x0, 0x4f) symlinkat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f00000002c0)=0xffffffffffffffff, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_send_signal(r4, 0xb, &(0x7f00000001c0)={0xb, 0xe, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") 3m16.699580404s ago: executing program 5 (id=1928): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') socket(0x10, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7018fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="80001e060a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x240040d5}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 3m16.080077769s ago: executing program 5 (id=1938): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4) write(r0, &(0x7f0000000000)='3', 0x4e) unlink(0x0) 3m15.694139653s ago: executing program 34 (id=1938): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4) write(r0, &(0x7f0000000000)='3', 0x4e) unlink(0x0) 2m57.651577024s ago: executing program 1 (id=2042): write(0xffffffffffffffff, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) 2m57.460031176s ago: executing program 1 (id=2044): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000140)="05d936277c6f5422007f83477c92", 0xe, 0x40, 0x0, 0x0) 2m57.260848499s ago: executing program 1 (id=2046): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000010010000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063"], 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x2001032, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) open_by_handle_at(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f8000000"], 0x200000) 2m57.039977787s ago: executing program 1 (id=2047): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000) utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}}) pipe2$9p(&(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write(r0, &(0x7f0000000140)='1', 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 2m56.760025948s ago: executing program 1 (id=2051): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='2', 0x49) r1 = fanotify_init(0x200, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x48001051, r2, 0x0) 2m56.331035851s ago: executing program 1 (id=2052): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) pipe(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, 0x0) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', {}, 0x7f}) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x3c, 0x2e4, &(0x7f0000000c40)="$eJzs3M9r02AYwPGnXbd1HVt7EEFF9qIXvYSt3oUiG4gFZa7iDxCyNdXS2JamTCri6smr/4Zlx90GOv+AXbx58iJedhG8DHRW0mQu3TL7Y6tb6fcD432aN0+SlzcdTwN5t+6/fZbLWFpGL0swrCQoUpUdkZgdeQUk4DQjzuew01Tl6viPzxeViCSSydl5peYSC9fiSqnJqffPX65e2iiP31ubXB+Vzdjjre/xr5tnN89t/V54mrVU1lL5QlnparHwpawvmoZKZ62cptQd09AtQ2XzllFy+gtl97RSLFaUnk9PRIolw7KUnq+onFFR5YIqlypKf6Jn80rTNDURkcGxPdVoip3mpWrz83qiy5MudZmHY7fxz95SaffL87He3JOq9e6aAADAaeVb/2831/8Btw16639XVap2/X/3wcNbbdT/6yOH1P+FlvV/oz9jFqj/uxU+uClVG+q+/kefKI2J1FZl7xv9+tHqdCOg/gcAAAAAAAAAAAAAAAAAAAAAoB9s1+vRer0etdugOLH9N+q+MLL7+aSvE73hnX9nrkP2rDP/A8Lz4l5YxHyznFpOOa3Tn8hIVkwxZFqi8qtxP7iceO5mcjagGmLywVxx81eWU0PN+TMSlZh//oyTr5rzhyXizY9LVM7458d980fkymVPviZR+bQkBTEl3biv9/JfzSh143ZyX/6YpH3emAMAAAAAoB9p6i/f3++adli/k9/O84Fp39/nITkfOtmxAwAAAAAwKKzKi5xumkapZfDOzWi58zd3x7aPfNRguINRdBYEenbkowa7azJ3nu4+nlk5DaPoiyBk3/SeLZFDd54ccmel7VOMuqsy21t26vv2ub524WfL44SOZ6TVA1v++78iAAAAAD22V/Sf9JUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADC4erBemkigab00VhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXH8CAAD///VGHGY=") setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4ea3, @private=0xa010102}], 0x20) sendmmsg$inet6(r3, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x9, @local, 0x9}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x40085dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) set_mempolicy(0xc003, 0x0, 0x7fffffffffffffff) setpgid(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000040)={0x1}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 2m55.92641827s ago: executing program 35 (id=2052): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) pipe(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, 0x0) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', {}, 0x7f}) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x3c, 0x2e4, &(0x7f0000000c40)="$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") setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4ea3, @private=0xa010102}], 0x20) sendmmsg$inet6(r3, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x9, @local, 0x9}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x40085dc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) set_mempolicy(0xc003, 0x0, 0x7fffffffffffffff) setpgid(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000040)={0x1}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 1m1.377491018s ago: executing program 7 (id=2886): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) r0 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan1\x00', 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x0, 0x20}, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x10000000}) 1m0.325547037s ago: executing program 7 (id=2894): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) open(&(0x7f0000000180)='./bus\x00', 0x64842, 0x44) r0 = semget$private(0x0, 0x7, 0x85) unshare(0x40400) semop(r0, &(0x7f0000000240)=[{0x1, 0xce92, 0x1000}], 0x1) semctl$SETVAL(r0, 0x4, 0x10, 0x0) 58.960920104s ago: executing program 7 (id=2901): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x22) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f00000000c0)={[{@errors_remount}, {@minixdf}]}, 0x1, 0x531, &(0x7f0000000100)="$eJzs3d9rLFcdAPDvzGZvc3+5WxWpBWuxlXuL3t2bxrZBRNsXfSqo9f02JpsQspsN2U29CUVT/A9EUPDJJ18E/wCh9ME/QAoFfREfREURvdUHQe3IbGZtstm9ie3+uE0+HziZc87MzvecWfbszOxkJoAL6/GIeD4iShHxVERUivq0SHFwmPLl3r736kqeksiyl/6aRFLU9deVl+ci4mrxsvmI+PpXIr6ZnIzb2dvfXG42GztFud5tbdc7e/u3NlrL6431xtbi4sKzS88tPbN0Oyu8r35W+5mffPmLr3/2W7+78+eb386b9YWPRTkG+jFOh10v97ZFX76NdiYRbAZKRX/Ks24IAABnku/jfzgiPtXb/69Eqbc3N6A0i5YBAAAA45J9KYl/JxHZcf2fqzIAAADggy+NiGuRpLXiWoBrkaaXioP/j8aVtNnudD+z1t7dWs3nRVSjnK5tNBu3i2uFq1FO8vJCcY1tv/z0QHkxIh6OiO9XLvfKtZV2c3WG5z0AAADgIrk6cPz/j0ray59uyP8JAAAAAA+u6sgCAAAAcF445AcAAIDzb/D4//UZtQMAAACYiK+++GKesv7zr1df2dvdbL9ya7XR2ay1dldqK+2d7dp6u73eu2df67T1Ndvt7c/F1u7derfR6dY7e/t3Wu3dre6djWOPwAYAAACm6OFPvvHrJCIOPn+5l6K4DyDAMX+YdQOAcSrNugHAzJxyF++XR88qj70twHT5FAPJKfNdvAMAAB98Nz5+8vf//vP/nRuA8821PgBw8XiKN1xc5fd+BeCl8bYEmLaHiumHjhdPGPn7/y/PGinLIt6sHK1xfhEAAKbrWi8lae1/O/hpWqtFXI9Iq1FO1jaajdvF8cGvKuWH8vJCb7nk1GuGAQAAAAAAAAAAAAAAAAAAAAAAAIBDWZZEBgAAAJxrEemfkt7d/CNuVJ68Nnh+4FLyz0r8sSj86KUf3F3udncW8vq/9Z7ldSkiuj8s6p8e+fgwAAAAYNySg5GzDo/Ti+nCVFsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAXw9r1XV/rpaH1pwnH/8kJEVIfFn4v53nQ+yhFx5e9JzB15XTKmth28FhGPDIufxDtZllWLVgzGTyPi8oTjV3ubZnT8q2OIDxfZG/n48/ywz18aj/emwz9/c0V6v0aPf2kR+ZHeODds/Lt+Ym2toTEefetn9ZHxX4t4dG74+NMff5MR8Z84sbZ/ZVl2MsbL39jfz6eVIfGzH0fcGPr9kxyLVe+2tuudvf1bG63l9cZ6Y2txceHZpeeWnlm6XV/baDaKv0P7+L1P/PydYfUvFP2/MiT+b39zOP7er/9PDo120n/eunvvI4fZcvad4/Py+DefGPr9Ox8j4peK9OnieyCff6OfPzjMH/XYT998bFTb8virI7b/ae//zTP2/6mvfff3Z1wUAJiCzt7+5nKz2di5T2b+1GXSM63nQcv8Yv6BaMb/menvQU40VhoT706+t/puTb9X732F1yfQ1Gxqb25pjBu8M5b1zHRYAgAAJuDdnf5ZtwQAAAAAAAAAAAAAAAAAAAAurmnc3mww5sFsugoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcF//DQAA//9fTthR") 58.800032538s ago: executing program 7 (id=2904): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000740)={[{@i_version}, {@grpquota}, {@noinit_itable}, {@barrier}]}, 0xfe, 0x2a4, &(0x7f0000000a80)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 58.732007313s ago: executing program 7 (id=2905): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000600)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xfc, 0x24a, &(0x7f0000000640)="$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") openat$dir(0xffffffffffffff9c, &(0x7f000001fc00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x85) 58.51521704s ago: executing program 7 (id=2909): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000280)={[{@nodioread_nolock}, {@noblock_validity}, {@resuid}, {@norecovery}, {@nodiscard}, {@nodioread_nolock}, {@nomblk_io_submit}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x4, 0xfffffffffffffffd, 0x1, 0x7fff}) 58.15102221s ago: executing program 36 (id=2909): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000280)={[{@nodioread_nolock}, {@noblock_validity}, {@resuid}, {@norecovery}, {@nodiscard}, {@nodioread_nolock}, {@nomblk_io_submit}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x4, 0xfffffffffffffffd, 0x1, 0x7fff}) 12.017389408s ago: executing program 4 (id=3181): r0 = syz_usb_connect(0x2, 0x26, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x35, 0xbb, 0x9b, 0x8, 0x10b8, 0x1e6e, 0x9fdb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14, 0x1, 0x8, 0x3, 0x10, 0x10, "", [{{0x9, 0x4, 0x21, 0x7, 0x0, 0x40, 0x82, 0x49, 0x5, [@generic={0x2, 0x22}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001140)={0x14, 0x0, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc27}}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000001400)={0x14, 0x0, &(0x7f00000013c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002240)={0x44, &(0x7f0000002040)={0x0, 0x11, 0x6, "022501f3a2d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0xc, 0x0, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) 9.731968924s ago: executing program 4 (id=3195): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000440)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.683140924s ago: executing program 4 (id=3214): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r1, &(0x7f00000002c0)="5bf9", 0x4000) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000080)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af43901"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r3, 0x0, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac3(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 4.200009097s ago: executing program 6 (id=3232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x3f, 0x2, 0x4, 0x0, 0x97]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc4) 3.49313129s ago: executing program 6 (id=3234): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9d3, 0x100, 0x1000000, 0x35c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd289, 0x80, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x1, 0xfffffffd}}], 0x1, &(0x7f0000001000)={0x2e, 0xa, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xbcc, 0x0, 0x0}}, 0x0) 2.71197635s ago: executing program 8 (id=3239): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8}, 0x10) write$cgroup_subtree(r1, 0x0, 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 2.675244918s ago: executing program 8 (id=3240): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0}) 2.513326684s ago: executing program 8 (id=3243): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000440)=ANY=[@ANYBLOB='discard,discard,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x1535, &(0x7f0000001380)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) utimes(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x0, 0xea60}}) 2.395689459s ago: executing program 8 (id=3246): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.368469235s ago: executing program 3 (id=3247): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7, 0xffef}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 2.223130567s ago: executing program 3 (id=3248): r0 = open$dir(0x0, 0x5ab01, 0x1) openat(r0, 0x0, 0x20002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40c00) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000200000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r4, 0x40104d00, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, 0x0, 0x2040800) 2.091932525s ago: executing program 3 (id=3249): syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x2, 0x1, 0xfffffffc, 0x3ba}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000600)) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.036217767s ago: executing program 3 (id=3250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'ip6gre0\x00', @random="02000000002b"}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) rename(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000140)='./bus\x00') sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf250700", @ANYRES32, @ANYBLOB="80007f0a0a00020091"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) 1.887117429s ago: executing program 6 (id=3251): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0}) 1.315764734s ago: executing program 4 (id=3252): syz_io_uring_setup(0x141c, 0x0, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit$UBLK(0x0, r0, r1, &(0x7f0000001480)=@ublk_stop_dev_sqe={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207507, 0x0, 0x0, 0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[], 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xcc}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000004c0)={0x0, 0x6f27, 0x80, 0x0, 0x10a, 0x0, r11}, 0x0, 0x4, 0x0, 0x0) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(r12, 0x0, 0x24040084) syz_ublk_setup_queues(r11, r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xca}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x668a, 0x40, 0x10fffff, 0x4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x40000, 0x0, 0x145, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0xfffffffd, 0x34a}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) readv(r3, &(0x7f0000000340), 0x0) 1.019274998s ago: executing program 3 (id=3253): r0 = syz_io_uring_setup(0xccc, &(0x7f0000000080)={0x0, 0xfc4d, 0x400, 0x2, 0x3a2}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000008c0)="1c0000001a005f0208000000000000001f0000000000000200080000", 0x1c) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x1}, 0x1d) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4085}, 0x80) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x8, 0x5], 0x2) 841.117587ms ago: executing program 8 (id=3254): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002b80)=ANY=[@ANYBLOB="df"], 0x50}, 0x1, 0x0, 0x0, 0x851}, 0x4028000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 795.706107ms ago: executing program 6 (id=3255): r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 794.833417ms ago: executing program 3 (id=3256): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c9174552aa64b1ad239ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb40209d", 0xdb}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="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", 0x21e}], 0x2}}], 0x2, 0x2090) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x12, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000003580)={&(0x7f0000000580)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0xb4, 0x8, "eee0e55623b7c33bf6782ec39cd07a7b77e32ad83790339ab4dbc8f04f821d04926ceffa0c7d68caf4c2f0111b26191c74025ff778c19ff92f2bc73f6cedc1", 0x29}, 0x80, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000900)="d0edd206f756e1e417e5c3d4002c6ca7c3a69a4335c0456e72e34e061063cda22bec56f3a5a342ac9dce904157593b8a9cc469b23cf13acbd9a9861c18f6b65abcf920ef6e2874d8099c5609a51576f4c4cb432b9649229f8fd5891de9439a4bb72184a392637c02495e3f3f398024fb09d4548639d0935fe4ca02ef37625c9ecc1e98be3a288712bd86de1cc0a7790efa6cb567419ff308543d3354d384f6af29303aa68990c4975a421069c6220e2c76dfd1c87d074680c587743383a7d70aa90bc0e611e3e2d6ba8deb8e774b0e5daf97bc800c15b9bbca2b931ff3192db55ae4127a795578edd317c3c97e641eb63a96152343e5a23ff38bc67981e3", 0xfe}], 0x2, &(0x7f0000002540)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x801) 623.924634ms ago: executing program 6 (id=3257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000c80), &(0x7f0000000380)=""/255}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) 281.468759ms ago: executing program 4 (id=3258): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 117.725914ms ago: executing program 6 (id=3259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900), 0x0, 0x4000001) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 63.446446ms ago: executing program 8 (id=3260): r0 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x6fb4, 0x400, 0x3, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={0x0}, 0x1) 0s ago: executing program 4 (id=3261): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e04114098af000000190902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, &(0x7f00000001c0)={0x20, 0x23, 0x2, {0x2, 0xd308f5dd51593422}}, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 00000246 ORIG_RAX: 00000000000000f8 [ 484.642447][T12204] RAX: ffffffffffffffda RBX: 00007f2bb6625fa0 RCX: 00007f2bb639e159 [ 484.650462][T12204] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 484.658479][T12204] RBP: 00007f2bb643506b R08: ffffffffffffffff R09: 0000000000000000 [ 484.666492][T12204] R10: 000000000000005d R11: 0000000000000246 R12: 0000000000000000 [ 484.674508][T12204] R13: 00007f2bb6626038 R14: 00007f2bb6625fa0 R15: 00007fff592c9438 [ 484.682536][T12204] [ 485.199848][T12222] ip6gre1: entered promiscuous mode [ 485.219727][T12222] ip6gre1: entered allmulticast mode [ 485.376030][T12227] FAULT_INJECTION: forcing a failure. [ 485.376030][T12227] name failslab, interval 1, probability 0, space 0, times 0 [ 485.423681][T12227] CPU: 0 PID: 12227 Comm: syz.1.2023 Not tainted syzkaller #0 [ 485.431220][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.441298][T12227] Call Trace: [ 485.444591][T12227] [ 485.447538][T12227] dump_stack_lvl+0x18c/0x250 [ 485.452250][T12227] ? show_regs_print_info+0x20/0x20 [ 485.457477][T12227] ? load_image+0x420/0x420 [ 485.462006][T12227] ? __might_sleep+0xe0/0xe0 [ 485.466624][T12227] ? __lock_acquire+0x7d80/0x7d80 [ 485.471692][T12227] should_fail_ex+0x394/0x4c0 [ 485.476386][T12227] should_failslab+0x9/0x20 [ 485.480900][T12227] slab_pre_alloc_hook+0x59/0x300 [ 485.485931][T12227] ? x509_cert_parse+0x5b/0x7b0 [ 485.490785][T12227] __kmem_cache_alloc_node+0x53/0x250 [ 485.496167][T12227] ? x509_cert_parse+0x5b/0x7b0 [ 485.501021][T12227] kmalloc_trace+0x2a/0xe0 [ 485.505444][T12227] x509_cert_parse+0x5b/0x7b0 [ 485.510129][T12227] x509_key_preparse+0x64/0x6c0 [ 485.514989][T12227] ? down_read+0x1ac/0x2e0 [ 485.519413][T12227] asymmetric_key_preparse+0xa9/0x140 [ 485.524786][T12227] __key_create_or_update+0x3a6/0xa60 [ 485.530163][T12227] ? key_create_or_update+0x60/0x60 [ 485.535359][T12227] ? bpf_lsm_key_permission+0x9/0x10 [ 485.540650][T12227] ? lookup_user_key+0xb66/0x1140 [ 485.545677][T12227] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 485.551659][T12227] key_create_or_update+0x42/0x60 [ 485.556689][T12227] __se_sys_add_key+0x34f/0x410 [ 485.561554][T12227] ? __x64_sys_add_key+0xc0/0xc0 [ 485.566501][T12227] ? lockdep_hardirqs_on+0x98/0x150 [ 485.571694][T12227] ? __x64_sys_add_key+0x20/0xc0 [ 485.576634][T12227] do_syscall_64+0x55/0xb0 [ 485.581067][T12227] ? clear_bhb_loop+0x40/0x90 [ 485.585759][T12227] ? clear_bhb_loop+0x40/0x90 [ 485.590452][T12227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.596358][T12227] RIP: 0033:0x7fb2beb9e159 [ 485.600781][T12227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.620397][T12227] RSP: 002b:00007fb2bfb4c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 485.628816][T12227] RAX: ffffffffffffffda RBX: 00007fb2bee25fa0 RCX: 00007fb2beb9e159 [ 485.636792][T12227] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 485.644765][T12227] RBP: 00007fb2bec3506b R08: ffffffffffffffff R09: 0000000000000000 [ 485.652820][T12227] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 485.660791][T12227] R13: 00007fb2bee26038 R14: 00007fb2bee25fa0 R15: 00007ffcf80a65d8 [ 485.668775][T12227] [ 485.935898][T12239] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 486.925679][T12251] fuse: Unknown parameter 'group_/tëòU²61' [ 487.585675][T12277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.658006][T12281] fuse: Unknown parameter 'group_/tëòU²61' [ 487.951689][T12292] kvm: pic: non byte write [ 489.597764][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.798438][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.991022][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.196556][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.670132][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.680546][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.689513][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.696088][T12371] overlayfs: failed to clone upperpath [ 490.713513][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.726564][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 490.734038][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.008086][T12381] fuse: Unknown parameter 'group_/tëòU²61' [ 491.040735][T12379] ip6gre1: entered promiscuous mode [ 491.052561][T12379] ip6gre1: entered allmulticast mode [ 491.486001][T12403] fuse: Unknown parameter 'group_/tëòU²61' [ 491.596233][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2077'. [ 492.107341][T12442] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 492.123327][T12368] chnl_net:caif_netlink_parms(): no params data found [ 492.597069][T12368] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.604383][T12368] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.625787][T12368] bridge_slave_0: entered allmulticast mode [ 492.633155][T12368] bridge_slave_0: entered promiscuous mode [ 492.825455][ T5782] Bluetooth: hci1: command tx timeout [ 492.839275][T12368] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.862745][T12368] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.876318][T12468] overlayfs: failed to resolve './bus': -2 [ 492.886538][T12368] bridge_slave_1: entered allmulticast mode [ 492.920848][T12368] bridge_slave_1: entered promiscuous mode [ 493.040352][T12368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.076163][T12368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.191169][ T1137] hsr_slave_0: left promiscuous mode [ 493.226007][ T1137] hsr_slave_1: left promiscuous mode [ 493.255255][ T1137] veth1_to_bond: left allmulticast mode [ 493.260881][ T1137] veth1_to_bond: left promiscuous mode [ 493.309057][ T1137] bridge0: port 1(veth1_to_bond) entered disabled state [ 493.361664][ T1137] veth1_macvtap: left promiscuous mode [ 493.367345][ T1137] veth0_macvtap: left promiscuous mode [ 493.383200][ T1137] veth1_vlan: left promiscuous mode [ 493.390019][ T1137] veth0_vlan: left promiscuous mode [ 493.562017][T12487] overlayfs: failed to resolve './bus': -2 [ 493.610023][ T1137] bond2 (unregistering): Released all slaves [ 493.676202][T12490] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 493.984317][ T1137] bond1 (unregistering): Released all slaves [ 494.909670][ T5782] Bluetooth: hci1: command tx timeout [ 495.080251][ T1137] bond0 (unregistering): Released all slaves [ 495.206472][T12368] team0: Port device team_slave_0 added [ 495.244263][T12368] team0: Port device team_slave_1 added [ 495.332746][T12368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.355130][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.384600][T12368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.393090][T12512] overlayfs: failed to resolve './bus': -2 [ 495.446654][T12368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.470796][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.531889][T12368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.706425][T12368] hsr_slave_0: entered promiscuous mode [ 495.732430][T12368] hsr_slave_1: entered promiscuous mode [ 495.775732][T12368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.783348][T12368] Cannot create hsr debugfs directory [ 495.892418][T12528] fuse: Unknown parameter 'group_/tëòU²61' [ 495.936481][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2113'. [ 496.396954][T12368] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 496.420940][T12368] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 496.472906][T12368] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 496.504120][T12368] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 496.658928][T12368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.744385][T12368] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.802617][ T5012] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.809857][ T5012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.888569][ T5012] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.895788][ T5012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.985792][ T5782] Bluetooth: hci1: command tx timeout [ 497.497587][T12368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.241935][T12368] veth0_vlan: entered promiscuous mode [ 498.321963][T12368] veth1_vlan: entered promiscuous mode [ 498.509970][T12368] veth0_macvtap: entered promiscuous mode [ 498.536622][T12368] veth1_macvtap: entered promiscuous mode [ 498.570519][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.605045][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.647711][T12368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.680850][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.712030][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.746655][T12368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.797543][T12368] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.825159][T12368] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.845454][T12368] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.854632][T12368] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.066099][ T5782] Bluetooth: hci1: command tx timeout [ 499.075552][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.083395][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.161476][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.199247][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.866227][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.034803][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.214073][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.245546][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.345170][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 500.631762][T12683] FAULT_INJECTION: forcing a failure. [ 500.631762][T12683] name failslab, interval 1, probability 0, space 0, times 0 [ 500.655465][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.677560][T12683] CPU: 1 PID: 12683 Comm: syz.7.2151 Not tainted syzkaller #0 [ 500.685099][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.695178][T12683] Call Trace: [ 500.698482][T12683] [ 500.701436][T12683] dump_stack_lvl+0x18c/0x250 [ 500.706157][T12683] ? show_regs_print_info+0x20/0x20 [ 500.711390][T12683] ? load_image+0x420/0x420 [ 500.715925][T12683] ? __might_sleep+0xe0/0xe0 [ 500.720548][T12683] ? __lock_acquire+0x7d80/0x7d80 [ 500.725610][T12683] should_fail_ex+0x394/0x4c0 [ 500.730317][T12683] should_failslab+0x9/0x20 [ 500.734843][T12683] slab_pre_alloc_hook+0x59/0x300 [ 500.739903][T12683] ? x509_cert_parse+0x5b/0x7b0 [ 500.744789][T12683] __kmem_cache_alloc_node+0x53/0x250 [ 500.750200][T12683] ? x509_cert_parse+0x5b/0x7b0 [ 500.755080][T12683] kmalloc_trace+0x2a/0xe0 [ 500.759532][T12683] x509_cert_parse+0x5b/0x7b0 [ 500.764252][T12683] x509_key_preparse+0x64/0x6c0 [ 500.769142][T12683] ? down_read+0x1ac/0x2e0 [ 500.773589][T12683] asymmetric_key_preparse+0xa9/0x140 [ 500.778998][T12683] __key_create_or_update+0x3a6/0xa60 [ 500.784412][T12683] ? key_create_or_update+0x60/0x60 [ 500.789643][T12683] ? bpf_lsm_key_permission+0x9/0x10 [ 500.794970][T12683] ? lookup_user_key+0xb66/0x1140 [ 500.800031][T12683] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 500.806041][T12683] key_create_or_update+0x42/0x60 [ 500.811096][T12683] __se_sys_add_key+0x34f/0x410 [ 500.815981][T12683] ? __x64_sys_add_key+0xc0/0xc0 [ 500.820957][T12683] ? lockdep_hardirqs_on+0x98/0x150 [ 500.826181][T12683] ? __x64_sys_add_key+0x20/0xc0 [ 500.831152][T12683] do_syscall_64+0x55/0xb0 [ 500.835596][T12683] ? clear_bhb_loop+0x40/0x90 [ 500.840300][T12683] ? clear_bhb_loop+0x40/0x90 [ 500.845004][T12683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.850931][T12683] RIP: 0033:0x7f0a4ff9e159 [ 500.855370][T12683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.875009][T12683] RSP: 002b:00007f0a50e9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 500.883452][T12683] RAX: ffffffffffffffda RBX: 00007f0a50225fa0 RCX: 00007f0a4ff9e159 [ 500.891455][T12683] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 500.899453][T12683] RBP: 00007f0a5003506b R08: ffffffffffffffff R09: 0000000000000000 [ 500.907455][T12683] R10: 000000000000005d R11: 0000000000000246 R12: 0000000000000000 [ 500.915453][T12683] R13: 00007f0a50226038 R14: 00007f0a50225fa0 R15: 00007ffcfc041588 [ 500.923467][T12683] [ 500.951058][T12694] veth1_to_bond: entered promiscuous mode [ 501.065237][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.150422][T12704] loop3: detected capacity change from 0 to 7 [ 501.201364][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.210865][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.219708][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.228949][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.240117][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.249352][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.279921][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.289180][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.306746][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.316034][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.324081][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.333307][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.343585][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.352860][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.360788][T12704] ldm_validate_partition_table(): Disk read failed. [ 501.373899][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.383132][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.399518][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.408736][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.417088][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.426373][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 501.437440][T12704] Dev loop3: unable to read RDB block 0 [ 501.449203][T12704] loop3: unable to read partition table [ 501.471035][T12704] loop3: partition table beyond EOD, truncated [ 501.489728][T12704] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 501.630277][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.667912][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.923041][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 502.025323][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.105586][ T3066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.065464][T12070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.145538][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.108166][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.126219][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.144201][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.155773][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.164343][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 505.172089][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 505.225438][ T3066] net_ratelimit: 7 callbacks suppressed [ 505.225455][ T3066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.554366][T11296] bond0: (slave syz_tun): Releasing backup interface [ 505.634610][T12851] bridge0: port 3(veth1_to_bond) entered blocking state [ 505.658519][T12851] bridge0: port 3(veth1_to_bond) entered disabled state [ 505.680210][T12851] veth1_to_bond: entered allmulticast mode [ 505.701605][T12851] bridge0: port 3(veth1_to_bond) entered blocking state [ 505.708849][T12851] bridge0: port 3(veth1_to_bond) entered forwarding state [ 505.920937][ T1137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.188676][ T1137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.230891][T12836] chnl_net:caif_netlink_parms(): no params data found [ 506.282607][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.368805][ T1137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.578181][ T1137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.833010][T12836] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.859486][T12836] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.871349][T12836] bridge_slave_0: entered allmulticast mode [ 506.881416][T12836] bridge_slave_0: entered promiscuous mode [ 506.936592][T12836] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.948378][T12836] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.956132][T12836] bridge_slave_1: entered allmulticast mode [ 506.971776][T12836] bridge_slave_1: entered promiscuous mode [ 507.091196][T12836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.130996][T12836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.229376][ T5786] Bluetooth: hci3: command tx timeout [ 507.236466][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.309369][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.513636][T12836] team0: Port device team_slave_0 added [ 507.545589][T12836] team0: Port device team_slave_1 added [ 507.698055][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2194'. [ 507.797206][T12836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.814383][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.872970][T12927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.884481][T12836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.905237][T12927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.920120][T12836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.938946][T12927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.952210][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.980559][T12929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.992085][T12929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.002475][T12836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.075499][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.401350][T12836] hsr_slave_0: entered promiscuous mode [ 508.419890][T12836] hsr_slave_1: entered promiscuous mode [ 508.439245][T12836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.449483][T12836] Cannot create hsr debugfs directory [ 509.306913][ T5786] Bluetooth: hci3: command tx timeout [ 509.479986][T12987] loop6: detected capacity change from 0 to 128 [ 509.522751][T12989] FAULT_INJECTION: forcing a failure. [ 509.522751][T12989] name fail_futex, interval 1, probability 0, space 0, times 1 [ 509.537876][ T1137] hsr_slave_0: left promiscuous mode [ 509.555961][T12989] CPU: 1 PID: 12989 Comm: syz.7.2214 Not tainted syzkaller #0 [ 509.563500][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.573594][T12989] Call Trace: [ 509.576903][T12989] [ 509.579861][T12989] dump_stack_lvl+0x18c/0x250 [ 509.584579][T12989] ? show_regs_print_info+0x20/0x20 [ 509.589800][T12989] ? load_image+0x420/0x420 [ 509.594307][T12989] ? mark_lock+0x94/0x320 [ 509.598643][T12989] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 509.604629][T12989] should_fail_ex+0x394/0x4c0 [ 509.609315][T12989] get_futex_key+0x136/0x1030 [ 509.614027][T12989] ? slab_free_freelist_hook+0x130/0x1a0 [ 509.619667][T12989] ? futex_setup_timer+0xc0/0xc0 [ 509.624605][T12989] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 509.630242][T12989] futex_wake+0x127/0x4f0 [ 509.634571][T12989] ? tomoyo_path_number_perm+0x217/0x5e0 [ 509.640208][T12989] ? futex_wake_mark+0x150/0x150 [ 509.645157][T12989] do_futex+0x35d/0x3e0 [ 509.649311][T12989] ? __ia32_sys_get_robust_list+0x110/0x110 [ 509.655207][T12989] __se_sys_futex+0x3a9/0x440 [ 509.659887][T12989] ? __x64_sys_futex+0xf0/0xf0 [ 509.664654][T12989] ? __x64_sys_futex+0x21/0xf0 [ 509.669454][T12989] do_syscall_64+0x55/0xb0 [ 509.673875][T12989] ? clear_bhb_loop+0x40/0x90 [ 509.678552][T12989] ? clear_bhb_loop+0x40/0x90 [ 509.683229][T12989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.689118][T12989] RIP: 0033:0x7f0a4ff9e159 [ 509.693528][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.713133][T12989] RSP: 002b:00007f0a50e9b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 509.721545][T12989] RAX: ffffffffffffffda RBX: 00007f0a50225fa8 RCX: 00007f0a4ff9e159 [ 509.729515][T12989] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a50225fac [ 509.737556][T12989] RBP: 00007f0a50225fa0 R08: 0000000000745afb R09: 0000000000000000 [ 509.745534][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.753509][T12989] R13: 00007f0a50226038 R14: 00007ffcfc0414a0 R15: 00007ffcfc041588 [ 509.761495][T12989] [ 509.768436][ T1137] hsr_slave_1: left promiscuous mode [ 509.774853][ T1137] veth1_to_bond: left allmulticast mode [ 509.791200][ T1137] bridge0: port 1(veth1_to_bond) entered disabled state [ 509.905877][ T1137] veth1_macvtap: left promiscuous mode [ 509.919449][ T1137] veth0_macvtap: left promiscuous mode [ 509.950127][ T1137] veth1_vlan: left promiscuous mode [ 509.955847][ T1137] veth0_vlan: left promiscuous mode [ 510.272584][T12867] net_ratelimit: 8 callbacks suppressed [ 510.272598][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.427745][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.779266][ T1137] bond1 (unregistering): Released all slaves [ 511.226701][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.385232][ T5786] Bluetooth: hci3: command tx timeout [ 511.466843][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.875217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.926510][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.090815][T13013] loop6: detected capacity change from 0 to 128 [ 512.149464][T13013] loop6: detected capacity change from 0 to 164 [ 512.506862][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.542104][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.238315][ T1137] bond0 (unregistering): Released all slaves [ 513.465530][ T5786] Bluetooth: hci3: command tx timeout [ 513.555780][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.830325][T13036] loop6: detected capacity change from 0 to 128 [ 513.993733][T12836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 514.047688][T12836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 514.115679][T12836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 514.138934][T12836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 514.272979][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.436783][T12836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.471839][T12836] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.510108][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.517445][ T8394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.581551][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.588793][ T8394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.311362][T12836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.324468][T13077] FAULT_INJECTION: forcing a failure. [ 515.324468][T13077] name fail_futex, interval 1, probability 0, space 0, times 0 [ 515.360777][T13077] CPU: 0 PID: 13077 Comm: syz.6.2239 Not tainted syzkaller #0 [ 515.368307][T13077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.378386][T13077] Call Trace: [ 515.381689][T13077] [ 515.384647][T13077] dump_stack_lvl+0x18c/0x250 [ 515.389364][T13077] ? show_regs_print_info+0x20/0x20 [ 515.394598][T13077] ? load_image+0x420/0x420 [ 515.399148][T13077] ? __up_read+0x2b8/0x6b0 [ 515.403598][T13077] should_fail_ex+0x394/0x4c0 [ 515.408322][T13077] get_futex_key+0x136/0x1030 [ 515.413043][T13077] ? futex_setup_timer+0xc0/0xc0 [ 515.418025][T13077] futex_wake+0x127/0x4f0 [ 515.422402][T13077] ? mtree_range_walk+0x68c/0x7b0 [ 515.427463][T13077] ? futex_wake_mark+0x150/0x150 [ 515.432429][T13077] ? userfaultfd_unmap_complete+0x293/0x310 [ 515.438355][T13077] ? userfaultfd_unmap_prep+0x3c0/0x3c0 [ 515.443975][T13077] do_futex+0x35d/0x3e0 [ 515.448166][T13077] ? __ia32_sys_get_robust_list+0x110/0x110 [ 515.450967][T12836] veth0_vlan: entered promiscuous mode [ 515.454073][T13077] __se_sys_futex+0x3a9/0x440 [ 515.454106][T13077] ? __x64_sys_futex+0xf0/0xf0 [ 515.469033][T13077] ? __x64_sys_futex+0x21/0xf0 [ 515.473832][T13077] do_syscall_64+0x55/0xb0 [ 515.478284][T13077] ? clear_bhb_loop+0x40/0x90 [ 515.482998][T13077] ? clear_bhb_loop+0x40/0x90 [ 515.487716][T13077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.493649][T13077] RIP: 0033:0x7f2bb639e159 [ 515.498066][T13077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.517678][T13077] RSP: 002b:00007f2bb731f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 515.526093][T13077] RAX: ffffffffffffffda RBX: 00007f2bb6625fa8 RCX: 00007f2bb639e159 [ 515.534059][T13077] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2bb6625fac [ 515.542028][T13077] RBP: 00007f2bb6625fa0 R08: 0000000000745afb R09: 0000000000000000 [ 515.549993][T13077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.557958][T13077] R13: 00007f2bb6626038 R14: 00007fff592c9350 R15: 00007fff592c9438 [ 515.565938][T13077] [ 515.610429][T12836] veth1_vlan: entered promiscuous mode [ 515.625412][ T27] net_ratelimit: 1 callbacks suppressed [ 515.625428][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.724606][T12836] veth0_macvtap: entered promiscuous mode [ 515.774877][T12836] veth1_macvtap: entered promiscuous mode [ 515.825488][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.840577][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.859256][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.877532][T13085] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 515.895098][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.917453][T12836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.952498][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.979900][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.001621][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.021490][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.061113][T12836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.106504][T12836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.126697][T12836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.155126][T12836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.165620][T12836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.359085][ T8394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.409870][ T8394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.499113][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.518327][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.675673][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.198855][T13124] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 517.320782][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.632836][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.708356][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.022390][T13157] loop3: detected capacity change from 0 to 128 [ 518.594920][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.665499][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.746290][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.904376][T13172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.531725][T13189] fuse: Unknown parameter 'group_/tëòU²61' [ 519.548344][T13192] loop3: detected capacity change from 0 to 128 [ 519.574142][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 520.745703][ T27] net_ratelimit: 11 callbacks suppressed [ 520.745720][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.835093][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.525790][T13253] ip_tables: iptables: counters copy to user failed while replacing table [ 521.818793][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.972233][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.012566][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.105382][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.114545][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.586074][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.076251][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.774081][T13315] sit1: entered promiscuous mode [ 523.794885][T13315] sit1: entered allmulticast mode [ 523.843035][T13315] team0: Device sit1 is of different type [ 525.022907][T13351] FAULT_INJECTION: forcing a failure. [ 525.022907][T13351] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 525.050526][T13351] CPU: 1 PID: 13351 Comm: syz.6.2322 Not tainted syzkaller #0 [ 525.058057][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.068140][T13351] Call Trace: [ 525.071432][T13351] [ 525.074373][T13351] dump_stack_lvl+0x18c/0x250 [ 525.079108][T13351] ? show_regs_print_info+0x20/0x20 [ 525.084331][T13351] ? load_image+0x420/0x420 [ 525.088860][T13351] ? __lock_acquire+0x7d80/0x7d80 [ 525.093912][T13351] should_fail_ex+0x394/0x4c0 [ 525.098620][T13351] _copy_from_user+0x2f/0xe0 [ 525.103234][T13351] __copy_msghdr+0x388/0x560 [ 525.107905][T13351] ___sys_sendmsg+0x214/0x360 [ 525.112614][T13351] ? __sys_sendmsg+0x2b0/0x2b0 [ 525.117419][T13351] __se_sys_sendmsg+0x1d0/0x2c0 [ 525.122275][T13351] ? __x64_sys_sendmsg+0x80/0x80 [ 525.127224][T13351] ? lockdep_hardirqs_on+0x98/0x150 [ 525.132424][T13351] do_syscall_64+0x55/0xb0 [ 525.136839][T13351] ? clear_bhb_loop+0x40/0x90 [ 525.141515][T13351] ? clear_bhb_loop+0x40/0x90 [ 525.146192][T13351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.152087][T13351] RIP: 0033:0x7f2bb639e159 [ 525.156505][T13351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.176114][T13351] RSP: 002b:00007f2bb731f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.184533][T13351] RAX: ffffffffffffffda RBX: 00007f2bb6625fa0 RCX: 00007f2bb639e159 [ 525.192501][T13351] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 525.200475][T13351] RBP: 00007f2bb643506b R08: 0000000000000000 R09: 0000000000000000 [ 525.208442][T13351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.216413][T13351] R13: 00007f2bb6626038 R14: 00007f2bb6625fa0 R15: 00007fff592c9438 [ 525.224394][T13351] [ 525.276733][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2323'. [ 526.146921][T13376] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 526.175252][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2332'. [ 526.265256][T12900] net_ratelimit: 11 callbacks suppressed [ 526.265275][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.350323][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.512798][T13391] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 526.586901][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.069512][T13402] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.273491][T13404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.292058][T13404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.305517][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.313687][T13404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.342565][T13406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2342'. [ 527.343914][T13407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.380537][T13407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.685306][T13413] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 527.719152][T13415] fuse: Unknown parameter 'group_/tëòU²61' [ 527.749059][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2347'. [ 528.170973][T13429] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 528.194070][T13429] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2353'. [ 529.127620][T13465] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2366'. [ 529.144209][T13469] ipvlan0: entered promiscuous mode [ 529.161753][T13469] ipvlan0: entered allmulticast mode [ 529.167930][T13469] veth0_vlan: entered allmulticast mode [ 529.341757][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2368'. [ 529.786454][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 531.317388][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2380'. [ 531.626389][T12900] net_ratelimit: 53 callbacks suppressed [ 531.626405][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.640614][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.709288][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.329609][T13552] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 532.677901][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.688864][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.828072][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.705524][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.713942][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.485528][T13599] ip_tables: iptables: counters copy to user failed while replacing table [ 534.747773][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.554763][T13636] overlayfs: failed to clone upperpath [ 536.603800][T13636] overlayfs: failed to clone upperpath [ 536.849135][ T27] net_ratelimit: 7 callbacks suppressed [ 536.849150][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.865229][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.886970][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.445815][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.472538][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.745246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.754926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.115231][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.265629][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.274254][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.311132][T13682] sit1: entered promiscuous mode [ 538.335820][T13682] sit1: entered allmulticast mode [ 538.496030][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2426'. [ 539.121021][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 539.121036][ T28] audit: type=1326 audit(1790828314.895:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.3.2436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f9e159 code=0x7ffc0000 [ 539.162765][ T28] audit: type=1326 audit(1790828314.935:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.3.2436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f9e159 code=0x7ffc0000 [ 539.188616][ T28] audit: type=1326 audit(1790828314.935:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.3.2436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f9e159 code=0x7ffc0000 [ 539.219406][ T28] audit: type=1326 audit(1790828314.935:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.3.2436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f9e159 code=0x7ffc0000 [ 539.248065][ T28] audit: type=1326 audit(1790828314.965:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.3.2436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1058f9e159 code=0x7ffc0000 [ 539.297788][ T28] audit: type=1326 audit(1790828314.965:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.3.2436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f9e159 code=0x7ffc0000 [ 539.355043][ T28] audit: type=1326 audit(1790828314.965:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.3.2436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f9e159 code=0x7ffc0000 [ 539.420713][ T28] audit: type=1326 audit(1790828314.965:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.3.2436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f9e159 code=0x7ffc0000 [ 539.470879][ T28] audit: type=1326 audit(1790828314.965:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.3.2436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f9e159 code=0x7ffc0000 [ 539.525220][ T28] audit: type=1326 audit(1790828314.995:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.3.2436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1058f9e159 code=0x7ffc0000 [ 541.895155][ T6750] net_ratelimit: 11 callbacks suppressed [ 541.895172][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.910183][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.939056][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.135095][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.163811][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.283093][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.292928][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.643785][T13789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.679612][T13789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.732862][T13789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.147108][T13809] overlayfs: failed to clone upperpath [ 547.065535][ C1] net_ratelimit: 39 callbacks suppressed [ 547.065556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.567202][T13928] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 547.586384][T13928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.595463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.633428][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.642127][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.151799][T13949] ip_tables: iptables: counters copy to user failed while replacing table [ 548.698147][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.810326][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.818866][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.841525][T13937] syz.4.2510: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 548.886529][T13937] CPU: 0 PID: 13937 Comm: syz.4.2510 Not tainted syzkaller #0 [ 548.894057][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 548.904132][T13937] Call Trace: [ 548.907429][T13937] [ 548.910377][T13937] dump_stack_lvl+0x18c/0x250 [ 548.913087][T13951] loop6: detected capacity change from 0 to 164 [ 548.915071][T13937] ? show_regs_print_info+0x20/0x20 [ 548.915137][T13937] ? load_image+0x420/0x420 [ 548.915163][T13937] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 548.915190][T13937] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 548.915218][T13937] warn_alloc+0x246/0x340 [ 548.915244][T13937] ? zone_watermark_ok_safe+0x230/0x230 [ 548.953940][T13937] ? _raw_spin_unlock+0x28/0x40 [ 548.958842][T13937] __vmalloc_node_range+0x661/0x1320 [ 548.964188][T13937] ? __alloc_pages+0xae/0x460 [ 548.968888][T13937] ? free_vm_area+0x50/0x50 [ 548.973410][T13937] ? packet_set_ring+0x77d/0x2490 [ 548.978496][T13937] vzalloc+0x79/0x90 [ 548.982408][T13937] ? packet_set_ring+0x77d/0x2490 [ 548.987445][T13937] packet_set_ring+0x77d/0x2490 [ 548.992320][T13937] ? packet_mmap+0x510/0x510 [ 548.996909][T13937] ? __lock_acquire+0x7d80/0x7d80 [ 549.001935][T13937] ? __local_bh_enable_ip+0x13a/0x1c0 [ 549.007308][T13937] ? lockdep_hardirqs_on+0x98/0x150 [ 549.012505][T13937] ? __might_fault+0xaa/0x120 [ 549.017184][T13937] ? __might_fault+0xc6/0x120 [ 549.021857][T13937] ? __might_fault+0xaa/0x120 [ 549.026532][T13937] ? _copy_from_user+0xa5/0xe0 [ 549.031297][T13937] packet_setsockopt+0xdb0/0x1500 [ 549.036327][T13937] ? packet_ioctl+0x350/0x350 [ 549.041017][T13937] ? aa_sk_perm+0x83c/0x970 [ 549.045524][T13937] ? __fget_files+0x28/0x460 [ 549.050122][T13937] ? aa_af_perm+0x330/0x330 [ 549.054627][T13937] ? __fget_files+0x28/0x460 [ 549.059222][T13937] ? aa_sock_opt_perm+0x74/0x100 [ 549.064160][T13937] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 549.069708][T13937] ? security_socket_setsockopt+0x7e/0xa0 [ 549.075430][T13937] ? packet_ioctl+0x350/0x350 [ 549.080117][T13937] do_sock_setsockopt+0x175/0x1a0 [ 549.085158][T13937] ? __fdget+0x180/0x210 [ 549.089408][T13937] __x64_sys_setsockopt+0x182/0x200 [ 549.094612][T13937] do_syscall_64+0x55/0xb0 [ 549.099032][T13937] ? clear_bhb_loop+0x40/0x90 [ 549.103709][T13937] ? clear_bhb_loop+0x40/0x90 [ 549.108389][T13937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.114285][T13937] RIP: 0033:0x7fa420d9e159 [ 549.118701][T13937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.138306][T13937] RSP: 002b:00007fa41eff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 549.146719][T13937] RAX: ffffffffffffffda RBX: 00007fa421025fa0 RCX: 00007fa420d9e159 [ 549.154688][T13937] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 549.162680][T13937] RBP: 00007fa420e3506b R08: 000000000000001c R09: 0000000000000000 [ 549.170648][T13937] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 549.178617][T13937] R13: 00007fa421026038 R14: 00007fa421025fa0 R15: 00007ffe8d263ad8 [ 549.186604][T13937] [ 549.375187][T13937] Mem-Info: [ 549.378369][T13937] active_anon:10632 inactive_anon:0 isolated_anon:0 [ 549.378369][T13937] active_file:17073 inactive_file:41165 isolated_file:0 [ 549.378369][T13937] unevictable:17706 dirty:137 writeback:0 [ 549.378369][T13937] slab_reclaimable:11402 slab_unreclaimable:97029 [ 549.378369][T13937] mapped:27695 shmem:3794 pagetables:815 [ 549.378369][T13937] sec_pagetables:0 bounce:0 [ 549.378369][T13937] kernel_misc_reclaimable:0 [ 549.378369][T13937] free:1263382 free_pcp:5239 free_cma:0 [ 549.485025][T13937] Node 0 active_anon:43528kB inactive_anon:0kB active_file:68248kB inactive_file:164448kB unevictable:69288kB isolated(anon):0kB isolated(file):0kB mapped:111744kB dirty:512kB writeback:0kB shmem:14540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11320kB pagetables:3260kB sec_pagetables:0kB all_unreclaimable? no [ 549.518037][T13937] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:36kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 549.548842][T13937] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 549.576122][T13937] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 549.581928][T13937] Node 0 DMA32 free:1237236kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:44288kB inactive_anon:0kB active_file:68248kB inactive_file:163624kB unevictable:69288kB writepending:512kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:12280kB local_pcp:4584kB free_cma:0kB [ 549.613039][T13937] lowmem_reserve[]: 0 0 0 0 0 [ 549.617834][T13937] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 549.683902][T13937] lowmem_reserve[]: 0 0 0 0 0 [ 549.694021][T13937] Node 1 Normal free:3800176kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:212kB unevictable:1536kB writepending:36kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8104kB local_pcp:6600kB free_cma:0kB [ 549.745041][T13937] lowmem_reserve[]: 0 0 0 0 0 [ 549.758518][T13937] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 549.801425][T13937] Node 0 DMA32: 1*4kB (M) 2*8kB (UE) 884*16kB (UME) 665*32kB (UME) 366*64kB (UME) 210*128kB (UME) 78*256kB (UME) 56*512kB (UM) 25*1024kB (M) 4*2048kB (UME) 261*4096kB (M) = 1237236kB [ 549.825143][T13937] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 549.840215][T13937] Node 1 Normal: 256*4kB (UM) 56*8kB (UME) 39*16kB (UME) 266*32kB (UME) 92*64kB (UME) 20*128kB (UM) 4*256kB (UM) 3*512kB (ME) 0*1024kB 3*2048kB (UME) 921*4096kB (M) = 3800176kB [ 549.893683][T13937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 549.913383][T13937] Node 0 hugepages_total=50 hugepages_free=50 hugepages_surp=0 hugepages_size=2048kB [ 549.935005][T13937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 549.985077][T13937] Node 1 hugepages_total=50 hugepages_free=50 hugepages_surp=0 hugepages_size=2048kB [ 549.994615][T13937] 76675 total pagecache pages [ 550.035085][T13937] 0 pages in swap cache [ 550.039308][T13937] Free swap = 124456kB [ 550.043473][T13937] Total swap = 124996kB [ 550.075063][T13937] 2097051 pages RAM [ 550.085202][T13937] 0 pages HighMem/MovableOnly [ 550.089913][T13937] 416965 pages reserved [ 550.115052][T13937] 0 pages cma reserved [ 550.642808][T13968] overlayfs: failed to clone upperpath [ 551.649558][T13997] sit1: entered promiscuous mode [ 551.665397][T13997] sit1: entered allmulticast mode [ 552.185832][ T27] net_ratelimit: 19 callbacks suppressed [ 552.185851][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.265190][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.800890][T14011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.958339][T14015] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 552.993447][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.005100][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.032951][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.042941][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.105431][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.745572][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.406195][T14100] net_ratelimit: 11 callbacks suppressed [ 557.406214][T14100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 558.201320][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.209887][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.309475][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.577951][T14126] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 558.590871][T14126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.599739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.796849][T14136] loop6: detected capacity change from 0 to 736 [ 558.835430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.930344][T14136] rock: directory entry would overflow storage [ 558.945093][T14136] rock: sig=0x3b10, size=4, remaining=3 [ 559.233401][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.243013][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.456414][T14164] fuse: Bad value for 'fd' [ 560.562980][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 560.562995][ T28] audit: type=1326 audit(1790828336.335:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14167 comm="syz.4.2591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa420d9e159 code=0x7ffc0000 [ 560.621177][ T28] audit: type=1326 audit(1790828336.335:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14167 comm="syz.4.2591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa420d9e159 code=0x7ffc0000 [ 560.647536][ T28] audit: type=1326 audit(1790828336.345:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14167 comm="syz.4.2591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa420d9e159 code=0x7ffc0000 [ 560.672565][ T28] audit: type=1326 audit(1790828336.345:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14167 comm="syz.4.2591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa420d9e159 code=0x7ffc0000 [ 560.697675][ T28] audit: type=1326 audit(1790828336.345:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14167 comm="syz.4.2591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa420d9e159 code=0x7ffc0000 [ 560.724917][ T28] audit: type=1326 audit(1790828336.345:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14167 comm="syz.4.2591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa420d9e159 code=0x7ffc0000 [ 560.749756][ T28] audit: type=1326 audit(1790828336.345:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14167 comm="syz.4.2591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa420d9e159 code=0x7ffc0000 [ 560.776098][ T28] audit: type=1326 audit(1790828336.345:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14167 comm="syz.4.2591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa420d9e159 code=0x7ffc0000 [ 560.800457][ T28] audit: type=1326 audit(1790828336.345:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14167 comm="syz.4.2591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa420d9e159 code=0x7ffc0000 [ 560.824760][ T28] audit: type=1326 audit(1790828336.345:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14167 comm="syz.4.2591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fa420d9e159 code=0x7ffc0000 [ 562.746224][ T6750] net_ratelimit: 31 callbacks suppressed [ 562.746242][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.787811][T14212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 563.070901][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.071213][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.085185][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.402754][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.411170][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.360103][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.426333][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.434485][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.443831][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.472869][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.025376][T12810] net_ratelimit: 12 callbacks suppressed [ 568.025394][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.048165][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.073220][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.081613][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.025365][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.125982][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.134420][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.509893][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.178506][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.195697][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.491379][T14332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2650'. [ 573.065369][ T5759] net_ratelimit: 2 callbacks suppressed [ 573.065386][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.230271][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.313775][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.565129][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.733835][T14349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.993182][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.110934][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2659'. [ 574.231328][T14361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.268499][T14361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.288810][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.315653][T14361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.885557][T14389] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2670'. [ 578.426949][T12898] net_ratelimit: 42 callbacks suppressed [ 578.426967][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.512956][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.667143][T14410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.695323][T14410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.703762][T14410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.751741][T14410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.785213][T14410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.793980][T14410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.846444][T14410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.854824][T14410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.540109][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2679'. [ 580.426978][T14440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2689'. [ 582.857310][T14491] overlayfs: failed to clone upperpath [ 583.556151][T13205] net_ratelimit: 765 callbacks suppressed [ 583.556170][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.625835][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.705358][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.665277][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.753425][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.235423][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.466238][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.705304][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.715138][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.797743][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.131199][T14545] loop6: detected capacity change from 0 to 32768 [ 586.233461][T14545] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 586.397467][T14545] XFS (loop6): Ending clean mount [ 586.619662][T11915] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 587.204215][T14586] loop6: detected capacity change from 0 to 4096 [ 587.369136][T14586] ntfs3: loop6: $Secure::$SII is corrupted. [ 587.392618][T14586] ntfs3: loop6: Failed to initialize $Secure (-22). [ 588.235945][T14612] loop6: detected capacity change from 0 to 256 [ 588.272108][T14612] exfat: Deprecated parameter 'namecase' [ 588.404629][T14612] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 588.655681][T14607] net_ratelimit: 25 callbacks suppressed [ 588.655700][T14607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.686129][T14607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.699385][T14607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.755437][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.798575][T14616] loop6: detected capacity change from 0 to 64 [ 588.828289][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.918414][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.973060][T14607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.019805][T14607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.875309][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.953038][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.151173][T14673] loop6: detected capacity change from 0 to 512 [ 591.163175][T14673] EXT4-fs: Ignoring removed nobh option [ 591.200424][T14673] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 591.245444][T14673] EXT4-fs (loop6): 1 truncate cleaned up [ 591.272148][T14673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.352037][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 591.352052][ T28] audit: type=1800 audit(1790828367.125:536): pid=14673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2772" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 591.503118][T11915] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.561922][T14688] loop6: detected capacity change from 0 to 32768 [ 592.578870][T14688] XFS: noattr2 mount option is deprecated. [ 592.640624][T14688] XFS (loop6): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 592.887595][T14718] loop6: detected capacity change from 0 to 512 [ 592.931883][T14718] EXT4-fs (loop6): Test dummy encryption mode enabled [ 592.984864][T14718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.076541][T14718] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 593.333605][T11915] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.795179][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 594.025273][T12898] net_ratelimit: 11 callbacks suppressed [ 594.025291][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.121672][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.235350][T14740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.251006][T14730] loop6: detected capacity change from 0 to 32768 [ 594.256785][T14740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.295330][T14740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.307443][T14740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.325349][T14740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.354038][T14740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.372325][T14745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.395436][T14745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.413147][T14730] JBD2: Ignoring recovery information on journal [ 594.519471][T14730] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 594.767675][T11915] ocfs2: Unmounting device (7,6) on (node local) [ 595.328227][T14765] loop6: detected capacity change from 0 to 2048 [ 595.383903][T14765] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 595.834769][T14784] loop6: detected capacity change from 0 to 256 [ 595.865292][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 597.776615][T14831] loop6: detected capacity change from 0 to 256 [ 597.793124][T14831] exfat: Deprecated parameter 'utf8' [ 597.836635][T14831] exfat: Deprecated parameter 'namecase' [ 597.842411][T14831] exfat: Deprecated parameter 'namecase' [ 597.855411][T14831] exfat: Deprecated parameter 'namecase' [ 597.861154][T14831] exfat: Unknown parameter 'zero_size_dir' [ 599.225288][T12900] net_ratelimit: 32 callbacks suppressed [ 599.225306][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.465370][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.265588][T12810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.515275][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.523479][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.872870][T14898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.881898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.915679][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.131019][T14902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.139453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.273237][T14934] loop6: detected capacity change from 0 to 128 [ 603.369483][T14937] blk_print_req_error: 10 callbacks suppressed [ 603.369499][T14937] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 603.560203][T14941] loop6: detected capacity change from 0 to 64 [ 604.425627][T12898] net_ratelimit: 32 callbacks suppressed [ 604.425646][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.665703][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.673914][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.071286][T14970] loop6: detected capacity change from 0 to 40427 [ 605.215266][T14970] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 605.287947][T14970] F2FS-fs (loop6): invalid crc value [ 605.486451][T14970] F2FS-fs (loop6): Found nat_bits in checkpoint [ 605.544923][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.710903][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.774829][T14970] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 606.268986][T15000] FAULT_INJECTION: forcing a failure. [ 606.268986][T15000] name failslab, interval 1, probability 0, space 0, times 0 [ 606.287554][T15000] CPU: 1 PID: 15000 Comm: syz.6.2898 Not tainted syzkaller #0 [ 606.295093][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.305184][T15000] Call Trace: [ 606.308495][T15000] [ 606.311474][T15000] dump_stack_lvl+0x18c/0x250 [ 606.316199][T15000] ? show_regs_print_info+0x20/0x20 [ 606.321450][T15000] ? load_image+0x420/0x420 [ 606.326000][T15000] ? __might_sleep+0xe0/0xe0 [ 606.330648][T15000] ? __lock_acquire+0x7d80/0x7d80 [ 606.335712][T15000] ? mark_lock+0x94/0x320 [ 606.340089][T15000] should_fail_ex+0x394/0x4c0 [ 606.344824][T15000] should_failslab+0x9/0x20 [ 606.349367][T15000] slab_pre_alloc_hook+0x59/0x300 [ 606.354433][T15000] ? pkcs8_key_preparse+0x12e/0x3e0 [ 606.359676][T15000] __kmem_cache_alloc_node+0x53/0x250 [ 606.365088][T15000] ? pkcs8_key_preparse+0x12e/0x3e0 [ 606.370341][T15000] kmalloc_trace+0x2a/0xe0 [ 606.374802][T15000] pkcs8_key_preparse+0x12e/0x3e0 [ 606.379867][T15000] ? __kmem_cache_free+0xba/0x1f0 [ 606.384932][T15000] ? pkcs8_note_key+0x80/0x80 [ 606.389652][T15000] ? down_read+0x1ac/0x2e0 [ 606.394104][T15000] asymmetric_key_preparse+0xa9/0x140 [ 606.399534][T15000] __key_create_or_update+0x3a6/0xa60 [ 606.404941][T15000] ? opa_smi_handle_dr_smp_recv+0x2b0/0x660 [ 606.410905][T15000] ? key_create_or_update+0x60/0x60 [ 606.416133][T15000] ? bpf_lsm_key_permission+0x9/0x10 [ 606.421453][T15000] ? lookup_user_key+0xb66/0x1140 [ 606.426517][T15000] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 606.432555][T15000] key_create_or_update+0x42/0x60 [ 606.437643][T15000] __se_sys_add_key+0x34f/0x410 [ 606.442550][T15000] ? __x64_sys_add_key+0xc0/0xc0 [ 606.447542][T15000] ? lockdep_hardirqs_on+0x98/0x150 [ 606.452773][T15000] ? __x64_sys_add_key+0x20/0xc0 [ 606.457755][T15000] do_syscall_64+0x55/0xb0 [ 606.462201][T15000] ? clear_bhb_loop+0x40/0x90 [ 606.466913][T15000] ? clear_bhb_loop+0x40/0x90 [ 606.471627][T15000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.477555][T15000] RIP: 0033:0x7f2bb639e159 [ 606.481997][T15000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.501643][T15000] RSP: 002b:00007f2bb731f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 606.510107][T15000] RAX: ffffffffffffffda RBX: 00007f2bb6625fa0 RCX: 00007f2bb639e159 [ 606.518117][T15000] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 606.526125][T15000] RBP: 00007f2bb643506b R08: ffffffffffffffff R09: 0000000000000000 [ 606.534135][T15000] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 606.542148][T15000] R13: 00007f2bb6626038 R14: 00007f2bb6625fa0 R15: 00007fff592c9438 [ 606.550183][T15000] [ 606.605310][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.606108][T13205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.753854][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.829647][T15010] loop6: detected capacity change from 0 to 2048 [ 606.985213][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.085198][T12368] bond0: (slave syz_tun): Releasing backup interface [ 607.188405][T15022] overlayfs: failed to decode file handle (len=6, type=1187721510, flags=0, err=-22) [ 607.278026][ T8394] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.439636][ T8394] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.598860][T15028] FAULT_INJECTION: forcing a failure. [ 607.598860][T15028] name failslab, interval 1, probability 0, space 0, times 0 [ 607.619578][ T8394] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.627314][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.645097][T15028] CPU: 0 PID: 15028 Comm: syz.6.2911 Not tainted syzkaller #0 [ 607.652626][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.662725][T15028] Call Trace: [ 607.666124][T15028] [ 607.669089][T15028] dump_stack_lvl+0x18c/0x250 [ 607.673820][T15028] ? show_regs_print_info+0x20/0x20 [ 607.679060][T15028] ? load_image+0x420/0x420 [ 607.683575][T15028] ? __might_sleep+0xe0/0xe0 [ 607.688180][T15028] ? __lock_acquire+0x7d80/0x7d80 [ 607.693211][T15028] should_fail_ex+0x394/0x4c0 [ 607.697901][T15028] should_failslab+0x9/0x20 [ 607.702414][T15028] slab_pre_alloc_hook+0x59/0x300 [ 607.707467][T15028] ? x509_cert_parse+0xfe/0x7b0 [ 607.712329][T15028] __kmem_cache_alloc_node+0x53/0x250 [ 607.717712][T15028] ? x509_cert_parse+0xfe/0x7b0 [ 607.722568][T15028] kmalloc_trace+0x2a/0xe0 [ 607.726993][T15028] x509_cert_parse+0xfe/0x7b0 [ 607.731676][T15028] x509_key_preparse+0x64/0x6c0 [ 607.736533][T15028] ? down_read+0x1ac/0x2e0 [ 607.740949][T15028] asymmetric_key_preparse+0xa9/0x140 [ 607.746327][T15028] __key_create_or_update+0x3a6/0xa60 [ 607.751713][T15028] ? key_create_or_update+0x60/0x60 [ 607.756914][T15028] ? bpf_lsm_key_permission+0x9/0x10 [ 607.762225][T15028] ? lookup_user_key+0xb66/0x1140 [ 607.767259][T15028] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 607.773250][T15028] key_create_or_update+0x42/0x60 [ 607.778282][T15028] __se_sys_add_key+0x34f/0x410 [ 607.783166][T15028] ? __x64_sys_add_key+0xc0/0xc0 [ 607.788146][T15028] ? lockdep_hardirqs_on+0x98/0x150 [ 607.793376][T15028] ? __x64_sys_add_key+0x20/0xc0 [ 607.798345][T15028] do_syscall_64+0x55/0xb0 [ 607.802773][T15028] ? clear_bhb_loop+0x40/0x90 [ 607.807458][T15028] ? clear_bhb_loop+0x40/0x90 [ 607.812145][T15028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.818044][T15028] RIP: 0033:0x7f2bb639e159 [ 607.822464][T15028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.842078][T15028] RSP: 002b:00007f2bb731f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 607.850496][T15028] RAX: ffffffffffffffda RBX: 00007f2bb6625fa0 RCX: 00007f2bb639e159 [ 607.858471][T15028] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 607.866448][T15028] RBP: 00007f2bb643506b R08: ffffffffffffffff R09: 0000000000000000 [ 607.874431][T15028] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000 [ 607.882407][T15028] R13: 00007f2bb6626038 R14: 00007f2bb6625fa0 R15: 00007fff592c9438 [ 607.890417][T15028] [ 608.128519][ T8394] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.281191][T15041] loop6: detected capacity change from 0 to 512 [ 608.303690][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 608.313445][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 608.321669][T15041] EXT4-fs: Ignoring removed orlov option [ 608.337945][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 608.353049][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 608.361753][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 608.375994][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 608.466389][T15041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.495665][T15041] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.742175][T11915] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.964474][T15042] chnl_net:caif_netlink_parms(): no params data found [ 610.014943][T12900] net_ratelimit: 8 callbacks suppressed [ 610.020637][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.165786][T15079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.174120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.425117][ T5786] Bluetooth: hci1: command tx timeout [ 610.661379][T15042] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.679842][T15042] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.691088][T15042] bridge_slave_0: entered allmulticast mode [ 610.710939][T15042] bridge_slave_0: entered promiscuous mode [ 610.778510][T15042] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.802512][T15042] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.822050][T15042] bridge_slave_1: entered allmulticast mode [ 610.831849][T15042] bridge_slave_1: entered promiscuous mode [ 610.945735][T15042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.968793][T15042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.073223][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.200478][T15042] team0: Port device team_slave_0 added [ 611.243376][T15042] team0: Port device team_slave_1 added [ 611.480338][T15042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.505085][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.585408][T15042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.655491][ T8394] hsr_slave_0: left promiscuous mode [ 611.667576][ T8394] hsr_slave_1: left promiscuous mode [ 611.678200][ T8394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.689871][ T8394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.700505][ T8394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.712856][ T8394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.726018][ T8394] bridge_slave_1: left allmulticast mode [ 611.731723][ T8394] bridge_slave_1: left promiscuous mode [ 611.753566][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.812807][ T8394] bridge_slave_0: left allmulticast mode [ 611.829727][ T8394] bridge_slave_0: left promiscuous mode [ 611.847214][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.973671][ T8394] veth1_macvtap: left promiscuous mode [ 611.984390][ T8394] veth0_macvtap: left promiscuous mode [ 612.001615][ T8394] veth1_vlan: left promiscuous mode [ 612.015161][ T8394] veth0_vlan: left promiscuous mode [ 612.114206][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.286642][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.505372][ T5786] Bluetooth: hci1: command tx timeout [ 613.074818][T15146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.092465][T15146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.101727][T15146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.117964][T15146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.754012][ T8394] team0 (unregistering): Port device team_slave_1 removed [ 613.843069][ T8394] team0 (unregistering): Port device team_slave_0 removed [ 613.928997][ T8394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.035897][ T8394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.587089][ T5786] Bluetooth: hci1: command tx timeout [ 614.967360][ T8394] bond0 (unregistering): Released all slaves [ 615.112831][T15042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.113245][T15188] net_ratelimit: 13 callbacks suppressed [ 615.113260][T15188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.124882][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.126915][T15188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.154787][T15042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.197800][T15188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.209958][T15188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.245814][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.294768][T15188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.308608][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.353233][T15187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.367300][T15042] hsr_slave_0: entered promiscuous mode [ 615.398931][T15042] hsr_slave_1: entered promiscuous mode [ 615.584411][T15199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.592938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.756747][T15205] overlayfs: failed to clone upperpath [ 615.971545][T15042] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 615.987308][T15042] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 616.021868][T15042] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 616.046803][T15042] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 616.349791][T15042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.411338][T15042] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.462336][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.469549][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.497050][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.504247][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.665063][ T5786] Bluetooth: hci1: command tx timeout [ 616.728905][T15241] jffs2: notice: (15241) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 617.280036][T15042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.018087][T15042] veth0_vlan: entered promiscuous mode [ 618.073019][T15042] veth1_vlan: entered promiscuous mode [ 618.161832][T15042] veth0_macvtap: entered promiscuous mode [ 618.206198][T15042] veth1_macvtap: entered promiscuous mode [ 618.271481][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.303014][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.325031][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.363615][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.385619][T15042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.415757][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.451439][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.472165][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.503244][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.539207][T15042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.562934][T15042] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.583800][T15042] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.614031][T15042] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.637912][T15042] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.859174][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.897609][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.991855][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.022595][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.298147][T15313] loop8: detected capacity change from 0 to 32768 [ 620.377499][T15313] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2994 (15313) [ 620.432899][T12898] net_ratelimit: 15 callbacks suppressed [ 620.432916][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.535771][T15313] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 620.575364][T15313] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 620.599790][T15313] BTRFS info (device loop8): setting nodatacow, compression disabled [ 620.618476][T15313] BTRFS info (device loop8): disabling tree log [ 620.625061][T15313] BTRFS info (device loop8): max_inline at 0 [ 620.641414][T15313] BTRFS info (device loop8): using free space tree [ 620.942519][T15313] BTRFS info (device loop8): auto enabling async discard [ 621.286061][T15042] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 621.490194][ T3066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.178861][T15387] loop8: detected capacity change from 0 to 4096 [ 622.273072][T15387] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512). [ 622.345454][T15387] ntfs3: loop8: ino=19, mi_enum_attr [ 622.372365][T15387] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 622.428835][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.438272][T15387] ntfs3: loop8: ino=1a, mi_enum_attr [ 622.448970][T15387] ntfs3: loop8: ino=1a, mi_enum_attr [ 622.464667][T15387] ntfs3: loop8: Failed to initialize $Extend/$Reparse. [ 622.512872][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.031434][T15410] loop8: detected capacity change from 0 to 4096 [ 623.136617][T15410] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 623.195389][T15410] ntfs3: loop8: Failed to load $Extend (-22). [ 623.201540][T15410] ntfs3: loop8: Failed to initialize $Extend. [ 623.497806][T15430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.516881][T15430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.534508][T15430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.559445][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.568467][T15434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.595296][T15434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.967190][T15448] loop8: detected capacity change from 0 to 4096 [ 624.515491][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.525398][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.960123][T15466] loop8: detected capacity change from 0 to 4096 [ 624.987328][T15466] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512). [ 625.082868][T15466] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 625.095337][T15466] ntfs3: loop8: Failed to initialize $Extend/$Reparse. [ 625.124574][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 625.138327][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 625.143268][T15466] ntfs3: loop8: ino=1e, mi_enum_attr [ 625.151812][T15466] ntfs3: loop8: ino=1e, mi_enum_attr [ 625.161503][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 625.161844][ T9050] bond0: (slave syz_tun): Releasing backup interface [ 625.183666][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 625.192909][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 625.201559][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 625.391427][ T59] ntfs3: loop8: ino=3, ntfs3_write_inode failed, -22. [ 625.410925][T15042] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 625.442920][T15042] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 625.465408][ T6750] net_ratelimit: 9 callbacks suppressed [ 625.465424][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.495039][T15042] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 625.520599][ T1137] ntfs3: loop8: ino=3, ntfs3_write_inode failed, -22. [ 625.632744][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.658700][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.724363][T15482] loop8: detected capacity change from 0 to 4096 [ 625.746712][T15482] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512). [ 625.838165][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.857562][T15482] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 625.909127][T15482] ntfs3: loop8: ino=1a, mi_enum_attr [ 625.914691][T15482] ntfs3: loop8: Failed to initialize $Extend/$ObjId. [ 626.043844][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.175939][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.344022][T15470] chnl_net:caif_netlink_parms(): no params data found [ 626.570708][T15470] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.582284][T15470] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.593953][T15470] bridge_slave_0: entered allmulticast mode [ 626.611706][T15470] bridge_slave_0: entered promiscuous mode [ 626.623778][T15470] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.634274][T15470] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.650524][T15470] bridge_slave_1: entered allmulticast mode [ 626.657998][T15470] bridge_slave_1: entered promiscuous mode [ 626.678219][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.811077][T15470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.833788][T15470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.910039][T15470] team0: Port device team_slave_0 added [ 626.948861][T15470] team0: Port device team_slave_1 added [ 627.035681][T15470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.042682][T15470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.089398][T15470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.117270][T15470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.124264][T15470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.151760][T15470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.308310][ T5786] Bluetooth: hci2: command tx timeout [ 627.353482][T15470] hsr_slave_0: entered promiscuous mode [ 627.385972][T15470] hsr_slave_1: entered promiscuous mode [ 627.429471][T15470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.457075][T15470] Cannot create hsr debugfs directory [ 627.718052][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.146177][T15526] loop8: detected capacity change from 0 to 32768 [ 628.152770][ T59] hsr_slave_0: left promiscuous mode [ 628.161469][T15526] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 scanned by syz.8.3044 (15526) [ 628.174402][ T59] hsr_slave_1: left promiscuous mode [ 628.190672][ T59] veth1_to_bond: left allmulticast mode [ 628.200035][ T59] veth1_to_bond: left promiscuous mode [ 628.208708][T15526] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 628.220187][T15526] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 628.222694][ T59] bridge0: port 1(veth1_to_bond) entered disabled state [ 628.230466][T15526] BTRFS info (device loop8): enabling auto defrag [ 628.246564][T15526] BTRFS info (device loop8): force clearing of disk cache [ 628.254283][T15526] BTRFS info (device loop8): ignoring data csums [ 628.267492][T15526] BTRFS info (device loop8): turning on async discard [ 628.280834][T15526] BTRFS info (device loop8): setting nodatacow, compression disabled [ 628.290527][T15526] BTRFS info (device loop8): turning off async discard [ 628.299016][T15526] BTRFS info (device loop8): disabling free space tree [ 628.317579][ T59] vlan0: left allmulticast mode [ 628.322842][ T59] veth0_vlan: left allmulticast mode [ 628.328994][ T59] vlan0: left promiscuous mode [ 628.338751][ T59] veth1_macvtap: left promiscuous mode [ 628.345439][ T59] veth0_macvtap: left promiscuous mode [ 628.351552][ T59] veth1_vlan: left promiscuous mode [ 628.361603][ T59] veth0_vlan: left promiscuous mode [ 628.518980][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.552320][T15042] BTRFS info (device loop8: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 628.755538][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.844494][T15561] loop8: detected capacity change from 0 to 512 [ 628.893828][T15561] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.907367][T15561] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.964024][T15561] Quota error (device loop8): do_check_range: Getting block 773 out of range 1-5 [ 628.986773][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.012145][T15561] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 629.024460][T15561] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.3048: Failed to acquire dquot type 1 [ 629.098195][T15042] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.274419][T15569] loop8: detected capacity change from 0 to 512 [ 629.304072][T15569] EXT4-fs error (device loop8): ext4_validate_block_bitmap:430: comm syz.8.3050: bg 0: block 5: invalid block bitmap [ 629.330823][T15569] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 629.341879][T15569] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3050: invalid indirect mapped block 3 (level 2) [ 629.378060][T15569] EXT4-fs (loop8): 1 orphan inode deleted [ 629.385061][ T5786] Bluetooth: hci2: command tx timeout [ 629.394877][T15569] EXT4-fs (loop8): 1 truncate cleaned up [ 629.427486][T15569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.580151][T15042] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.641287][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.803199][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.263311][T15587] loop8: detected capacity change from 0 to 512 [ 630.348675][T15587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.386129][T15587] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 630.437483][T15042] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.803314][ T59] bond0 (unregistering): Released all slaves [ 630.840115][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.465397][ T5782] Bluetooth: hci2: command tx timeout [ 631.542031][T15470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 631.565897][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.585314][T15470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 631.622571][T15470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 631.644933][T15470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 631.705334][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 631.779260][T15470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.799205][T15470] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.830083][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.837308][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.885283][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.892565][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.904699][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.096960][T15626] loop8: detected capacity change from 0 to 16 [ 632.119125][T15626] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 632.151815][T15193] udevd[15193]: incorrect cramfs checksum on /dev/loop8 [ 632.474785][T15470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.785692][T15662] loop8: detected capacity change from 0 to 16 [ 632.796322][T15662] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 632.919891][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.949369][T15470] veth0_vlan: entered promiscuous mode [ 632.991301][T15470] veth1_vlan: entered promiscuous mode [ 633.063278][T15470] veth0_macvtap: entered promiscuous mode [ 633.086481][T15470] veth1_macvtap: entered promiscuous mode [ 633.109358][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.121947][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.137612][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.157332][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.169839][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.180930][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.192985][T15470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.210976][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.221971][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.234835][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.250108][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.261441][T15470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.276837][T15470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.288883][T15470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.308312][T15470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.317604][T15470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.329971][T15470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.339220][T15470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.502756][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.532437][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.545268][ T5786] Bluetooth: hci2: command tx timeout [ 633.605545][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.623916][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.851116][T15694] loop4: detected capacity change from 0 to 1764 [ 633.975697][T12898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.056439][T15702] loop8: detected capacity change from 0 to 512 [ 634.063802][T15702] EXT4-fs: Ignoring removed oldalloc option [ 634.093476][T15702] EXT4-fs: Ignoring removed i_version option [ 634.132949][T15702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 634.272534][T15702] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3077: invalid indirect mapped block 4294967295 (level 1) [ 634.352403][T15702] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3077: invalid indirect mapped block 4294967295 (level 1) [ 634.384248][T15702] EXT4-fs (loop8): 2 truncates cleaned up [ 634.392606][T15702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.503895][T15042] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.586280][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.005757][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.617506][T15721] loop8: detected capacity change from 0 to 32768 [ 635.710034][T15721] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 636.138861][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.929218][T15042] ocfs2: Unmounting device (7,8) on (node local) [ 637.166971][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.549987][T15756] loop4: detected capacity change from 0 to 32768 [ 637.566168][T15756] XFS: noikeep mount option is deprecated. [ 637.572254][T15756] XFS (loop4): invalid logbufsize: 84 [not 16k,32k,64k,128k or 256k] [ 637.626565][T12070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.983669][T15765] loop8: detected capacity change from 0 to 32768 [ 638.028836][T15765] syz.8.3088: attempt to access beyond end of device [ 638.028836][T15765] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 638.063945][T15765] lbmIODone: I/O error in JFS log [ 638.084424][T15765] *** Log Format Error ! *** [ 638.104867][T15765] lmLogInit: exit(-22) [ 638.119178][T15765] lmLogOpen: exit(-22) [ 638.135144][T15765] jfs_mount_rw failed, return code = -22 [ 638.192436][ T3066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.363168][T15778] loop8: detected capacity change from 0 to 512 [ 638.387424][T15778] EXT4-fs: Ignoring removed bh option [ 638.392878][T15778] EXT4-fs: Ignoring removed mblk_io_submit option [ 638.416033][T15769] loop4: detected capacity change from 0 to 32768 [ 638.427271][T15778] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 638.440999][T15769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3097 (15769) [ 638.476096][T15778] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 638.494337][T15778] EXT4-fs (loop8): orphan cleanup on readonly fs [ 638.514768][T15778] Quota error (device loop8): v2_read_file_info: Free block number 117440512 out of range (1, 6). [ 638.527605][T15769] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 638.553279][T15778] EXT4-fs warning (device loop8): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 638.557621][T15769] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 638.585466][T15769] BTRFS info (device loop4): setting nodatacow, compression disabled [ 638.593637][T15769] BTRFS info (device loop4): disabling tree log [ 638.614128][T15769] BTRFS info (device loop4): max_inline at 0 [ 638.635635][T15769] BTRFS info (device loop4): using free space tree [ 638.644532][T15778] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 638.663790][T15778] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:478: comm syz.8.3099: Invalid block bitmap block 0 in block_group 0 [ 638.738754][T15778] EXT4-fs (loop8): Remounting filesystem read-only [ 638.779508][T15778] EXT4-fs (loop8): 1 orphan inode deleted [ 638.795850][T15769] BTRFS info (device loop4): auto enabling async discard [ 638.817353][T15778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 639.055981][T15042] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.232103][T15677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.240346][ T3066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.713304][T15813] loop8: detected capacity change from 0 to 4096 [ 639.760098][T15813] EXT4-fs: Ignoring removed nobh option [ 639.991295][T15470] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 640.109991][T15813] EXT4-fs: Ignoring removed bh option [ 640.149326][T15813] EXT4-fs (loop8): Test dummy encryption mode enabled [ 640.217527][T15813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.302813][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.367807][T15813] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 640.456079][ T28] audit: type=1800 audit(1790828416.225:537): pid=15813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3103" name="file1" dev="loop8" ino=19 res=0 errno=0 [ 640.669380][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.038773][T15042] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.179878][T15833] loop4: detected capacity change from 0 to 32768 [ 641.272679][T15833] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 641.310100][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.471990][T15833] XFS (loop4): Ending clean mount [ 641.595757][T15470] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 642.356857][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.820010][T15871] loop4: detected capacity change from 0 to 32768 [ 643.810849][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.895496][T12867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.348235][T15915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3119'. [ 644.749812][T15900] loop4: detected capacity change from 0 to 32768 [ 644.827534][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.464221][T15945] loop4: detected capacity change from 0 to 256 [ 645.552145][T15193] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 645.612177][T15945] loop4: detected capacity change from 0 to 512 [ 645.619271][T15193] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 645.656068][T15193] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.685094][T15193] buffer_io_error: 10 callbacks suppressed [ 645.685108][T15193] Buffer I/O error on dev loop4, logical block 0, async page read [ 645.718599][T15945] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 645.738406][T15945] EXT4-fs (loop4): DAX unsupported by block device. [ 645.865395][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.979220][T15945] loop4: detected capacity change from 0 to 8192 [ 646.010479][T15945] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value [ 646.555489][T15964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3129'. [ 646.903383][T15945] loop4: detected capacity change from 0 to 40427 [ 646.912797][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.921571][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.929792][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.940915][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.953656][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.993693][T15945] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64) [ 647.025010][T15945] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 647.049654][T15945] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 647.083812][T15945] F2FS-fs (loop4): invalid crc value [ 647.141362][T15945] F2FS-fs (loop4): Found nat_bits in checkpoint [ 647.356282][T15945] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 647.375065][T15945] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 647.416693][T15945] F2FS-fs (loop4): access invalid blkaddr:2816 [ 647.442841][T15945] CPU: 1 PID: 15945 Comm: syz.4.3124 Not tainted syzkaller #0 [ 647.450383][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.460478][T15945] Call Trace: [ 647.463777][T15945] [ 647.466733][T15945] dump_stack_lvl+0x18c/0x250 [ 647.471455][T15945] ? show_regs_print_info+0x20/0x20 [ 647.476704][T15945] ? __lock_acquire+0x357f/0x7d80 [ 647.481787][T15945] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 647.487214][T15945] f2fs_map_blocks+0xc20/0x4080 [ 647.492116][T15945] ? verify_lock_unused+0x140/0x140 [ 647.497393][T15945] ? f2fs_get_block_locked+0xe0/0xe0 [ 647.502736][T15945] ? xas_next_entry+0x3e0/0x3e0 [ 647.507627][T15945] ? __might_sleep+0xe0/0xe0 [ 647.512268][T15945] ? down_write+0x16e/0x200 [ 647.516810][T15945] ? down_read_killable+0x340/0x340 [ 647.522045][T15945] ? stack_trace_save+0xaa/0x100 [ 647.527027][T15945] ? stack_trace_snprint+0xf0/0xf0 [ 647.532191][T15945] f2fs_fiemap+0x907/0x15b0 [ 647.536758][T15945] ? f2fs_overwrite_io+0x200/0x200 [ 647.541916][T15945] ? __might_fault+0xaa/0x120 [ 647.546641][T15945] ? __might_fault+0xaa/0x120 [ 647.551356][T15945] ? __might_fault+0xc6/0x120 [ 647.556074][T15945] ? __might_fault+0xaa/0x120 [ 647.560785][T15945] do_vfs_ioctl+0x14fe/0x1cc0 [ 647.565481][T15945] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 647.571150][T15945] ? tomoyo_path_number_perm+0x217/0x5e0 [ 647.576791][T15945] ? __lock_acquire+0x7d80/0x7d80 [ 647.581811][T15945] ? slab_free_freelist_hook+0x130/0x1a0 [ 647.587441][T15945] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 647.593080][T15945] ? __kmem_cache_free+0xba/0x1f0 [ 647.598115][T15945] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 647.603754][T15945] ? tomoyo_path_number_perm+0x217/0x5e0 [ 647.609387][T15945] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 647.614874][T15945] ? __fget_files+0x28/0x460 [ 647.619477][T15945] ? bpf_lsm_file_ioctl+0x9/0x10 [ 647.624413][T15945] ? security_file_ioctl+0x80/0xa0 [ 647.629532][T15945] __se_sys_ioctl+0x83/0x170 [ 647.634135][T15945] do_syscall_64+0x55/0xb0 [ 647.638553][T15945] ? clear_bhb_loop+0x40/0x90 [ 647.643280][T15945] ? clear_bhb_loop+0x40/0x90 [ 647.647963][T15945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.653880][T15945] RIP: 0033:0x7efca579e159 [ 647.658297][T15945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.677910][T15945] RSP: 002b:00007efca66eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.686324][T15945] RAX: ffffffffffffffda RBX: 00007efca5a25fa0 RCX: 00007efca579e159 [ 647.694293][T15945] RDX: 0000200000000440 RSI: 00000000c020660b RDI: 0000000000000006 [ 647.702264][T15945] RBP: 00007efca583506b R08: 0000000000000000 R09: 0000000000000000 [ 647.710245][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.718213][T15945] R13: 00007efca5a26038 R14: 00007efca5a25fa0 R15: 00007ffcb1dd5768 [ 647.726201][T15945] [ 648.035786][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.545468][T16006] loop4: detected capacity change from 0 to 64 [ 648.662027][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3138'. [ 648.689138][ T28] audit: type=1800 audit(1790828424.465:538): pid=16006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3132" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 648.854257][T15677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.065801][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.521294][T16017] loop4: detected capacity change from 0 to 32768 [ 649.558659][T16017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3139 (16017) [ 649.612928][T16017] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 649.631174][T16017] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 649.656508][T16017] BTRFS info (device loop4): setting nodatacow, compression disabled [ 649.692285][T16017] BTRFS info (device loop4): disabling tree log [ 649.735168][T16017] BTRFS info (device loop4): max_inline at 0 [ 649.769503][T16017] BTRFS info (device loop4): using free space tree [ 649.905305][T16017] BTRFS info (device loop4): auto enabling async discard [ 649.945267][T15677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.034093][T15470] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 650.108563][T12900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.191810][T15193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (15193) [ 650.827339][T16069] netlink: 'syz.8.3149': attribute type 3 has an invalid length. [ 650.836382][T16069] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3149'. [ 650.850052][T16071] warning: `syz.6.3150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 651.551982][T16085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.559304][T16085] IPv6: NLM_F_CREATE should be set when creating new route [ 651.566617][T16085] IPv6: NLM_F_CREATE should be set when creating new route [ 651.573872][T16085] IPv6: NLM_F_CREATE should be set when creating new route [ 651.732535][T16095] netlink: 'syz.8.3160': attribute type 10 has an invalid length. [ 651.759519][T16095] bond0: (slave veth0_to_batadv): Enslaving as an active interface with an up link [ 651.896874][T16102] netlink: 'syz.6.3163': attribute type 29 has an invalid length. [ 651.920044][T16102] netlink: 'syz.6.3163': attribute type 29 has an invalid length. [ 651.954448][T16102] netlink: 'syz.6.3163': attribute type 29 has an invalid length. [ 651.977225][T16102] netlink: 'syz.6.3163': attribute type 29 has an invalid length. [ 652.006503][T16102] netlink: 'syz.6.3163': attribute type 29 has an invalid length. [ 652.185900][ T27] net_ratelimit: 11 callbacks suppressed [ 652.185916][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.272674][T16113] netlink: 'syz.3.3168': attribute type 2 has an invalid length. [ 652.315189][T16113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3168'. [ 652.360819][T16099] loop4: detected capacity change from 0 to 32768 [ 652.375168][T16116] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3169'. [ 652.386890][T16116] openvswitch: netlink: Tunnel attr 11249 out of range max 16 [ 652.416010][T16099] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 652.468234][T16099] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 652.499785][T16099] BTRFS info (device loop4): setting nodatacow, compression disabled [ 652.522670][T16099] BTRFS info (device loop4): disabling tree log [ 652.553617][T16099] BTRFS info (device loop4): max_inline at 0 [ 652.575440][T16099] BTRFS info (device loop4): using free space tree [ 652.649904][T16133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.657760][T16133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.667363][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.680505][T16133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.689020][T12070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.698381][T16133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.703448][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.731508][T16099] BTRFS info (device loop4): auto enabling async discard [ 652.870203][T15470] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 652.986284][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.148059][T16143] netlink: 'syz.3.3174': attribute type 29 has an invalid length. [ 653.168704][T16144] netlink: 'syz.4.3173': attribute type 29 has an invalid length. [ 653.517013][T16150] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3177'. [ 653.622419][T16157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3180'. [ 653.785270][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.966381][ T27] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 654.080556][T16168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.088944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.162095][ T27] usb 5-1: config 8 has an invalid interface number: 33 but max is 0 [ 654.170528][ T27] usb 5-1: config 8 has no interface number 0 [ 654.176684][ T27] usb 5-1: config 8 interface 33 has no altsetting 0 [ 654.187615][ T27] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 654.196836][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.204814][ T27] usb 5-1: Product: syz [ 654.209206][ T27] usb 5-1: Manufacturer: syz [ 654.213824][ T27] usb 5-1: SerialNumber: syz [ 654.305422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.849065][ T27] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 654.867328][ T27] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 654.876860][ T27] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 654.885914][ T27] usb 5-1: media controller created [ 654.893580][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 654.939237][ T27] DVB: Unable to find symbol dib7000p_attach() [ 654.945519][ T27] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 655.015328][ T27] rc_core: IR keymap rc-dib0700-rc5 not found [ 655.021944][ T27] Registered IR keymap rc-empty [ 655.029051][ T27] dvb-usb: could not initialize remote control. [ 655.035524][ T27] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 655.251123][T16159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.262329][T16159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.306370][ T27] usb 5-1: USB disconnect, device number 2 [ 655.385496][ T27] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 655.440957][T16186] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3190'. [ 656.256159][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 656.590379][T16202] netlink: 192436 bytes leftover after parsing attributes in process `syz.8.3196'. [ 656.650577][ T27] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 656.665600][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.675414][ T27] usb 5-1: Product: syz [ 656.679619][ T27] usb 5-1: Manufacturer: syz [ 656.684364][ T27] usb 5-1: SerialNumber: syz [ 657.268150][T16212] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3200'. [ 657.945408][ T3066] net_ratelimit: 35 callbacks suppressed [ 657.945421][ T3066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.313233][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 658.425857][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.735650][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 658.748270][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 658.985338][ T3066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.162548][T16232] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3210'. [ 659.214572][T16234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.222879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.375214][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 659.400540][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 659.417136][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 659.431381][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 659.453046][ T27] lan78xx: probe of 5-1:1.0 failed with error -71 [ 659.482366][ T27] usb 5-1: USB disconnect, device number 3 [ 660.141219][T16252] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3219'. [ 660.217972][ T5759] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 660.408676][ T5759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 660.418548][ T5759] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 660.429789][ T5759] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 660.439400][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.463298][ T5759] usb 5-1: probing VID:PID(0424:012C) [ 660.480587][ T5759] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 660.487444][ T5759] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 660.498885][ T5759] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 660.508796][ T5759] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 660.516879][ T5759] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 660.862371][ T5759] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 660.978595][T16271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3228'. [ 661.069739][ T5759] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 661.356773][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.388633][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.404382][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.417696][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.482830][T16280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3231'. [ 662.366803][T16293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3237'. [ 663.155321][ T27] net_ratelimit: 12 callbacks suppressed [ 663.155337][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.873950][ T5759] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-110 [ 663.992526][T16330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3250'. [ 664.536816][ T3066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.566992][T12070] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 664.622154][ T5759] usb 5-1: USB disconnect, device number 4 [ 664.659711][T12070] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 664.764559][ T5759] USB vub300 remote SDIO host controller[0] now disconnected [ 665.545364][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.625293][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 665.635070][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16357, name: syz.6.3259 [ 665.644268][ C0] preempt_count: 101, expected: 0 [ 665.649373][ C0] RCU nest depth: 0, expected: 0 [ 665.654349][ C0] 2 locks held by syz.6.3259/16357: [ 665.659611][ C0] #0: ffff88805daf1b30 (sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x300/0xf20 [ 665.669202][ C0] #1: ffffc90000007c80 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 665.679794][ C0] Preemption disabled at: [ 665.679808][ C0] [<0000000000000000>] 0x0 [ 665.688655][ C0] CPU: 0 PID: 16357 Comm: syz.6.3259 Not tainted syzkaller #0 [ 665.696149][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 665.706205][ C0] Call Trace: [ 665.709484][ C0] [ 665.712326][ C0] dump_stack_lvl+0x18c/0x250 [ 665.717016][ C0] ? show_regs_print_info+0x20/0x20 [ 665.722215][ C0] ? load_image+0x420/0x420 [ 665.726722][ C0] __might_resched+0x48d/0x5f0 [ 665.731490][ C0] ? __might_sleep+0xe0/0xe0 [ 665.736073][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 665.741960][ C0] ? _raw_spin_unlock+0x40/0x40 [ 665.746811][ C0] ? kasan_set_track+0x5f/0x70 [ 665.751575][ C0] ? kasan_save_free_info+0x28/0x40 [ 665.756771][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 665.762056][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 665.767689][ C0] __flush_work+0x10f/0xac0 [ 665.772195][ C0] ? flush_work+0x20/0x20 [ 665.776532][ C0] ? __timer_delete+0x6b/0x290 [ 665.781323][ C0] ? mark_lock+0x94/0x320 [ 665.785652][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 665.791626][ C0] ? mod_delayed_work_on+0x1c0/0x1c0 [ 665.796906][ C0] ? lock_chain_count+0x20/0x20 [ 665.801752][ C0] ? __cancel_work_timer+0x36e/0x560 [ 665.807039][ C0] __cancel_work_timer+0x3f8/0x560 [ 665.812148][ C0] ? cancel_work_sync+0x20/0x20 [ 665.816990][ C0] ? kobject_put+0x260/0x450 [ 665.821693][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 665.826727][ C0] ? kobject_put+0x421/0x450 [ 665.831316][ C0] mmc_free_host+0x19/0x30 [ 665.835732][ C0] call_timer_fn+0x189/0x540 [ 665.840323][ C0] ? kref_get+0x70/0x70 [ 665.844468][ C0] ? call_timer_fn+0xd2/0x540 [ 665.849139][ C0] ? __run_timers+0x810/0x810 [ 665.853814][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 665.859008][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 665.864208][ C0] ? kref_get+0x70/0x70 [ 665.868357][ C0] __run_timers+0x570/0x810 [ 665.872853][ C0] ? hrtimer_interrupt+0x55b/0x980 [ 665.877967][ C0] ? detach_timer+0x2b0/0x2b0 [ 665.882639][ C0] ? lock_chain_count+0x20/0x20 [ 665.887489][ C0] run_timer_softirq+0x67/0xf0 [ 665.892244][ C0] handle_softirqs+0x27d/0x820 [ 665.897011][ C0] ? do_softirq+0xfa/0x1a0 [ 665.901420][ C0] ? do_softirq+0x1a0/0x1a0 [ 665.905918][ C0] ? inet_csk_get_port+0x1345/0x1890 [ 665.911234][ C0] do_softirq+0xfa/0x1a0 [ 665.915469][ C0] [ 665.918402][ C0] [ 665.921335][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 665.926704][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 665.932685][ C0] ? rcu_is_watching+0x15/0xb0 [ 665.937459][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 665.942649][ C0] ? _local_bh_enable+0xa0/0xa0 [ 665.947499][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 665.952693][ C0] ? inet_csk_get_port+0x1345/0x1890 [ 665.957978][ C0] inet_csk_get_port+0x1345/0x1890 [ 665.963098][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 665.968117][ C0] ? __ipv6_chk_addr_and_flags+0xc3/0x6b0 [ 665.973838][ C0] ? __inet6_bind+0x440/0xf20 [ 665.978518][ C0] __inet6_bind+0x6b6/0xf20 [ 665.983024][ C0] __sys_bind+0x2f0/0x3f0 [ 665.987350][ C0] ? __ia32_sys_socketpair+0xb0/0xb0 [ 665.992645][ C0] __x64_sys_bind+0x7a/0x90 [ 665.997142][ C0] do_syscall_64+0x55/0xb0 [ 666.001558][ C0] ? clear_bhb_loop+0x40/0x90 [ 666.006234][ C0] ? clear_bhb_loop+0x40/0x90 [ 666.010909][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.016798][ C0] RIP: 0033:0x7f2bb639e159 [ 666.021212][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.040825][ C0] RSP: 002b:00007f2bb731f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 666.049325][ C0] RAX: ffffffffffffffda RBX: 00007f2bb6625fa0 RCX: 00007f2bb639e159 [ 666.057290][ C0] RDX: 000000000000004a RSI: 0000200000000280 RDI: 0000000000000003 [ 666.065253][ C0] RBP: 00007f2bb643506b R08: 0000000000000000 R09: 0000000000000000 [ 666.073219][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.081271][ C0] R13: 00007f2bb6626038 R14: 00007f2bb6625fa0 R15: 00007fff592c9438 [ 666.089247][ C0] [ 666.092529][ C0] [ 666.094866][ C0] ================================ [ 666.099973][ C0] WARNING: inconsistent lock state [ 666.105084][ C0] syzkaller #0 Tainted: G W [ 666.110986][ C0] -------------------------------- [ 666.116097][ C0] inconsistent {SOFTIRQ-ON-R} -> {IN-SOFTIRQ-W} usage. [ 666.122948][ C0] syz.6.3259/16357 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 666.129368][ C0] ffffffff8da25110 (wakeup_srcu){.+-+}-{0:0}, at: __synchronize_srcu+0xae/0x3d0 [ 666.138401][ C0] {SOFTIRQ-ON-R} state was registered at: [ 666.144107][ C0] lock_acquire+0x19e/0x420 [ 666.148690][ C0] pm_print_active_wakeup_sources+0x5d/0x310 [ 666.154800][ C0] pm_get_wakeup_count+0x1cf/0x300 [ 666.159989][ C0] wakeup_count_show+0x86/0xf0 [ 666.164830][ C0] sysfs_kf_seq_show+0x34d/0x4c0 [ 666.169888][ C0] seq_read_iter+0x464/0xc50 [ 666.174549][ C0] vfs_read+0x486/0x990 [ 666.178784][ C0] ksys_read+0x151/0x260 [ 666.183103][ C0] do_syscall_64+0x55/0xb0 [ 666.187612][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.193589][ C0] irq event stamp: 408 [ 666.197637][ C0] hardirqs last enabled at (408): [] _raw_spin_unlock_irqrestore+0x86/0x120 [ 666.207965][ C0] hardirqs last disabled at (407): [] _raw_spin_lock_irqsave+0x8f/0x100 [ 666.217866][ C0] softirqs last enabled at (168): [] inet_csk_get_port+0x1345/0x1890 [ 666.227598][ C0] softirqs last disabled at (169): [] do_softirq+0xfa/0x1a0 [ 666.236445][ C0] [ 666.236445][ C0] other info that might help us debug this: [ 666.244490][ C0] Possible unsafe locking scenario: [ 666.244490][ C0] [ 666.251924][ C0] CPU0 [ 666.255190][ C0] ---- [ 666.258456][ C0] lock(wakeup_srcu); [ 666.262517][ C0] [ 666.265956][ C0] lock(wakeup_srcu); [ 666.270189][ C0] [ 666.270189][ C0] *** DEADLOCK *** [ 666.270189][ C0] [ 666.278317][ C0] 2 locks held by syz.6.3259/16357: [ 666.283497][ C0] #0: ffff88805daf1b30 (sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x300/0xf20 [ 666.292983][ C0] #1: ffffc90000007c80 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 666.303415][ C0] [ 666.303415][ C0] stack backtrace: [ 666.309290][ C0] CPU: 0 PID: 16357 Comm: syz.6.3259 Tainted: G W syzkaller #0 [ 666.318212][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.328266][ C0] Call Trace: [ 666.331539][ C0] [ 666.334375][ C0] dump_stack_lvl+0x18c/0x250 [ 666.339051][ C0] ? show_regs_print_info+0x20/0x20 [ 666.344247][ C0] ? __kernel_text_address+0xd/0x30 [ 666.349444][ C0] ? unwind_get_return_address+0x91/0xc0 [ 666.355095][ C0] valid_state+0x13b/0x1d0 [ 666.359508][ C0] mark_lock_irq+0xd3/0x900 [ 666.364005][ C0] ? stack_trace_save+0xaa/0x100 [ 666.368936][ C0] ? save_trace+0xcd0/0xcd0 [ 666.373437][ C0] ? save_trace+0x5d/0xcd0 [ 666.377853][ C0] ? print_deadlock_bug+0x5d0/0x5d0 [ 666.383045][ C0] mark_lock+0x208/0x320 [ 666.387284][ C0] __lock_acquire+0xcfc/0x7d80 [ 666.392051][ C0] ? verify_lock_unused+0x140/0x140 [ 666.397243][ C0] ? verify_lock_unused+0x140/0x140 [ 666.402441][ C0] lock_sync+0x155/0x290 [ 666.406675][ C0] ? __synchronize_srcu+0xae/0x3d0 [ 666.411779][ C0] ? __synchronize_srcu+0xae/0x3d0 [ 666.416885][ C0] ? lock_release+0x8c0/0x8c0 [ 666.421553][ C0] ? mark_lock+0x94/0x320 [ 666.425875][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 666.431847][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 666.436867][ C0] __synchronize_srcu+0xc2/0x3d0 [ 666.441798][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 666.447688][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 666.453406][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 666.459313][ C0] ? _raw_spin_unlock+0x40/0x40 [ 666.464166][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 666.470051][ C0] ? read_tsc+0x9/0x20 [ 666.474115][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 666.479656][ C0] ? synchronize_srcu+0x25a/0x280 [ 666.484679][ C0] wakeup_source_unregister+0x116/0x190 [ 666.490221][ C0] mmc_host_classdev_release+0x47/0x100 [ 666.495767][ C0] ? mmc_free_host+0x30/0x30 [ 666.500351][ C0] device_release+0xbc/0x1e0 [ 666.504936][ C0] kobject_put+0x21b/0x450 [ 666.509357][ C0] call_timer_fn+0x189/0x540 [ 666.513940][ C0] ? kref_get+0x70/0x70 [ 666.518085][ C0] ? call_timer_fn+0xd2/0x540 [ 666.522755][ C0] ? __run_timers+0x810/0x810 [ 666.527425][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.532629][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 666.537829][ C0] ? kref_get+0x70/0x70 [ 666.541981][ C0] __run_timers+0x570/0x810 [ 666.546475][ C0] ? hrtimer_interrupt+0x55b/0x980 [ 666.551583][ C0] ? detach_timer+0x2b0/0x2b0 [ 666.556259][ C0] ? lock_chain_count+0x20/0x20 [ 666.561123][ C0] run_timer_softirq+0x67/0xf0 [ 666.565891][ C0] handle_softirqs+0x27d/0x820 [ 666.570670][ C0] ? do_softirq+0xfa/0x1a0 [ 666.575092][ C0] ? do_softirq+0x1a0/0x1a0 [ 666.579597][ C0] ? inet_csk_get_port+0x1345/0x1890 [ 666.584884][ C0] do_softirq+0xfa/0x1a0 [ 666.589119][ C0] [ 666.592061][ C0] [ 666.595026][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 666.600409][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 666.606389][ C0] ? rcu_is_watching+0x15/0xb0 [ 666.611150][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 666.616343][ C0] ? _local_bh_enable+0xa0/0xa0 [ 666.621185][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 666.626381][ C0] ? inet_csk_get_port+0x1345/0x1890 [ 666.631666][ C0] inet_csk_get_port+0x1345/0x1890 [ 666.636784][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 666.641802][ C0] ? __ipv6_chk_addr_and_flags+0xc3/0x6b0 [ 666.647519][ C0] ? __inet6_bind+0x440/0xf20 [ 666.652196][ C0] __inet6_bind+0x6b6/0xf20 [ 666.656702][ C0] __sys_bind+0x2f0/0x3f0 [ 666.661035][ C0] ? __ia32_sys_socketpair+0xb0/0xb0 [ 666.666328][ C0] __x64_sys_bind+0x7a/0x90 [ 666.670829][ C0] do_syscall_64+0x55/0xb0 [ 666.675249][ C0] ? clear_bhb_loop+0x40/0x90 [ 666.679926][ C0] ? clear_bhb_loop+0x40/0x90 [ 666.684601][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.690492][ C0] RIP: 0033:0x7f2bb639e159 [ 666.694897][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.714496][ C0] RSP: 002b:00007f2bb731f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 666.722903][ C0] RAX: ffffffffffffffda RBX: 00007f2bb6625fa0 RCX: 00007f2bb639e159 [ 666.730868][ C0] RDX: 000000000000004a RSI: 0000200000000280 RDI: 0000000000000003 [ 666.738834][ C0] RBP: 00007f2bb643506b R08: 0000000000000000 R09: 0000000000000000 [ 666.746886][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.754849][ C0] R13: 00007f2bb6626038 R14: 00007f2bb6625fa0 R15: 00007fff592c9438 [ 666.762817][ C0] [ 666.765881][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1381 [ 666.770070][ T5814] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 666.775191][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16357, name: syz.6.3259 [ 666.791891][ C0] preempt_count: 101, expected: 0 [ 666.796979][ C0] RCU nest depth: 0, expected: 0 [ 666.801928][ C0] INFO: lockdep is turned off. [ 666.806744][ C0] Preemption disabled at: [ 666.806755][ C0] [<0000000000000000>] 0x0 [ 666.815535][ C0] CPU: 0 PID: 16357 Comm: syz.6.3259 Tainted: G W syzkaller #0 [ 666.824485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.834557][ C0] Call Trace: [ 666.837848][ C0] [ 666.840714][ C0] dump_stack_lvl+0x18c/0x250 [ 666.845421][ C0] ? show_regs_print_info+0x20/0x20 [ 666.850648][ C0] ? load_image+0x420/0x420 [ 666.855186][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 666.861382][ C0] __might_resched+0x48d/0x5f0 [ 666.866177][ C0] ? __might_sleep+0xe0/0xe0 [ 666.870791][ C0] ? lock_release+0x8c0/0x8c0 [ 666.875491][ C0] ? mark_lock+0x94/0x320 [ 666.879853][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 666.885860][ C0] __synchronize_srcu+0x197/0x3d0 [ 666.890909][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 666.896821][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 666.902567][ C0] ? read_tsc+0x9/0x20 [ 666.906654][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 666.912222][ C0] ? synchronize_srcu+0x25a/0x280 [ 666.917270][ C0] wakeup_source_unregister+0x116/0x190 [ 666.922828][ C0] mmc_host_classdev_release+0x47/0x100 [ 666.928372][ C0] ? mmc_free_host+0x30/0x30 [ 666.932968][ C0] device_release+0xbc/0x1e0 [ 666.937588][ C0] kobject_put+0x21b/0x450 [ 666.942028][ C0] call_timer_fn+0x189/0x540 [ 666.946618][ C0] ? kref_get+0x70/0x70 [ 666.950763][ C0] ? call_timer_fn+0xd2/0x540 [ 666.955427][ C0] ? __run_timers+0x810/0x810 [ 666.960090][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.965305][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 666.970491][ C0] ? kref_get+0x70/0x70 [ 666.974633][ C0] __run_timers+0x570/0x810 [ 666.979141][ C0] ? hrtimer_interrupt+0x55b/0x980 [ 666.984247][ C0] ? detach_timer+0x2b0/0x2b0 [ 666.988911][ C0] ? lock_chain_count+0x20/0x20 [ 666.993745][ C0] run_timer_softirq+0x67/0xf0 [ 666.998498][ C0] handle_softirqs+0x27d/0x820 [ 667.003249][ C0] ? do_softirq+0xfa/0x1a0 [ 667.007651][ C0] ? do_softirq+0x1a0/0x1a0 [ 667.012138][ C0] ? inet_csk_get_port+0x1345/0x1890 [ 667.017442][ C0] do_softirq+0xfa/0x1a0 [ 667.021692][ C0] [ 667.024622][ C0] [ 667.026680][ T5814] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 667.027544][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 667.040639][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 667.041885][ T5814] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 667.046633][ C0] ? rcu_is_watching+0x15/0xb0 [ 667.046665][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 667.046686][ C0] ? _local_bh_enable+0xa0/0xa0 [ 667.046702][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 667.046725][ C0] ? inet_csk_get_port+0x1345/0x1890 [ 667.046752][ C0] inet_csk_get_port+0x1345/0x1890 [ 667.046781][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 667.046802][ C0] ? __ipv6_chk_addr_and_flags+0xc3/0x6b0 [ 667.046825][ C0] ? __inet6_bind+0x440/0xf20 [ 667.046852][ C0] __inet6_bind+0x6b6/0xf20 [ 667.046882][ C0] __sys_bind+0x2f0/0x3f0 [ 667.046904][ C0] ? __ia32_sys_socketpair+0xb0/0xb0 [ 667.046936][ C0] __x64_sys_bind+0x7a/0x90 [ 667.046957][ C0] do_syscall_64+0x55/0xb0 [ 667.046981][ C0] ? clear_bhb_loop+0x40/0x90 [ 667.047007][ C0] ? clear_bhb_loop+0x40/0x90 [ 667.047032][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.047058][ C0] RIP: 0033:0x7f2bb639e159 [ 667.047075][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.047091][ C0] RSP: 002b:00007f2bb731f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 667.047120][ C0] RAX: ffffffffffffffda RBX: 00007f2bb6625fa0 RCX: 00007f2bb639e159 [ 667.047135][ C0] RDX: 000000000000004a RSI: 0000200000000280 RDI: 0000000000000003 [ 667.047147][ C0] RBP: 00007f2bb643506b R08: 0000000000000000 R09: 0000000000000000 [ 667.047159][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.047170][ C0] R13: 00007f2bb6626038 R14: 00007f2bb6625fa0 R15: 00007fff592c9438 [ 667.047191][ C0] [ 667.047238][ C0] ODEBUG: object ffffc90000007a60 is NOT on stack ffffc90003360000, but annotated. [ 667.047681][ C0] ------------[ cut here ]------------ [ 667.062307][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.066324][ C0] WARNING: CPU: 0 PID: 16357 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 667.066367][ C0] Modules linked in: [ 667.084171][ T5814] usb 5-1: config 0 descriptor?? [ 667.086701][ C0] [ 667.086710][ C0] CPU: 0 PID: 16357 Comm: syz.6.3259 Tainted: G W syzkaller #0 [ 667.086729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.086739][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 667.102739][ T5814] pwc: Creative Labs Webcam Pro Ex detected. [ 667.106619][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 2f 5b 25 13 48 c7 c1 40 44 1d 8b 48 c7 c7 a0 44 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 33 98 4a 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 667.106639][ C0] RSP: 0018:ffffc900000079c8 EFLAGS: 00010046 [ 667.106653][ C0] RAX: 0000000000000050 RBX: ffffc90000007a60 RCX: d5e162bad734d700 [ 667.106666][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 667.106676][ C0] RBP: dffffc0000000000 R08: ffffffff8d126383 R09: 1ffffffff1a24c70 [ 667.106689][ C0] R10: dffffc0000000000 R11: fffffbfff1a24c71 R12: ffff888027f4bc20 [ 667.106700][ C0] R13: ffff8880259707e0 R14: 0000000000000001 R15: ffffffff8acbe000 [ 667.106713][ C0] FS: 00007f2bb731f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 667.112680][ T5814] pwc: Warning: more than 1 configuration available. [ 667.116282][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.116298][ C0] CR2: 0000001b30223ffc CR3: 0000000049540000 CR4: 00000000003506f0 [ 667.116313][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 667.116325][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 667.314362][ T5814] pwc: Failed to set LED on/off time (-71) [ 667.315472][ C0] Call Trace: [ 667.315482][ C0] [ 667.315492][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 667.326516][ T5814] pwc: send_video_command error -71 [ 667.331416][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 667.340792][ T5814] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 667.347412][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 667.347447][ C0] ? read_tsc+0x9/0x20 [ 667.357498][ T5814] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 667.364309][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 667.379271][ T5814] usb 5-1: USB disconnect, device number 5 [ 667.385527][ C0] ? synchronize_srcu+0x25a/0x280 [ 667.385559][ C0] wakeup_source_unregister+0x116/0x190 [ 667.385584][ C0] mmc_host_classdev_release+0x47/0x100 [ 667.481020][ C0] ? mmc_free_host+0x30/0x30 [ 667.485602][ C0] device_release+0xbc/0x1e0 [ 667.490183][ C0] kobject_put+0x21b/0x450 [ 667.494585][ C0] call_timer_fn+0x189/0x540 [ 667.499200][ C0] ? kref_get+0x70/0x70 [ 667.503353][ C0] ? call_timer_fn+0xd2/0x540 [ 667.508049][ C0] ? __run_timers+0x810/0x810 [ 667.512725][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.517930][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 667.523150][ C0] ? kref_get+0x70/0x70 [ 667.527326][ C0] __run_timers+0x570/0x810 [ 667.531851][ C0] ? hrtimer_interrupt+0x55b/0x980 [ 667.536991][ C0] ? detach_timer+0x2b0/0x2b0 [ 667.541689][ C0] ? lock_chain_count+0x20/0x20 [ 667.546561][ C0] run_timer_softirq+0x67/0xf0 [ 667.551344][ C0] handle_softirqs+0x27d/0x820 [ 667.556130][ C0] ? do_softirq+0xfa/0x1a0 [ 667.560575][ C0] ? do_softirq+0x1a0/0x1a0 [ 667.565107][ C0] ? inet_csk_get_port+0x1345/0x1890 [ 667.570436][ C0] do_softirq+0xfa/0x1a0 [ 667.574696][ C0] [ 667.577615][ C0] [ 667.580532][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 667.585899][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 667.591868][ C0] ? rcu_is_watching+0x15/0xb0 [ 667.596622][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 667.601808][ C0] ? _local_bh_enable+0xa0/0xa0 [ 667.606645][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 667.611833][ C0] ? inet_csk_get_port+0x1345/0x1890 [ 667.617114][ C0] inet_csk_get_port+0x1345/0x1890 [ 667.622237][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 667.627261][ C0] ? __ipv6_chk_addr_and_flags+0xc3/0x6b0 [ 667.632967][ C0] ? __inet6_bind+0x440/0xf20 [ 667.637638][ C0] __inet6_bind+0x6b6/0xf20 [ 667.642138][ C0] __sys_bind+0x2f0/0x3f0 [ 667.646460][ C0] ? __ia32_sys_socketpair+0xb0/0xb0 [ 667.651736][ C0] __x64_sys_bind+0x7a/0x90 [ 667.656243][ C0] do_syscall_64+0x55/0xb0 [ 667.660654][ C0] ? clear_bhb_loop+0x40/0x90 [ 667.665321][ C0] ? clear_bhb_loop+0x40/0x90 [ 667.669989][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.675880][ C0] RIP: 0033:0x7f2bb639e159 [ 667.680280][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.699875][ C0] RSP: 002b:00007f2bb731f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 667.708311][ C0] RAX: ffffffffffffffda RBX: 00007f2bb6625fa0 RCX: 00007f2bb639e159 [ 667.716272][ C0] RDX: 000000000000004a RSI: 0000200000000280 RDI: 0000000000000003 [ 667.724231][ C0] RBP: 00007f2bb643506b R08: 0000000000000000 R09: 0000000000000000 [ 667.732186][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.740144][ C0] R13: 00007f2bb6626038 R14: 00007f2bb6625fa0 R15: 00007fff592c9438 [ 667.748113][ C0] [ 667.751118][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 667.758382][ C0] CPU: 0 PID: 16357 Comm: syz.6.3259 Tainted: G W syzkaller #0 [ 667.767306][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.777357][ C0] Call Trace: [ 667.780636][ C0] [ 667.783470][ C0] dump_stack_lvl+0x18c/0x250 [ 667.788143][ C0] ? show_regs_print_info+0x20/0x20 [ 667.793330][ C0] ? load_image+0x420/0x420 [ 667.797820][ C0] panic+0x2ca/0x720 [ 667.801707][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 667.806207][ C0] __warn+0x2e0/0x470 [ 667.810178][ C0] ? __debug_object_init+0x18d/0x450 [ 667.815457][ C0] ? __debug_object_init+0x18d/0x450 [ 667.820749][ C0] report_bug+0x2be/0x4f0 [ 667.825108][ C0] ? __debug_object_init+0x18d/0x450 [ 667.830385][ C0] ? __debug_object_init+0x18d/0x450 [ 667.835666][ C0] ? __debug_object_init+0x18f/0x450 [ 667.840938][ C0] handle_bug+0xcf/0x120 [ 667.845172][ C0] exc_invalid_op+0x1a/0x50 [ 667.849680][ C0] asm_exc_invalid_op+0x1a/0x20 [ 667.854537][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 667.860421][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 2f 5b 25 13 48 c7 c1 40 44 1d 8b 48 c7 c7 a0 44 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 33 98 4a 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 667.880018][ C0] RSP: 0018:ffffc900000079c8 EFLAGS: 00010046 [ 667.886071][ C0] RAX: 0000000000000050 RBX: ffffc90000007a60 RCX: d5e162bad734d700 [ 667.894029][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 667.901985][ C0] RBP: dffffc0000000000 R08: ffffffff8d126383 R09: 1ffffffff1a24c70 [ 667.905160][ T5814] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 667.917387][ C0] R10: dffffc0000000000 R11: fffffbfff1a24c71 R12: ffff888027f4bc20 [ 667.925370][ C0] R13: ffff8880259707e0 R14: 0000000000000001 R15: ffffffff8acbe000 [ 667.933350][ C0] ? __debug_object_init+0x18d/0x450 [ 667.938638][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 667.943653][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 667.949533][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 667.955252][ C0] ? read_tsc+0x9/0x20 [ 667.959309][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 667.964839][ C0] ? synchronize_srcu+0x25a/0x280 [ 667.969857][ C0] wakeup_source_unregister+0x116/0x190 [ 667.975394][ C0] mmc_host_classdev_release+0x47/0x100 [ 667.980928][ C0] ? mmc_free_host+0x30/0x30 [ 667.985504][ C0] device_release+0xbc/0x1e0 [ 667.990083][ C0] kobject_put+0x21b/0x450 [ 667.994490][ C0] call_timer_fn+0x189/0x540 [ 667.999064][ C0] ? kref_get+0x70/0x70 [ 668.003232][ C0] ? call_timer_fn+0xd2/0x540 [ 668.007894][ C0] ? __run_timers+0x810/0x810 [ 668.012569][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.017769][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 668.022950][ C0] ? kref_get+0x70/0x70 [ 668.027086][ C0] __run_timers+0x570/0x810 [ 668.031571][ C0] ? hrtimer_interrupt+0x55b/0x980 [ 668.036667][ C0] ? detach_timer+0x2b0/0x2b0 [ 668.041326][ C0] ? lock_chain_count+0x20/0x20 [ 668.046161][ C0] run_timer_softirq+0x67/0xf0 [ 668.050912][ C0] handle_softirqs+0x27d/0x820 [ 668.055674][ C0] ? do_softirq+0xfa/0x1a0 [ 668.060097][ C0] ? do_softirq+0x1a0/0x1a0 [ 668.064594][ C0] ? inet_csk_get_port+0x1345/0x1890 [ 668.069904][ C0] do_softirq+0xfa/0x1a0 [ 668.074133][ C0] [ 668.077051][ C0] [ 668.079964][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 668.085320][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 668.091287][ C0] ? rcu_is_watching+0x15/0xb0 [ 668.096067][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 668.101266][ C0] ? _local_bh_enable+0xa0/0xa0 [ 668.106105][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 668.111295][ C0] ? inet_csk_get_port+0x1345/0x1890 [ 668.116581][ C0] inet_csk_get_port+0x1345/0x1890 [ 668.121684][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 668.126697][ C0] ? __ipv6_chk_addr_and_flags+0xc3/0x6b0 [ 668.132408][ C0] ? __inet6_bind+0x440/0xf20 [ 668.137080][ C0] __inet6_bind+0x6b6/0xf20 [ 668.141572][ C0] __sys_bind+0x2f0/0x3f0 [ 668.145890][ C0] ? __ia32_sys_socketpair+0xb0/0xb0 [ 668.151192][ C0] __x64_sys_bind+0x7a/0x90 [ 668.155698][ C0] do_syscall_64+0x55/0xb0 [ 668.155780][ T5814] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 668.164552][ T5814] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 668.164576][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.173749][ T5814] usb 5-1: config 0 descriptor?? [ 668.176894][ T5814] pwc: Creative Labs Webcam Pro Ex detected. [ 668.176904][ T5814] pwc: Warning: more than 1 configuration available. [ 668.202345][ C0] ? clear_bhb_loop+0x40/0x90 [ 668.207029][ C0] ? clear_bhb_loop+0x40/0x90 [ 668.211735][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.217634][ C0] RIP: 0033:0x7f2bb639e159 [ 668.222059][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.241683][ C0] RSP: 002b:00007f2bb731f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 668.250105][ C0] RAX: ffffffffffffffda RBX: 00007f2bb6625fa0 RCX: 00007f2bb639e159 [ 668.258088][ C0] RDX: 000000000000004a RSI: 0000200000000280 RDI: 0000000000000003 [ 668.266062][ C0] RBP: 00007f2bb643506b R08: 0000000000000000 R09: 0000000000000000 [ 668.274042][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.282020][ C0] R13: 00007f2bb6626038 R14: 00007f2bb6625fa0 R15: 00007fff592c9438 [ 668.290004][ C0] [ 668.293271][ C0] Kernel Offset: disabled [ 668.297592][ C0] Rebooting in 86400 seconds..