last executing test programs: 5m55.945522606s ago: executing program 2 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc0145b0e, &(0x7f0000000040)={0x100004, 0x0, 0xff, 0x9, 0x3, 0xfffffffe}) close_range(r3, 0xffffffffffffffff, 0x0) 5m52.228822616s ago: executing program 2 (id=231): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000002b00)={0x6, 0x4}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0xfea000, 0x2000402) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x7ff, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x4080, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x40000041, 0xc3d, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x7, 0x5, 0x79, 0x3, 0x2], 0x3332d000}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xa, 0x5, 0x0, 0x5, 0x1, 0x2, 0x9, 0xff, 0xf6, 0x5, 0x9, 0x0, 0x1, 0x5, 0x1, 0x2, 0x4, 0xff, '\x00', 0xdc, 0xe8}) 5m49.124377475s ago: executing program 2 (id=236): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) landlock_create_ruleset(&(0x7f0000000040)={0x12488, 0x18c2aa08ad1b6765}, 0x18, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x403, 0x0, 0x106}}, 0x20) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x1f0, 0x0, 0x3, [{{0x4, 0x3, 0x7fffffff, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0x46a1, 0x6, 0x0, 0x6, 0x1, 0xa, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x7, 0x0, 0x4, 0x0, 0xfff, 0xf4, {0x4, 0x7, 0x7, 0xfffffffffffffff9, 0x0, 0x80000000, 0x8, 0x806, 0x5, 0xa000, 0x33c1bc78, 0x0, r4, 0x1fd}}, {0x6, 0xe6, 0x2, 0x7, 'fd'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x5, 0x7, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r3, r4, 0x1, 0x1}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfdff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x94}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x40c0080) 5m46.956571594s ago: executing program 2 (id=241): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x110, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, r0, r0, 0x7}) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff, 0x5}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xfffff) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x15, 0x0, 0x1, 0xfffffffc}, {0x6, 0xff, 0x0, 0x7fff0000}]}) 5m44.018704099s ago: executing program 2 (id=243): socket$inet6(0xa, 0x2, 0xea60) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000000c0), 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(0xffffffffffffffff) 5m42.016304513s ago: executing program 2 (id=246): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket(0x28, 0x801, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x7, 0x28011, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) 5m26.17654424s ago: executing program 32 (id=246): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket(0x28, 0x801, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x7, 0x28011, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) 1m44.22232104s ago: executing program 0 (id=576): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000010100a716f458867d7f961f7b8b0003"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1m40.419327211s ago: executing program 0 (id=580): geteuid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x2c0, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r4, r5, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x20000003, 0x2, 0x401, 0x9, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x4, r4, r5, 0x4, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x4, '&+%*!\xeb(^-@\x00'}}, {{0x3, 0x3, 0x10001, 0x200, 0xfefffc5b, 0x8, {0x0, 0x5, 0xedd, 0xff, 0x0, 0x4, 0xfff, 0x0, 0xb, 0xa000, 0xf8e8, 0x0, r5, 0x8}}, {0x1, 0x1, 0x1, 0x20, '\x00'}}, {{0x4, 0x0, 0x800, 0x3, 0x0, 0x96, {0x6, 0x1, 0x5, 0x8, 0x8000, 0x3, 0x7, 0x9, 0x9, 0x4000, 0x2, 0x0, r5, 0x5, 0x1}}, {0x4, 0x0, 0x2, 0x9, 'fd'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) 1m39.124335453s ago: executing program 0 (id=581): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000680)={0x800100, 0x2, 0x7fffffff, 0x5, 0x6, 0xfffffff2}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 1m37.33700481s ago: executing program 0 (id=582): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0xa) quotactl$Q_GETQUOTA(0x0, &(0x7f00000010c0)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 1m34.522331231s ago: executing program 0 (id=585): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000680)={0x800100, 0x2, 0x7fffffff, 0x5, 0x6, 0xfffffff2}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 1m24.802017512s ago: executing program 0 (id=603): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1m9.416966365s ago: executing program 33 (id=603): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 34.041202989s ago: executing program 1 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socket(0x2c, 0x3, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=@newlink={0x20, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 27.266142206s ago: executing program 1 (id=641): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x14) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x46d, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0xa22, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'rmd160-generic\x00'}, 0x0, 0xc0}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) 25.014462708s ago: executing program 1 (id=642): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 25.010918538s ago: executing program 4 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000800) socket$alg(0x26, 0x5, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x78) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x488d0) 23.144533538s ago: executing program 4 (id=644): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@dioread_lock}, {@data_err_abort}, {@dax_never}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@discard}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000890, &(0x7f0000000300)={[{@test_dummy_encryption}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@errors_continue}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) getrlimit(0x9, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(r3, 0x0, 0x82) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x7) syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 23.040041551s ago: executing program 3 (id=645): timer_gettime(0x0, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) socket(0x10, 0x80002, 0x2) r0 = socket$inet6(0xa, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r3 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000fefffffb0000000008000000850000002200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/64, 0x40}, 0x3}], 0x1, 0x40010163, 0x0) 19.673342999s ago: executing program 5 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xfffffffe}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 18.046698261s ago: executing program 5 (id=648): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) shutdown(r4, 0x0) syz_open_procfs$namespace(0x0, 0x0) 16.233493989s ago: executing program 5 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd14", 0x10, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x3}}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r4, 0x25, 0x0, @val=@perf_event}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0xc6107700, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12.592926146s ago: executing program 4 (id=650): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0xa, 0x300) fsopen(&(0x7f0000000400)='pstore\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') syz_fuse_handle_req(r4, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000000)=""/183) ioctl$KDSIGACCEPT(r5, 0x5607, 0x4) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r6, 0x7c80, 0x0) open_by_handle_at(r6, &(0x7f0000000000)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x278, 0x0, 0x656}, 0x3}}, 0xa00) 12.429333331s ago: executing program 3 (id=651): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x180c858, &(0x7f0000000600)={[{@rodir}, {@shortname_winnt}, {@numtail}, {@numtail}, {@utf8}, {@utf8no}, {@numtail}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@fat=@sys_immutable}, {@fat=@fmask={'fmask', 0x3d, 0xdf7}}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@shortname_mixed}, {@nonumtail}]}, 0x1, 0x371, &(0x7f0000000200)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = io_uring_setup(0x6ddc, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x195a420, &(0x7f0000000340)={[{@gid}, {}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) r5 = socket(0x10, 0x3, 0x0) fgetxattr(r5, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/107, 0x6b) 11.323246317s ago: executing program 4 (id=652): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x1001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048800, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 11.265083599s ago: executing program 3 (id=653): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = syz_usb_connect$hid(0x0, 0xe, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4d9, 0xa070, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3c, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xac3, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xa, 0xcd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x7, 0x28, {0x28, 0x31, "f70ba3810300000000000028adf4615a15970bb30d54f365c5c93f0808251f00000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x106f) r8 = socket$unix(0x1, 0x5, 0x0) connect$unix(r8, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r5, 0x0, 0x0, 0x80800) 11.251089159s ago: executing program 1 (id=654): syz_emit_ethernet(0x1e, &(0x7f0000000000)={@remote, @broadcast, @void, {@can={0xc, {{0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "042817c644f84e53"}}}}, 0x0) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)=0x2) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="4ede09a60c2664517ab8fbfe7fee08c7de2c047a87bda78445a195ff1ab296331205d618359d9932ee536be15babde5c28da1537e179ab4c2b858845c3ed03e70372340c82f317c1fe675988d71cd9d978969239e41c3a917505ff6b31de3c220515c518d91196c1c05a49739e4c4ef2ef98ac9b4c106bb48e50eb7fb7c19a2e9446fe704c604aec7fd77531857254fc539fac8377791cc1cc254cfc4d01f8f3955ec66d6005162b7e9f6a587fbd75a600000000"], 0xb4) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147441, 0x94) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'udf\x00', 0x3a, 'udf\x00', 0x3a, './file1'}, 0x2f) msgget(0x1, 0x501) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 9.503173925s ago: executing program 4 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = timerfd_create(0x9, 0x80800) timerfd_settime(r2, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000002c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000019300), 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xeb, &(0x7f0000019380)=ANY=[], 0x0) getpgrp(0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)) close(0x3) 7.301176146s ago: executing program 1 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(= \x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2538000000", @ANYRES32=r9, @ANYBLOB="0c0058000100"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5.441882165s ago: executing program 5 (id=657): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 5.341946408s ago: executing program 3 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x483) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x80000) epoll_wait(r5, &(0x7f0000000340), 0x0, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0xa0000001}) utimes(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.334008169s ago: executing program 1 (id=659): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000fefffffb0000000008000000850000002200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/64, 0x40}, 0x3}], 0x1, 0x40010163, 0x0) 4.322394261s ago: executing program 5 (id=660): syz_open_dev$loop(0x0, 0x7, 0x10c062) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) madvise(&(0x7f00003f8000/0x1000)=nil, 0x1000, 0x64) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.281986556s ago: executing program 5 (id=661): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @loopback, 0x5}, 0x1c) sched_getparam(r0, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x400001ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv4=@loopback, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x12}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 1.034949256s ago: executing program 4 (id=662): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r4, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x40, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 0s ago: executing program 3 (id=663): close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) listen(0xffffffffffffffff, 0x7fff) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x1e, &(0x7f0000000000), 0x30, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r1], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x1, r4, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x7) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0x2000, 0x118000}) kernel console output (not intermixed with test programs): 65.451585][ T6411] loop0: detected capacity change from 0 to 512 [ 166.253150][ T6411] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.127: iget: bad i_size value: 38620345925642 [ 166.380300][ T6411] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.127: couldn't read orphan inode 15 (err -117) [ 166.406419][ T6411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.769846][ T6376] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 167.573351][ T6456] loop2: detected capacity change from 0 to 32768 [ 167.730925][ T6461] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.127: bg 0: block 5: invalid block bitmap [ 168.116219][ T6456] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 168.127334][ T6456] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 168.159551][ T6461] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 352 with error 117 [ 168.179957][ T6456] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 168.224368][ T6461] EXT4-fs (loop0): This should not happen!! Data will be lost [ 168.224368][ T6461] [ 168.261877][ T6027] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 168.274423][ T6027] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 168.498693][ T6027] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 224ms [ 168.549934][ T6027] gfs2: fsid=syz:syz.0: jid=0: Done [ 168.556719][ T6456] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 168.771839][ T6456] gfs2: fsid=syz:syz.0: found 1 quota changes [ 169.082285][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.956024][ T5781] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 169.956024][ T5781] inode = 11 2339 [ 169.956024][ T5781] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 169.990123][ T5781] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 169.999436][ T5781] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5781 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 170.295991][ T5781] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 170.430026][ T5781] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 170.776180][ T5781] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 170.819835][ T5781] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 170.877743][ T5781] gfs2: fsid=syz:syz.0: File system withdrawn [ 170.920400][ T5781] CPU: 0 PID: 5781 Comm: syz-executor Not tainted syzkaller #0 [ 170.928038][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.938175][ T5781] Call Trace: [ 170.941513][ T5781] [ 170.942519][ T6509] loop3: detected capacity change from 0 to 32768 [ 170.944468][ T5781] dump_stack_lvl+0x18c/0x250 [ 170.955674][ T5781] ? kobject_uevent_env+0x363/0x8b0 [ 170.960999][ T5781] ? show_regs_print_info+0x20/0x20 [ 170.966262][ T5781] ? load_image+0x420/0x420 [ 170.970822][ T5781] ? kobject_uevent_env+0x363/0x8b0 [ 170.976101][ T5781] gfs2_withdraw+0xb24/0x13d0 [ 170.980860][ T5781] ? gfs2_lm+0x240/0x240 [ 170.985172][ T5781] ? gfs2_consist_inode_i+0xf5/0x110 [ 170.990521][ T5781] gfs2_inode_refresh+0xc50/0x1160 [ 170.995699][ T5781] ? gfs2_inode_metasync+0xf0/0xf0 [ 171.000872][ T5781] ? gfs2_glock_nq+0xd4f/0x1420 [ 171.005795][ T5781] gfs2_instantiate+0x162/0x220 [ 171.010744][ T5781] gfs2_glock_wait+0x1d4/0x2a0 [ 171.015579][ T5781] do_sync+0x4c6/0xe50 [ 171.019792][ T5781] ? gfs2_quota_sync+0x411/0x5a0 [ 171.024799][ T5781] ? bh_get+0x760/0x760 [ 171.029026][ T5781] ? __lock_acquire+0x7d40/0x7d40 [ 171.034101][ T5781] ? do_raw_spin_lock+0x11f/0x2c0 [ 171.039191][ T5781] ? gfs2_quota_sync+0x411/0x5a0 [ 171.044190][ T5781] ? do_raw_spin_unlock+0x121/0x230 [ 171.049459][ T5781] gfs2_quota_sync+0x411/0x5a0 [ 171.054318][ T5781] gfs2_sync_fs+0x4c/0xb0 [ 171.058781][ T5781] sync_filesystem+0xea/0x220 [ 171.063517][ T5781] generic_shutdown_super+0x6f/0x2b0 [ 171.068865][ T5781] kill_block_super+0x44/0x90 [ 171.073604][ T5781] deactivate_locked_super+0x97/0x100 [ 171.079031][ T5781] cleanup_mnt+0x43b/0x4d0 [ 171.083510][ T5781] task_work_run+0x1d4/0x260 [ 171.088168][ T5781] ? task_work_cancel+0x220/0x220 [ 171.093273][ T5781] ? exit_to_user_mode_loop+0x3b/0x110 [ 171.098792][ T5781] exit_to_user_mode_loop+0xe6/0x110 [ 171.104137][ T5781] exit_to_user_mode_prepare+0xee/0x180 [ 171.109743][ T5781] syscall_exit_to_user_mode+0x1a/0x50 [ 171.115260][ T5781] do_syscall_64+0x61/0xb0 [ 171.119732][ T5781] ? clear_bhb_loop+0x40/0x90 [ 171.124457][ T5781] ? clear_bhb_loop+0x40/0x90 [ 171.129184][ T5781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.135137][ T5781] RIP: 0033:0x7f977459e097 [ 171.139621][ T5781] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 171.159291][ T5781] RSP: 002b:00007ffc51fb8db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 171.167948][ T5781] RAX: 0000000000000000 RBX: 00007f97746321ca RCX: 00007f977459e097 [ 171.175971][ T5781] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc51fb8e70 [ 171.183996][ T5781] RBP: 00007ffc51fb8e70 R08: 00007ffc51fb9e70 R09: 00000000ffffffff [ 171.192025][ T5781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc51fb9f00 [ 171.200054][ T5781] R13: 00007f97746321ca R14: 000000000002965e R15: 00007ffc51fb9f40 [ 171.208115][ T5781] [ 171.216319][ T6511] loop0: detected capacity change from 0 to 1024 [ 171.344842][ T6513] loop1: detected capacity change from 0 to 128 [ 171.411253][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 171.459851][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 171.515402][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 171.572212][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 171.669271][ T6515] syz.3.136 uses obsolete (PF_INET,SOCK_PACKET) [ 171.692308][ T6515] jfs_strtoUCS: char2uni returned -22. [ 171.698217][ T6515] charset = iso8859-3, char = 0xbe [ 172.400165][ T6516] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.409357][ T6516] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.527209][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.540103][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.576296][ T6517] hfsplus: request for non-existent node 33423360 in B*Tree [ 172.614611][ T6517] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.030085][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.071647][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.130100][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.183410][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.220888][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.331248][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.450995][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 173.533427][ T6511] hfsplus: request for non-existent node 33423360 in B*Tree [ 174.677584][ T6529] netlink: 'syz.1.140': attribute type 1 has an invalid length. [ 174.869221][ T6529] bond1: entered promiscuous mode [ 174.889510][ T6529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.086715][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.140'. [ 175.793206][ T6529] bond1: entered allmulticast mode [ 176.438335][ T6529] bond1: (slave bridge1): making interface the new active one [ 176.541758][ T6529] bridge1: entered promiscuous mode [ 176.569925][ T6529] bridge1: entered allmulticast mode [ 176.625907][ T6529] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 179.293441][ T6550] Bluetooth: MGMT ver 1.22 [ 179.699557][ T6566] loop0: detected capacity change from 0 to 512 [ 179.741923][ T6566] EXT4-fs (loop0): Test dummy encryption mode enabled [ 179.756859][ T6566] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 179.871343][ T6566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.896209][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 179.969490][ T6566] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.149: bad orphan inode 131083 [ 180.036545][ T6566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.552021][ T6576] loop2: detected capacity change from 0 to 256 [ 180.609606][ T6576] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.621419][ T6576] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 180.708891][ T6576] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 180.944291][ T6576] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 180.952790][ T6576] exFAT-fs (loop2): Filesystem has been set read-only [ 181.601138][ T6566] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 182.675645][ T6589] netlink: 'syz.2.152': attribute type 4 has an invalid length. [ 184.183373][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.259923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 191.355361][ T6645] loop0: detected capacity change from 0 to 256 [ 191.449504][ T6645] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.060307][ T6650] UBIFS error (pid: 6650): cannot open "(null)", error -22 [ 194.535666][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549458][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.312929][ T6647] syz.1.167: attempt to access beyond end of device [ 195.312929][ T6647] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 195.326068][ T6647] gfs2: error 10 reading superblock [ 197.151478][ T6669] loop3: detected capacity change from 0 to 1024 [ 197.756697][ T27] audit: type=1326 audit(1781302541.604:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x7ffc0000 [ 197.967602][ T27] audit: type=1326 audit(1781302541.634:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x7ffc0000 [ 198.009859][ T27] audit: type=1326 audit(1781302541.634:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x7ffc0000 [ 198.328359][ T27] audit: type=1326 audit(1781302541.634:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x7ffc0000 [ 198.953419][ T27] audit: type=1326 audit(1781302541.634:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff85a59ce59 code=0x7ffc0000 [ 199.063489][ T27] audit: type=1326 audit(1781302541.634:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x7ffc0000 [ 199.094410][ T27] audit: type=1326 audit(1781302541.634:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x7ffc0000 [ 199.123367][ T27] audit: type=1326 audit(1781302541.634:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x7ffc0000 [ 199.156245][ T27] audit: type=1326 audit(1781302541.634:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x7ffc0000 [ 199.216599][ T27] audit: type=1326 audit(1781302541.634:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x7ffc0000 [ 199.527723][ T6685] syzkaller0: entered promiscuous mode [ 199.533504][ T6685] syzkaller0: entered allmulticast mode [ 199.780547][ T6685] TC_ACT_REPEAT abuse ? [ 200.387074][ T6692] IPv6: NLM_F_REPLACE set, but no existing node found! [ 200.658455][ T6690] loop3: detected capacity change from 0 to 32768 [ 200.718825][ T6690] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.784038][ T6690] XFS (loop3): Ending clean mount [ 200.799201][ T6690] XFS (loop3): Quotacheck needed: Please wait. [ 200.952730][ T6690] XFS (loop3): Quotacheck: Done. [ 201.960306][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.334864][ T6720] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 202.376239][ T6716] syzkaller0: entered promiscuous mode [ 202.492619][ T6716] syzkaller0: entered allmulticast mode [ 202.915868][ T6724] loop3: detected capacity change from 0 to 16 [ 202.929340][ T6724] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 203.533060][ T6717] tipc: Started in network mode [ 203.538078][ T6717] tipc: Node identity 1af7bc647f4f, cluster identity 4711 [ 203.562683][ T6717] tipc: Enabled bearer , priority 0 [ 203.589893][ T6729] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 203.596969][ T6729] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 203.607158][ T6729] vhci_hcd vhci_hcd.0: Device attached [ 203.657165][ T6721] tipc: Resetting bearer [ 203.845532][ T6715] tipc: Resetting bearer [ 204.371052][ T5836] usb 40-1: SetAddress Request (2) to port 0 [ 204.384888][ T5836] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 204.430910][ T6731] vhci_hcd: connection closed [ 204.543762][ T6732] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 204.602595][ T6715] tipc: Disabling bearer [ 204.678879][ T6467] vhci_hcd: stop threads [ 204.698689][ T6467] vhci_hcd: release socket [ 204.710981][ T6467] vhci_hcd: disconnect device [ 206.041397][ T6742] loop1: detected capacity change from 0 to 512 [ 206.066007][ T6742] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.180873][ T6742] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 206.331972][ T6747] syzkaller0: entered promiscuous mode [ 206.337531][ T6747] syzkaller0: entered allmulticast mode [ 206.350922][ T6742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 206.359274][ T6742] EXT4-fs (loop1): orphan cleanup on readonly fs [ 206.411542][ T6742] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.188: bg 0: block 361: padding at end of block bitmap is not set [ 206.509833][ T6742] EXT4-fs (loop1): Remounting filesystem read-only [ 206.529654][ T6747] tipc: Enabled bearer , priority 0 [ 206.531041][ T6742] EXT4-fs (loop1): 1 truncate cleaned up [ 206.545389][ T6744] tipc: Resetting bearer [ 206.593022][ T6742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 207.386639][ T6737] Bluetooth: hci1: command 0x0406 tx timeout [ 207.400388][ T6737] Bluetooth: hci0: command 0x0406 tx timeout [ 207.406496][ T6737] Bluetooth: hci2: command 0x0406 tx timeout [ 207.414419][ T6737] Bluetooth: hci3: command 0x0406 tx timeout [ 207.562666][ T6751] loop3: detected capacity change from 0 to 32768 [ 207.885478][ T6744] tipc: Disabling bearer [ 207.904439][ T5822] tipc: Node number set to 3170356233 [ 207.912266][ T6751] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.992894][ T6765] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.188: dx entry: limit 0 != root limit 125 [ 208.005701][ T6765] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.188: Corrupt directory, running e2fsck is recommended [ 209.061964][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 209.097133][ T6751] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 209.126203][ T6751] XFS (loop3): Starting recovery (logdev: internal) [ 209.147985][ T6751] XFS (loop3): Ending recovery (logdev: internal) [ 209.156551][ T6751] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 209.580230][ T5836] usb 40-1: device descriptor read/8, error -110 [ 209.828501][ T6778] loop3: detected capacity change from 0 to 32768 [ 209.848972][ T6778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.196 (6778) [ 209.879845][ T6778] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.892631][ T6778] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 209.901507][ T6778] BTRFS info (device loop3): setting nodatasum [ 209.907720][ T6778] BTRFS info (device loop3): force zlib compression, level 3 [ 209.915249][ T6778] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 209.925108][ T6778] BTRFS info (device loop3): use lzo compression, level 0 [ 209.932328][ T6778] BTRFS info (device loop3): turning on flush-on-commit [ 209.939342][ T6778] BTRFS info (device loop3): enabling auto defrag [ 209.946493][ T6778] BTRFS info (device loop3): max_inline at 4096 [ 209.952975][ T6778] BTRFS info (device loop3): force zlib compression, level 3 [ 209.960512][ T6778] BTRFS info (device loop3): using free space tree [ 210.680436][ T6778] BTRFS info (device loop3): enabling ssd optimizations [ 210.687471][ T6778] BTRFS info (device loop3): auto enabling async discard [ 212.664929][ T5836] usb usb40-port1: attempt power cycle [ 212.793833][ T5777] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.966337][ T6808] ceph: No mds server is up or the cluster is laggy [ 214.995356][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 215.043178][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 215.053347][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 215.285575][ T6815] tipc: Enabled bearer , priority 10 [ 215.339798][ T5836] usb usb40-port1: unable to enumerate USB device [ 215.386630][ T6815] netlink: 104 bytes leftover after parsing attributes in process `syz.1.202'. [ 215.510652][ T6815] tipc: Enabling of bearer rejected, failed to enable media [ 215.598098][ T6822] bridge_slave_0: left allmulticast mode [ 215.620075][ T6822] bridge_slave_0: left promiscuous mode [ 215.650134][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.751353][ T6822] bridge_slave_1: left allmulticast mode [ 215.757123][ T6822] bridge_slave_1: left promiscuous mode [ 215.770554][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.832893][ T6822] bond0: (slave bond_slave_0): Releasing backup interface [ 215.854084][ T6827] loop3: detected capacity change from 0 to 1024 [ 215.922792][ T6822] bond0: (slave bond_slave_1): Releasing backup interface [ 215.952216][ T5839] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 216.002804][ T6822] team0: Port device team_slave_0 removed [ 216.037744][ T6822] team0: Port device team_slave_1 removed [ 216.076172][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.106030][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.169864][ T5839] usb 1-1: Using ep0 maxpacket: 32 [ 216.182358][ T5839] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 216.219914][ T5839] usb 1-1: config 0 has no interface number 0 [ 216.260871][ T5839] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 216.294556][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.346829][ T5839] usb 1-1: Product: syz [ 216.351587][ T5839] usb 1-1: Manufacturer: syz [ 216.356230][ T5839] usb 1-1: SerialNumber: syz [ 216.383880][ T5839] usb 1-1: config 0 descriptor?? [ 216.409472][ T5822] tipc: Node number set to 1706605668 [ 216.718617][ T5839] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 217.338152][ T5839] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 217.434509][ T5839] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 217.580320][ T27] kauditd_printk_skb: 79 callbacks suppressed [ 217.580336][ T27] audit: type=1326 audit(1781302561.414:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x50000 [ 217.941563][ T27] audit: type=1326 audit(1781302561.414:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x50000 [ 218.069726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 218.349581][ T27] audit: type=1326 audit(1781302561.414:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x50000 [ 218.437633][ T6822] team0: Mode changed to "loadbalance" [ 218.531197][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 218.537591][ T27] audit: type=1326 audit(1781302561.414:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x50000 [ 218.815878][ T27] audit: type=1326 audit(1781302561.414:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x50000 [ 218.885098][ T27] audit: type=1326 audit(1781302561.414:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x50000 [ 218.924774][ T27] audit: type=1326 audit(1781302561.414:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x50000 [ 218.954566][ T27] audit: type=1326 audit(1781302561.414:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x50000 [ 219.041392][ T27] audit: type=1326 audit(1781302561.414:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x50000 [ 219.074440][ T27] audit: type=1326 audit(1781302561.414:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.3.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85a59ce59 code=0x50000 [ 219.320400][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 219.327436][ T6030] usb 1-1: USB disconnect, device number 2 [ 219.350844][ T6030] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 219.422000][ T6030] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 219.451507][ T6030] quatech2 1-1:0.51: device disconnected [ 219.488533][ T6863] loop3: detected capacity change from 0 to 128 [ 219.512608][ T6863] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.527484][ T6863] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.702201][ T6863] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 219.774072][ T6864] loop1: detected capacity change from 0 to 256 [ 219.830119][ T6864] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.925921][ T6864] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 220.062347][ T6875] syz_tun: entered allmulticast mode [ 220.114135][ T6875] bond0: entered promiscuous mode [ 220.116920][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.119240][ T6875] bond_slave_0: entered promiscuous mode [ 220.196112][ T6875] bond_slave_1: entered promiscuous mode [ 221.998653][ T6889] loop0: detected capacity change from 0 to 128 [ 222.111557][ T6889] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.187401][ T6889] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.400154][ T6898] loop1: detected capacity change from 0 to 512 [ 222.534851][ T6898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 222.650378][ T6901] syz.0.217 (pid 6901) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 222.813542][ T6898] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 223.087785][ T6898] EXT4-fs (loop1): 1 truncate cleaned up [ 223.096177][ T6898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.113459][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.524811][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 224.254056][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.635186][ T6913] loop3: detected capacity change from 0 to 128 [ 226.627180][ T5822] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 226.929922][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 228.961548][ T5822] usb 3-1: device descriptor read/all, error -71 [ 229.310694][ T6951] loop2: detected capacity change from 0 to 8192 [ 229.499818][ T6030] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 230.081903][ T6954] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 230.106031][ T6954] FAT-fs (loop2): Filesystem has been set read-only [ 230.141271][ T6955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 230.373049][ T6030] usb 2-1: Using ep0 maxpacket: 16 [ 230.380821][ T6030] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.391279][ T6030] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.420474][ T5836] IPVS: starting estimator thread 0... [ 230.431355][ T6030] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.464127][ T6030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.499959][ T6030] usb 2-1: Product: syz [ 230.510673][ T6030] usb 2-1: Manufacturer: syz [ 230.511500][ T6960] IPVS: using max 20 ests per chain, 48000 per kthread [ 230.515354][ T6030] usb 2-1: SerialNumber: syz [ 232.040637][ T6030] usb 2-1: 0:2 : does not exist [ 232.057090][ T6030] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 232.160055][ T6030] usb 2-1: USB disconnect, device number 2 [ 232.310225][ T6553] udevd[6553]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.547280][ T6972] loop3: detected capacity change from 0 to 512 [ 232.626532][ T6972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.674323][ T6972] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.599430][ T6983] raw_sendmsg: syz.1.238 forgot to set AF_INET. Fix it! [ 233.668034][ T6984] netdevsim netdevsim1 ªªªªª»: renamed from netdevsim0 [ 234.193576][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.318717][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 236.970035][ T5790] CPU: 1 PID: 5790 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 236.977684][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 236.987905][ T5790] Workqueue: hci0 hci_rx_work [ 236.992650][ T5790] Call Trace: [ 236.995973][ T5790] [ 236.998946][ T5790] dump_stack_lvl+0x18c/0x250 [ 237.003685][ T5790] ? show_regs_print_info+0x20/0x20 [ 237.008947][ T5790] ? load_image+0x420/0x420 [ 237.013518][ T5790] sysfs_create_dir_ns+0x26e/0x2a0 [ 237.018694][ T5790] ? sysfs_warn_dup+0xa0/0xa0 [ 237.023428][ T5790] ? do_raw_spin_unlock+0x121/0x230 [ 237.028688][ T5790] kobject_add_internal+0x61c/0xcc0 [ 237.033956][ T5790] kobject_add+0x164/0x240 [ 237.038428][ T5790] ? __rwlock_init+0x150/0x150 [ 237.043250][ T5790] ? kobject_init+0x1e0/0x1e0 [ 237.047985][ T5790] ? _raw_spin_unlock+0x28/0x40 [ 237.052917][ T5790] ? get_device_parent+0x366/0x390 [ 237.058097][ T5790] device_add+0x408/0xc50 [ 237.062496][ T5790] hci_conn_add_sysfs+0xd5/0x1e0 [ 237.067502][ T5790] le_conn_complete_evt+0xf5d/0x1540 [ 237.072849][ T5790] ? hci_event_packet+0x4cb/0x1270 [ 237.078033][ T5790] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 237.084344][ T5790] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 237.090053][ T5790] ? skb_pull_data+0xfb/0x200 [ 237.094796][ T5790] hci_le_conn_complete_evt+0x187/0x440 [ 237.100404][ T5790] ? hci_remote_host_features_evt+0x150/0x150 [ 237.106531][ T5790] hci_event_packet+0x7ba/0x1270 [ 237.111578][ T5790] ? bis_list+0x290/0x290 [ 237.115992][ T5790] ? lockdep_hardirqs_on+0x98/0x150 [ 237.121268][ T5790] ? hci_send_to_monitor+0xd7/0x4f0 [ 237.126527][ T5790] hci_rx_work+0x43a/0xd60 [ 237.131107][ T5790] ? process_scheduled_works+0x96f/0x15d0 [ 237.136885][ T5790] process_scheduled_works+0xa5d/0x15d0 [ 237.142515][ T5790] ? worker_attach_to_pool+0x380/0x380 [ 237.148045][ T5790] ? assign_work+0x3d2/0x5d0 [ 237.152707][ T5790] worker_thread+0xa55/0xfc0 [ 237.157349][ T5790] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 237.163301][ T5790] ? _raw_spin_unlock+0x40/0x40 [ 237.168207][ T5790] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 237.174174][ T5790] kthread+0x2fa/0x390 [ 237.178312][ T5790] ? pr_cont_work+0x560/0x560 [ 237.183038][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 237.187676][ T5790] ret_from_fork+0x48/0x80 [ 237.192157][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 237.196768][ T5790] ret_from_fork_asm+0x11/0x20 [ 237.201590][ T5790] [ 237.220143][ T5790] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 237.239814][ T5790] Bluetooth: hci0: failed to register connection device [ 239.671274][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.215650][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 240.270982][ T7013] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 240.286729][ T7013] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 243.490125][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 245.101516][ T7040] loop0: detected capacity change from 0 to 128 [ 245.380807][ T7043] loop1: detected capacity change from 0 to 32768 [ 246.529115][ T7048] jfs_strtoUCS: char2uni returned -22. [ 246.535598][ T7048] charset = iso8859-3, char = 0xbe [ 247.702584][ T7050] loop3: detected capacity change from 0 to 32768 [ 248.350514][ T7050] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 249.155301][ T7050] XFS (loop3): Ending clean mount [ 249.168041][ T7050] XFS (loop3): Quotacheck needed: Please wait. [ 249.337165][ T7050] XFS (loop3): Quotacheck: Done. [ 251.484631][ T7079] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 253.196695][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 255.666873][ T7098] process 'syz.0.263' launched './file1' with NULL argv: empty string added [ 255.760790][ T7090] syz_tun (unregistering): left allmulticast mode [ 255.976399][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982946][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.244148][ T6475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.326001][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.344855][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.357764][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.378967][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.403917][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 257.420245][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.843883][ T6475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.869904][ T5839] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 259.531836][ T5790] Bluetooth: hci1: command tx timeout [ 259.719890][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 259.735880][ T6475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.744262][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.788844][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.799789][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 259.819324][ T5839] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 259.839827][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.872056][ T5839] usb 4-1: config 0 descriptor?? [ 261.181274][ T5839] usbhid 4-1:0.0: can't add hid device: -71 [ 261.187451][ T5839] usbhid: probe of 4-1:0.0 failed with error -71 [ 261.234005][ T6475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.254393][ T5839] usb 4-1: USB disconnect, device number 3 [ 261.541222][ T7137] hub 8-0:1.0: USB hub found [ 261.550808][ T7137] hub 8-0:1.0: 1 port detected [ 261.774380][ T5790] Bluetooth: hci1: command tx timeout [ 263.553198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 263.886749][ T5790] Bluetooth: hci1: command tx timeout [ 264.514057][ T7104] chnl_net:caif_netlink_parms(): no params data found [ 265.409197][ T6475] tipc: Disabling bearer [ 265.705561][ T7163] loop1: detected capacity change from 0 to 512 [ 266.060763][ T7163] EXT4-fs (loop1): orphan cleanup on readonly fs [ 266.069261][ T7163] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.275: corrupted in-inode xattr: invalid size in ea xattr [ 266.086712][ T7163] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.275: couldn't read orphan inode 15 (err -117) [ 266.195446][ T5790] Bluetooth: hci1: command tx timeout [ 266.269995][ T7163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 266.346549][ T6475] tipc: Left network mode [ 266.430530][ T7104] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.513301][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.520721][ T7104] bridge_slave_0: entered allmulticast mode [ 266.580703][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.589542][ T7104] bridge_slave_0: entered promiscuous mode [ 266.629304][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.677171][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.684499][ T7104] bridge_slave_1: entered allmulticast mode [ 266.741353][ T7104] bridge_slave_1: entered promiscuous mode [ 266.773826][ T7169] team0: No ports can be present during mode change [ 267.073788][ T7170] loop0: detected capacity change from 0 to 32768 [ 267.196186][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 267.385341][ T7169] team0 (unregistering): Port device team_slave_0 removed [ 267.440730][ T7169] team0 (unregistering): Port device team_slave_1 removed [ 268.013967][ T7104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.063607][ T7104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.388833][ T7186] loop1: detected capacity change from 0 to 512 [ 270.504849][ T7186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.550848][ T7186] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.011991][ T7195] loop0: detected capacity change from 0 to 40427 [ 271.021242][ T7195] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 271.029034][ T7195] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 271.092585][ T7195] F2FS-fs (loop0): invalid crc value [ 271.177066][ T7195] F2FS-fs (loop0): Found nat_bits in checkpoint [ 271.319414][ T7195] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 271.327015][ T7195] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 271.594113][ T7104] team0: Port device team_slave_0 added [ 271.628216][ T7104] team0: Port device team_slave_1 added [ 271.640842][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.437837][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 272.437857][ T27] audit: type=1800 audit(1781302620.377:354): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.279" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 274.009851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 274.729248][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.759647][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.821816][ T7104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.945482][ T7104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.952510][ T7104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.022107][ T6462] kworker/u4:16: attempt to access beyond end of device [ 275.022107][ T6462] loop0: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 275.044891][ T7104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.183516][ T6462] kworker/u4:16: attempt to access beyond end of device [ 275.183516][ T6462] loop0: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 275.222030][ T6462] kworker/u4:16: attempt to access beyond end of device [ 275.222030][ T6462] loop0: rw=1, sector=57344, nr_sectors = 1576 limit=40427 [ 275.506567][ T7104] hsr_slave_0: entered promiscuous mode [ 275.641985][ T7104] hsr_slave_1: entered promiscuous mode [ 275.922391][ T7104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.995998][ T7104] Cannot create hsr debugfs directory [ 277.279295][ T7227] loop3: detected capacity change from 0 to 128 [ 277.405248][ T7227] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.461909][ T7227] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 278.509189][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.800857][ T6475] hsr_slave_0: left promiscuous mode [ 279.829651][ T6475] hsr_slave_1: left promiscuous mode [ 279.897122][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.928069][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.957285][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.975916][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.007404][ T6475] bridge_slave_1: left allmulticast mode [ 280.024237][ T6475] bridge_slave_1: left promiscuous mode [ 280.042781][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.087296][ T6475] bridge_slave_0: left allmulticast mode [ 280.104509][ T6475] bridge_slave_0: left promiscuous mode [ 280.122564][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.275135][ T6475] veth1_macvtap: left promiscuous mode [ 280.297399][ T6475] veth0_macvtap: left promiscuous mode [ 280.316080][ T6475] veth1_vlan: left promiscuous mode [ 280.329106][ T6475] veth0_vlan: left promiscuous mode [ 284.150403][ T6475] team0 (unregistering): Port device team_slave_1 removed [ 284.863355][ T6475] team0 (unregistering): Port device team_slave_0 removed [ 284.981127][ T6475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.050338][ T6475] bond_slave_1 (unregistering): left promiscuous mode [ 285.310987][ T6475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.320539][ T6475] bond_slave_0 (unregistering): left promiscuous mode [ 285.958452][ T7289] loop1: detected capacity change from 0 to 1024 [ 286.002181][ T7291] loop0: detected capacity change from 0 to 512 [ 286.097657][ T7291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.137846][ T7291] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.014257][ T6475] bond0 (unregistering): Released all slaves [ 287.169111][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.359987][ T7251] team0: No ports can be present during mode change [ 287.368271][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 287.490315][ T7252] team0 (unregistering): Port device team_slave_0 removed [ 287.521617][ T7252] team0 (unregistering): Port device team_slave_1 removed [ 287.818076][ T7104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.869358][ T7104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.905890][ T7104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.938899][ T7104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.189517][ T7104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.255078][ T7104] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.291611][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.298903][ T6478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.343532][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.350741][ T6478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.470407][ T7104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.801764][ T7104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.170090][ T7104] veth0_vlan: entered promiscuous mode [ 289.185166][ T7104] veth1_vlan: entered promiscuous mode [ 289.227339][ T7104] veth0_macvtap: entered promiscuous mode [ 289.244925][ T7104] veth1_macvtap: entered promiscuous mode [ 289.281709][ T7104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.297224][ T7104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.314796][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.327788][ T7104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.357550][ T7104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.367187][ T7104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.376799][ T7104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.386178][ T7104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.521008][ T6462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.528912][ T6462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.570701][ T6480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.578604][ T6480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.275475][ T7397] loop4: detected capacity change from 0 to 128 [ 294.124689][ T7407] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 294.777237][ T7397] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.894832][ T7397] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.794938][ T7104] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.180482][ T7437] bridge_slave_0: left allmulticast mode [ 298.186584][ T7437] bridge_slave_0: left promiscuous mode [ 298.223743][ T7439] loop4: detected capacity change from 0 to 256 [ 298.233221][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.264073][ T7439] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.275528][ T7437] bridge_slave_1: left allmulticast mode [ 298.305095][ T7437] bridge_slave_1: left promiscuous mode [ 298.322504][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.456103][ T7437] bond0: (slave bond_slave_0): Releasing backup interface [ 298.506120][ T5836] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 298.600844][ T7437] bond0: (slave bond_slave_1): Releasing backup interface [ 298.823533][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.986503][ T7437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.402140][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 299.413025][ T5836] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 299.421329][ T5836] usb 4-1: config 0 has no interface number 0 [ 299.453369][ T5836] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 299.576789][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.731431][ T5836] usb 4-1: Product: syz [ 299.805881][ T5836] usb 4-1: Manufacturer: syz [ 299.856154][ T5836] usb 4-1: SerialNumber: syz [ 299.874407][ T5836] usb 4-1: config 0 descriptor?? [ 299.918591][ T5836] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 300.993791][ T5836] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 301.094046][ T5836] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 301.299250][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 302.477245][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 302.482076][ T5839] usb 4-1: USB disconnect, device number 4 [ 302.546465][ T5839] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 302.622804][ T5839] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 302.634719][ T7479] bond0: (slave bridge0): Releasing backup interface [ 302.677883][ T5839] quatech2 4-1:0.51: device disconnected [ 304.980849][ T7494] vlan0: entered promiscuous mode [ 305.577192][ T5967] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 306.208250][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 306.730022][ T5967] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 306.748464][ T5967] usb 1-1: config 0 has no interface number 0 [ 306.795614][ T5967] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 306.815299][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.833822][ T5967] usb 1-1: Product: syz [ 306.839482][ T5967] usb 1-1: Manufacturer: syz [ 306.849478][ T5967] usb 1-1: SerialNumber: syz [ 306.875182][ T5967] usb 1-1: config 0 descriptor?? [ 306.935104][ T5967] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 307.311451][ T5967] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 307.371139][ T5967] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 308.355812][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 308.358685][ T5836] usb 1-1: USB disconnect, device number 3 [ 308.384775][ T5836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 308.470110][ T5836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 308.517014][ T5836] quatech2 1-1:0.51: device disconnected [ 309.172187][ T7552] loop4: detected capacity change from 0 to 4096 [ 309.213047][ T7552] EXT4-fs (loop4): Test dummy encryption mode enabled [ 309.285035][ T7552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.335174][ T7565] loop1: detected capacity change from 0 to 512 [ 309.371926][ T7565] EXT4-fs (loop1): Test dummy encryption mode enabled [ 309.424520][ T7565] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 309.547658][ T7565] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.345: bad orphan inode 131083 [ 309.592646][ T7565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.437593][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 311.759199][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.773123][ T7104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.280195][ T7606] bridge_slave_0: left allmulticast mode [ 315.286186][ T7606] bridge_slave_0: left promiscuous mode [ 315.292731][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.336163][ T7606] bridge_slave_1: left allmulticast mode [ 315.378245][ T7606] bridge_slave_1: left promiscuous mode [ 315.397520][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.478645][ T7606] bond0: (slave bond_slave_0): Releasing backup interface [ 315.592186][ T7606] bond0: (slave bond_slave_1): Releasing backup interface [ 315.601987][ T5822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 315.769277][ T7606] team0: Port device team_slave_0 removed [ 315.854817][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 315.879963][ T7606] team0: Port device team_slave_1 removed [ 315.896108][ T5822] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 315.925094][ T5822] usb 5-1: config 0 has no interface number 0 [ 315.936958][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.978939][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.986567][ T5822] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 315.986596][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.986616][ T5822] usb 5-1: Product: syz [ 315.986630][ T5822] usb 5-1: Manufacturer: syz [ 315.986650][ T5822] usb 5-1: SerialNumber: syz [ 316.009740][ T5822] usb 5-1: config 0 descriptor?? [ 316.051435][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.084513][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.193099][ T5822] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 316.407343][ T7623] syzkaller0: entered promiscuous mode [ 316.439810][ T7623] syzkaller0: entered allmulticast mode [ 316.473287][ T5822] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 316.500538][ T5822] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 316.896282][ T7606] team0: Mode changed to "loadbalance" [ 316.947400][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 316.956168][ T5822] usb 5-1: USB disconnect, device number 2 [ 316.984040][ T5822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 317.028044][ T5822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 317.068866][ T7632] syz_tun: left allmulticast mode [ 317.082504][ T5822] quatech2 5-1:0.51: device disconnected [ 317.102095][ T7632] syz_tun: left promiscuous mode [ 317.128647][ T7636] loop3: detected capacity change from 0 to 512 [ 317.141378][ T7632] bridge0: port 3(syz_tun) entered disabled state [ 317.233245][ T7632] bridge_slave_0: left allmulticast mode [ 317.246497][ T7632] bridge_slave_0: left promiscuous mode [ 317.260814][ T7636] EXT4-fs (loop3): Test dummy encryption mode enabled [ 317.269615][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.304673][ T7636] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 317.339857][ T7632] bridge_slave_1: left allmulticast mode [ 317.358625][ T7632] bridge_slave_1: left promiscuous mode [ 317.373443][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.420306][ T6008] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 317.428101][ T7636] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.350: bad orphan inode 131083 [ 317.444310][ T7632] bond0: (slave bond_slave_0): Releasing backup interface [ 317.473396][ T7636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.508072][ T7643] loop0: detected capacity change from 0 to 4096 [ 317.568392][ T7632] bond0: (slave bond_slave_1): Releasing backup interface [ 317.583995][ T7643] EXT4-fs (loop0): Test dummy encryption mode enabled [ 317.599711][ T7632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.624726][ T6008] usb 2-1: Using ep0 maxpacket: 32 [ 317.637642][ T7632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.649800][ T6008] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 317.661758][ T7643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.680460][ T6008] usb 2-1: config 0 has no interface number 0 [ 317.834524][ T6008] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 317.844120][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.852196][ T6008] usb 2-1: Product: syz [ 317.856839][ T6008] usb 2-1: Manufacturer: syz [ 317.861510][ T6008] usb 2-1: SerialNumber: syz [ 317.870027][ T6008] usb 2-1: config 0 descriptor?? [ 317.882048][ T6008] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 317.910496][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.916960][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.938287][ T7632] bond1: (slave bridge1): Releasing backup interface [ 317.987635][ T7632] bridge1: left promiscuous mode [ 318.218138][ T6008] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 318.492904][ T7632] bridge1: left allmulticast mode [ 318.581918][ T6008] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 318.961713][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.259907][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 319.322061][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 319.326927][ T5958] usb 2-1: USB disconnect, device number 3 [ 319.422467][ T5958] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 319.647673][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.667121][ T5958] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 319.679087][ T5958] quatech2 2-1:0.51: device disconnected [ 321.867469][ T5790] Bluetooth: hci1: link tx timeout [ 321.873471][ T5790] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 324.669505][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 325.627703][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.360'. [ 326.026398][ T7702] loop3: detected capacity change from 0 to 256 [ 326.124825][ T7702] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.312181][ T7728] ip6t_rpfilter: unknown options [ 328.877346][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 329.295729][ T5836] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 330.075152][ T7747] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 330.980729][ T7750] loop3: detected capacity change from 0 to 1024 [ 331.034510][ T7750] ext4: Unknown parameter 'smackfsfloor' [ 331.256708][ T6551] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 331.603399][ T5836] usb 5-1: device descriptor read/64, error -71 [ 332.132773][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 332.150750][ T7769] loop1: detected capacity change from 0 to 256 [ 332.242463][ T7769] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 332.344645][ T7772] netlink: 'syz.0.374': attribute type 4 has an invalid length. [ 333.313088][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 333.433293][ T5836] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 333.482360][ T5836] usb 5-1: config 0 has no interface number 0 [ 333.527058][ T5836] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 333.559300][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.975502][ T5836] usb 5-1: Product: syz [ 333.979766][ T5836] usb 5-1: Manufacturer: syz [ 334.000351][ T5836] usb 5-1: SerialNumber: syz [ 334.324263][ T5836] usb 5-1: config 0 descriptor?? [ 334.332388][ T5836] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 336.145423][ T5836] usb 5-1: qt2_attach - failed to power on unit: -71 [ 336.234332][ T5836] quatech2: probe of 5-1:0.51 failed with error -71 [ 336.314195][ T5836] usb 5-1: USB disconnect, device number 4 [ 337.024377][ T5836] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 338.064501][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 338.085875][ T5836] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 338.094040][ T5836] usb 5-1: config 0 has no interface number 0 [ 338.112409][ T5836] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 338.892327][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.924689][ T5836] usb 5-1: Product: syz [ 338.929025][ T5836] usb 5-1: Manufacturer: syz [ 338.933671][ T5836] usb 5-1: SerialNumber: syz [ 338.966659][ T5836] usb 5-1: config 0 descriptor?? [ 339.011006][ T7838] loop3: detected capacity change from 0 to 256 [ 339.013346][ T5836] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 339.056444][ T7838] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 340.745771][ T7850] can0: slcan on ttyS3. [ 341.548371][ T5836] usb 5-1: qt2_attach - failed to power on unit: -71 [ 341.577877][ T7850] can0 (unregistered): slcan off ttyS3. [ 341.590195][ T5836] quatech2: probe of 5-1:0.51 failed with error -71 [ 341.675867][ T5836] usb 5-1: USB disconnect, device number 5 [ 341.949612][ T7865] loop0: detected capacity change from 0 to 128 [ 342.192528][ T7865] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.333594][ T7865] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 342.565813][ T6030] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 342.799084][ T6030] usb 5-1: Using ep0 maxpacket: 32 [ 342.816490][ T6030] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 342.833447][ T6030] usb 5-1: config 0 has no interface number 0 [ 342.999590][ T6030] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 343.085528][ T6030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.093606][ T6030] usb 5-1: Product: syz [ 343.123040][ T6030] usb 5-1: Manufacturer: syz [ 343.129286][ T6030] usb 5-1: SerialNumber: syz [ 343.146929][ T6030] usb 5-1: config 0 descriptor?? [ 343.195478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 343.215473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 343.325493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 343.365652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 343.513158][ T6030] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 343.532247][ T7878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.390'. [ 343.813126][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.938171][ T6030] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 344.041593][ T6030] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 344.113770][ T7883] loop0: detected capacity change from 0 to 256 [ 344.143269][ T7883] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.365476][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 345.047546][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 345.060629][ T5836] usb 5-1: USB disconnect, device number 6 [ 345.080668][ T5836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 345.113716][ T5836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 345.157817][ T5836] quatech2 5-1:0.51: device disconnected [ 345.700383][ T7906] capability: warning: `syz.0.401' uses 32-bit capabilities (legacy support in use) [ 345.725752][ T7908] loop4: detected capacity change from 0 to 512 [ 345.755462][ T7908] EXT4-fs (loop4): Test dummy encryption mode enabled [ 345.772861][ T7908] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.819228][ T7908] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.393: bad orphan inode 131083 [ 345.833343][ T7908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.006253][ T5967] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 347.054984][ T7104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.347187][ T5967] usb 2-1: Using ep0 maxpacket: 32 [ 347.358965][ T5967] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 347.373696][ T5967] usb 2-1: config 0 has no interface number 0 [ 347.395011][ T5967] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 347.443287][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.156312][ T5967] usb 2-1: Product: syz [ 348.160579][ T5967] usb 2-1: Manufacturer: syz [ 348.165379][ T5967] usb 2-1: SerialNumber: syz [ 348.185624][ T5967] usb 2-1: config 0 descriptor?? [ 348.194434][ T5967] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 348.692578][ T5967] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 349.044020][ T5967] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 349.153296][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 349.213193][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 349.222261][ T6005] usb 2-1: USB disconnect, device number 4 [ 349.254186][ T6005] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 349.290805][ T6005] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 349.304242][ T6005] quatech2 2-1:0.51: device disconnected [ 349.616559][ T6027] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 349.808860][ T6027] usb 5-1: Using ep0 maxpacket: 32 [ 349.852818][ T6027] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 349.881903][ T6027] usb 5-1: config 0 has no interface number 0 [ 349.924667][ T6027] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 349.954277][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.993188][ T6027] usb 5-1: Product: syz [ 350.005178][ T6027] usb 5-1: Manufacturer: syz [ 350.010686][ T6027] usb 5-1: SerialNumber: syz [ 350.035847][ T6027] usb 5-1: config 0 descriptor?? [ 350.067560][ T6027] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 350.079201][ T7963] loop3: detected capacity change from 0 to 512 [ 350.146763][ T7963] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 350.289399][ T6027] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 350.340991][ T6027] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 350.590070][ T7963] EXT4-fs (loop3): 1 truncate cleaned up [ 350.869847][ T7963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.946588][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 352.593241][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.764926][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 352.775290][ T6030] usb 5-1: USB disconnect, device number 7 [ 352.797490][ T6030] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 352.870999][ T6030] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 352.915696][ T6030] quatech2 5-1:0.51: device disconnected [ 352.998587][ T7989] netlink: 'syz.3.407': attribute type 4 has an invalid length. [ 354.225315][ T5790] Bluetooth: hci1: link tx timeout [ 355.236428][ T8013] loop1: detected capacity change from 0 to 256 [ 355.243895][ T8013] exfat: Deprecated parameter 'utf8' [ 355.391341][ T8012] loop3: detected capacity change from 0 to 32768 [ 355.508582][ T8013] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 355.568742][ T8012] (syz.3.409,8012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 355.593030][ T8012] (syz.3.409,8012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 355.664729][ T8010] can: request_module (can-proto-0) failed. [ 355.853794][ T8012] (syz.3.409,8012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 355.872048][ T8012] (syz.3.409,8012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 355.897192][ T8012] JBD2: Ignoring recovery information on journal [ 355.989829][ T8012] (syz.3.409,8012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 356.008108][ T8012] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 356.023459][ T8012] (syz.3.409,8012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 356.080417][ T8012] (syz.3.409,8012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 356.204346][ T8008] (syz.3.409,8008,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 356.243775][ T8008] (syz.3.409,8008,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 356.258133][ T8008] (syz.3.409,8008,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 356.271061][ T8008] (syz.3.409,8008,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 356.280192][ T8008] (syz.3.409,8008,0):ocfs2_quota_read:201 ERROR: status = -5 [ 356.288310][ T8008] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 356.297532][ T8008] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 356.306978][ T8008] (syz.3.409,8008,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 356.319241][ T8008] (syz.3.409,8008,0):ocfs2_mknod:314 ERROR: status = -5 [ 356.326317][ T8008] (syz.3.409,8008,0):ocfs2_mknod:502 ERROR: status = -5 [ 356.334060][ T8008] (syz.3.409,8008,0):ocfs2_create:676 ERROR: status = -5 [ 356.384018][ T8008] syz.3.409 (8008) used greatest stack depth: 18736 bytes left [ 356.737718][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 356.777354][ T5836] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 356.861357][ T8021] warning: `syz.4.413' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 357.428844][ T8023] loop5: detected capacity change from 0 to 7 [ 357.465108][ T8023] Dev loop5: unable to read RDB block 7 [ 357.487281][ T8023] loop5: AHDI p1 p2 p3 [ 357.491541][ T8023] loop5: partition table partially beyond EOD, truncated [ 357.515186][ T8024] binder_alloc: 8022: binder_alloc_buf, no vma [ 357.545871][ T8023] loop5: p1 start 1601398130 is beyond EOD, truncated [ 357.567878][ T8023] loop5: p2 start 1702059890 is beyond EOD, truncated [ 357.887889][ T8028] loop0: detected capacity change from 0 to 512 [ 357.995245][ T8028] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.036431][ T8028] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 358.179077][ T8028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 358.213366][ T8028] EXT4-fs (loop0): orphan cleanup on readonly fs [ 358.247732][ T8028] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.416: bg 0: block 361: padding at end of block bitmap is not set [ 358.286467][ T8028] EXT4-fs (loop0): Remounting filesystem read-only [ 358.304583][ T8028] EXT4-fs (loop0): 1 truncate cleaned up [ 358.340780][ T8028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 358.786999][ T8031] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.416: dx entry: limit 0 != root limit 125 [ 358.798894][ T8031] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.416: Corrupt directory, running e2fsck is recommended [ 359.467372][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 359.484209][ T5836] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 359.533966][ T5836] usb 2-1: config 0 has no interface number 0 [ 359.542897][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 359.627428][ T5836] usb 2-1: string descriptor 0 read error: -71 [ 359.633836][ T5836] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 360.658621][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.950909][ T5836] usb 2-1: config 0 descriptor?? [ 361.121178][ T5836] usb 2-1: can't set config #0, error -71 [ 361.161919][ T5836] usb 2-1: USB disconnect, device number 5 [ 361.837659][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 361.998933][ T8059] loop4: detected capacity change from 0 to 256 [ 362.010582][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 362.020812][ T5790] CPU: 0 PID: 5790 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 362.028425][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.038541][ T5790] Workqueue: hci3 hci_rx_work [ 362.043303][ T5790] Call Trace: [ 362.046632][ T5790] [ 362.049616][ T5790] dump_stack_lvl+0x18c/0x250 [ 362.054357][ T5790] ? show_regs_print_info+0x20/0x20 [ 362.059618][ T5790] ? load_image+0x420/0x420 [ 362.064211][ T5790] sysfs_create_dir_ns+0x26e/0x2a0 [ 362.069406][ T5790] ? sysfs_warn_dup+0xa0/0xa0 [ 362.074179][ T5790] ? do_raw_spin_unlock+0x121/0x230 [ 362.079458][ T5790] kobject_add_internal+0x61c/0xcc0 [ 362.084739][ T5790] kobject_add+0x164/0x240 [ 362.089224][ T5790] ? __rwlock_init+0x150/0x150 [ 362.094061][ T5790] ? kobject_init+0x1e0/0x1e0 [ 362.098822][ T5790] ? _raw_spin_unlock+0x28/0x40 [ 362.103757][ T5790] ? get_device_parent+0x366/0x390 [ 362.108953][ T5790] device_add+0x408/0xc50 [ 362.113359][ T5790] hci_conn_add_sysfs+0xd5/0x1e0 [ 362.118381][ T5790] le_conn_complete_evt+0xf5d/0x1540 [ 362.123738][ T5790] ? hci_event_packet+0x4cb/0x1270 [ 362.128944][ T5790] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 362.135268][ T5790] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 362.140991][ T5790] ? skb_pull_data+0xfb/0x200 [ 362.145748][ T5790] hci_le_conn_complete_evt+0x187/0x440 [ 362.151368][ T5790] ? hci_remote_host_features_evt+0x150/0x150 [ 362.157521][ T5790] hci_event_packet+0x7ba/0x1270 [ 362.162598][ T5790] ? bis_list+0x290/0x290 [ 362.167023][ T5790] ? lockdep_hardirqs_on+0x98/0x150 [ 362.172348][ T5790] ? hci_send_to_monitor+0xd7/0x4f0 [ 362.177654][ T5790] hci_rx_work+0x43a/0xd60 [ 362.182172][ T5790] ? process_scheduled_works+0x96f/0x15d0 [ 362.187976][ T5790] process_scheduled_works+0xa5d/0x15d0 [ 362.193651][ T5790] ? worker_attach_to_pool+0x380/0x380 [ 362.199203][ T5790] ? assign_work+0x3d2/0x5d0 [ 362.203879][ T5790] worker_thread+0xa55/0xfc0 [ 362.208560][ T5790] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 362.214553][ T5790] ? _raw_spin_unlock+0x40/0x40 [ 362.219506][ T5790] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 362.225526][ T5790] kthread+0x2fa/0x390 [ 362.229679][ T5790] ? pr_cont_work+0x560/0x560 [ 362.234439][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 362.239116][ T5790] ret_from_fork+0x48/0x80 [ 362.243614][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 362.248272][ T5790] ret_from_fork_asm+0x11/0x20 [ 362.253140][ T5790] [ 362.264801][ T5790] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 362.280046][ T5790] Bluetooth: hci3: failed to register connection device [ 362.294000][ T8059] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 362.637196][ T8065] tc action pedit 'at' offset 46 out of bounds [ 365.400791][ T8082] loop3: detected capacity change from 0 to 512 [ 365.418540][ T8082] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.440869][ T8082] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 365.469361][ T8082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 365.606543][ T8088] loop4: detected capacity change from 0 to 1024 [ 365.647884][ T8088] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.662422][ T8088] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.724012][ T8088] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 365.737250][ T8088] EXT4-fs (loop4): orphan cleanup on readonly fs [ 365.777601][ T8088] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.428: Invalid inode table block 0 in block_group 0 [ 365.799143][ T8088] EXT4-fs (loop4): Remounting filesystem read-only [ 365.805813][ T8088] Quota error (device loop4): write_blk: dquota write failed [ 365.813883][ T8088] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 365.825969][ T8088] EXT4-fs (loop4): 1 truncate cleaned up [ 365.911291][ T8082] EXT4-fs (loop3): orphan cleanup on readonly fs [ 366.077142][ T8082] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.429: bg 0: block 361: padding at end of block bitmap is not set [ 366.242133][ T8088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.287888][ T8082] EXT4-fs (loop3): Remounting filesystem read-only [ 366.326057][ T8082] EXT4-fs (loop3): 1 truncate cleaned up [ 366.333790][ T8082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 366.632662][ T7104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.735265][ T8095] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.429: dx entry: limit 0 != root limit 125 [ 366.747265][ T8095] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.429: Corrupt directory, running e2fsck is recommended [ 367.793579][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 368.750567][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 371.568165][ T5967] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 371.768211][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 371.823569][ T5967] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 371.939078][ T5967] usb 1-1: config 0 has no interface number 0 [ 371.970019][ T5967] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 372.125483][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.208180][ T5967] usb 1-1: Product: syz [ 372.212438][ T5967] usb 1-1: Manufacturer: syz [ 372.217079][ T5967] usb 1-1: SerialNumber: syz [ 372.239226][ T8126] loop3: detected capacity change from 0 to 2048 [ 372.263431][ T5967] usb 1-1: config 0 descriptor?? [ 372.481839][ T5967] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 373.199441][ T5967] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 373.218840][ T5967] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 373.378412][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 373.392040][ T8136] loop4: detected capacity change from 0 to 512 [ 373.393098][ T6030] usb 1-1: USB disconnect, device number 4 [ 373.420354][ T8136] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.035381][ T6030] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 375.079187][ T8136] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 375.108635][ T8136] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 375.122168][ T8136] EXT4-fs (loop4): orphan cleanup on readonly fs [ 375.168856][ T6030] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 375.190387][ T6030] quatech2 1-1:0.51: device disconnected [ 375.197175][ T8136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.441: bg 0: block 361: padding at end of block bitmap is not set [ 375.274245][ T8136] EXT4-fs (loop4): Remounting filesystem read-only [ 375.312211][ T8136] EXT4-fs (loop4): 1 truncate cleaned up [ 375.339355][ T8136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 375.774276][ T8148] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.441: dx entry: limit 0 != root limit 125 [ 375.786466][ T8148] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.441: Corrupt directory, running e2fsck is recommended [ 376.240627][ T7104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 376.250231][ T8149] trusted_key: encrypted_key: insufficient parameters specified [ 376.792524][ T8152] loop4: detected capacity change from 0 to 32768 [ 376.855119][ T8152] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 377.036294][ T8152] XFS (loop4): Ending clean mount [ 377.090783][ T8164] loop3: detected capacity change from 0 to 128 [ 377.115565][ T8152] XFS (loop4): Quotacheck needed: Please wait. [ 377.123204][ T8164] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 377.167692][ T8164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.237358][ T8152] XFS (loop4): Quotacheck: Done. [ 379.202508][ T7104] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 379.367287][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.374003][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.207104][ T8178] loop1: detected capacity change from 0 to 256 [ 380.359192][ T8178] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 380.808434][ T6030] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 381.258113][ T6030] usb 1-1: Using ep0 maxpacket: 32 [ 381.304780][ T6030] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 381.342434][ T6030] usb 1-1: config 0 has no interface number 0 [ 381.394439][ T6030] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 381.449017][ T6030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.498764][ T5822] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 381.508285][ T6030] usb 1-1: Product: syz [ 381.512523][ T6030] usb 1-1: Manufacturer: syz [ 381.568158][ T6030] usb 1-1: SerialNumber: syz [ 381.589197][ T6030] usb 1-1: config 0 descriptor?? [ 381.612510][ T6030] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 381.719803][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 381.733867][ T5822] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 381.748153][ T5822] usb 4-1: config 0 has no interface number 0 [ 381.770290][ T5822] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 381.793758][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.803012][ T5822] usb 4-1: Product: syz [ 381.807247][ T5822] usb 4-1: Manufacturer: syz [ 381.822640][ T5822] usb 4-1: SerialNumber: syz [ 381.855791][ T5822] usb 4-1: config 0 descriptor?? [ 381.877466][ T5822] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 382.027825][ T6030] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 382.043247][ T6030] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 382.107608][ T5822] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 382.154052][ T5822] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 382.535572][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 382.881486][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 382.890105][ T5822] usb 4-1: USB disconnect, device number 5 [ 382.967495][ T5822] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 383.042048][ T5822] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 383.069945][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 383.078565][ T6030] usb 1-1: USB disconnect, device number 5 [ 383.096382][ T5822] quatech2 4-1:0.51: device disconnected [ 383.121880][ T6030] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 383.148218][ T8210] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 383.223480][ T8212] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.457'. [ 384.006090][ T6030] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 384.030378][ T6030] quatech2 1-1:0.51: device disconnected [ 384.045803][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.458'. [ 387.472285][ T8237] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 388.026651][ T8237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.295440][ T8241] bond2: (slave ip6gretap1): making interface the new active one [ 388.342821][ T8241] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 389.659214][ T8257] bridge0: port 1(erspan0) entered blocking state [ 390.554938][ T8257] bridge0: port 1(erspan0) entered disabled state [ 390.562235][ T8257] erspan0: entered allmulticast mode [ 390.571299][ T8257] erspan0: entered promiscuous mode [ 390.581156][ T8257] bridge0: port 1(erspan0) entered blocking state [ 390.588283][ T8257] bridge0: port 1(erspan0) entered forwarding state [ 390.601127][ T8263] erspan0: left allmulticast mode [ 390.606252][ T8263] erspan0: left promiscuous mode [ 390.612218][ T8263] bridge0: port 1(erspan0) entered disabled state [ 390.892668][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 390.967999][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 391.101521][ T8266] loop3: detected capacity change from 0 to 128 [ 391.141273][ T8266] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.153885][ T8266] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 392.139979][ T8273] loop1: detected capacity change from 0 to 32768 [ 392.575795][ T8273] (syz.1.470,8273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 392.589833][ T8273] (syz.1.470,8273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 392.612192][ T8273] (syz.1.470,8273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 392.627474][ T8273] (syz.1.470,8273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 392.645151][ T8273] JBD2: Ignoring recovery information on journal [ 392.686409][ T8273] (syz.1.470,8273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 392.702630][ T8273] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 392.714674][ T8273] (syz.1.470,8273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 392.747836][ T8273] (syz.1.470,8273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 392.815499][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.871487][ T8273] (syz.1.470,8273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 392.896132][ T8273] (syz.1.470,8273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 392.911890][ T8273] (syz.1.470,8273,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 392.911969][ T8273] (syz.1.470,8273,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 392.933598][ T8273] (syz.1.470,8273,0):ocfs2_quota_read:201 ERROR: status = -5 [ 392.941141][ T8273] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 392.950836][ T8273] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 392.960439][ T8273] (syz.1.470,8273,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 392.968480][ T8273] (syz.1.470,8273,0):ocfs2_mknod:314 ERROR: status = -5 [ 392.975535][ T8273] (syz.1.470,8273,0):ocfs2_mknod:502 ERROR: status = -5 [ 392.982626][ T8273] (syz.1.470,8273,0):ocfs2_create:676 ERROR: status = -5 [ 393.908495][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 395.638703][ T8298] sctp: [Deprecated]: syz.3.477 (pid 8298) Use of int in maxseg socket option. [ 395.638703][ T8298] Use struct sctp_assoc_value instead [ 396.736965][ T8300] bridge0: port 1(erspan0) entered blocking state [ 396.756234][ T8300] bridge0: port 1(erspan0) entered disabled state [ 396.841200][ T8300] erspan0: entered allmulticast mode [ 396.916353][ T8300] erspan0: entered promiscuous mode [ 397.226855][ T8300] bridge0: port 1(erspan0) entered blocking state [ 397.233658][ T8300] bridge0: port 1(erspan0) entered forwarding state [ 397.399243][ T8301] erspan0: left allmulticast mode [ 397.404548][ T8301] erspan0: left promiscuous mode [ 397.412641][ T8301] bridge0: port 1(erspan0) entered disabled state [ 397.848313][ T8306] loop4: detected capacity change from 0 to 32768 [ 397.880501][ T8306] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.480 (8306) [ 397.909391][ T8306] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 397.919870][ T8306] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 397.928809][ T8306] BTRFS info (device loop4): metadata ratio 0 [ 397.934971][ T8306] BTRFS info (device loop4): turning on sync discard [ 397.941931][ T8306] BTRFS info (device loop4): using free space tree [ 398.032402][ T8306] BTRFS info (device loop4): enabling ssd optimizations [ 399.106869][ T7104] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 401.185391][ T8341] loop4: detected capacity change from 0 to 32768 [ 401.836135][ T8341] (syz.4.483,8341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 401.851247][ T8341] (syz.4.483,8341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 402.264635][ T8341] (syz.4.483,8341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 402.288299][ T6027] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 402.306822][ T8341] (syz.4.483,8341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 402.323254][ T8341] JBD2: Ignoring recovery information on journal [ 402.421253][ T8341] (syz.4.483,8341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 402.435535][ T8341] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 402.445444][ T8341] (syz.4.483,8341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 402.462318][ T8341] (syz.4.483,8341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 402.561253][ T8338] (syz.4.483,8338,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 402.575613][ T6027] usb 1-1: Using ep0 maxpacket: 8 [ 402.590306][ T6027] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 402.599639][ T8338] (syz.4.483,8338,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 402.613083][ T8338] (syz.4.483,8338,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 402.625924][ T8338] (syz.4.483,8338,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 402.634436][ T8338] (syz.4.483,8338,0):ocfs2_quota_read:201 ERROR: status = -5 [ 402.641970][ T8338] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5 [ 402.651131][ T8338] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 402.660906][ T8338] (syz.4.483,8338,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 402.668756][ T8338] (syz.4.483,8338,0):ocfs2_mknod:314 ERROR: status = -5 [ 402.676292][ T8338] (syz.4.483,8338,0):ocfs2_mknod:502 ERROR: status = -5 [ 402.683408][ T8338] (syz.4.483,8338,0):ocfs2_create:676 ERROR: status = -5 [ 402.818367][ T6027] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.848834][ T6027] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.910310][ T6027] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.953967][ T8349] trusted_key: encrypted_key: insufficient parameters specified [ 402.998297][ T6027] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.021455][ T7104] ocfs2: Unmounting device (7,4) on (node local) [ 403.165005][ T6027] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.592790][ T6027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.984830][ T6027] usb 1-1: can't set config #16, error -71 [ 404.028691][ T6027] usb 1-1: USB disconnect, device number 6 [ 405.108357][ T8357] loop0: detected capacity change from 0 to 16 [ 405.206047][ T8357] erofs: (device loop0): mounted with root inode @ nid 36. [ 408.206218][ T8380] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 408.526399][ T8384] netlink: 92 bytes leftover after parsing attributes in process `syz.4.493'. [ 409.561472][ T8386] loop4: detected capacity change from 0 to 4096 [ 409.580605][ T8386] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 410.569699][ T8386] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 410.714796][ T8386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.222622][ T7104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.428988][ T8422] loop3: detected capacity change from 0 to 256 [ 415.579097][ T8422] FAT-fs (loop3): Directory bread(block 64) failed [ 416.395827][ T8422] FAT-fs (loop3): Directory bread(block 65) failed [ 418.084492][ T8422] FAT-fs (loop3): Directory bread(block 66) failed [ 418.168405][ T8422] FAT-fs (loop3): Directory bread(block 67) failed [ 418.208695][ T8422] FAT-fs (loop3): Directory bread(block 68) failed [ 418.215316][ T8422] FAT-fs (loop3): Directory bread(block 69) failed [ 418.228435][ T8432] loop1: detected capacity change from 0 to 512 [ 418.270524][ T8422] FAT-fs (loop3): Directory bread(block 70) failed [ 418.277506][ T8422] FAT-fs (loop3): Directory bread(block 71) failed [ 418.284695][ T8422] FAT-fs (loop3): Directory bread(block 72) failed [ 418.292285][ T8422] FAT-fs (loop3): Directory bread(block 73) failed [ 418.346260][ T8432] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.505: corrupted inode contents [ 418.399256][ T8432] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 418.445745][ T8432] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.505: corrupted inode contents [ 418.494056][ T8432] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.505: mark_inode_dirty error [ 418.551239][ T8432] EXT4-fs (loop1): 1 orphan inode deleted [ 418.585973][ T8432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.673410][ T8440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.506'. [ 419.044969][ T8444] mmap: syz.1.505 (8444) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 419.621043][ T8446] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 419.786242][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.257542][ T8477] sctp: failed to load transform for md5: -2 [ 424.491140][ T8472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.808872][ T8497] loop0: detected capacity change from 0 to 1024 [ 428.426375][ T8497] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 428.475971][ T8497] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 428.549913][ T8497] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 428.558462][ T8497] EXT4-fs (loop0): orphan cleanup on readonly fs [ 428.599498][ T8497] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz.0.515: Invalid inode table block 0 in block_group 0 [ 428.614902][ T8497] EXT4-fs (loop0): Remounting filesystem read-only [ 428.621567][ T8497] Quota error (device loop0): write_blk: dquota write failed [ 428.629246][ T8497] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 428.639636][ T8497] EXT4-fs (loop0): 1 truncate cleaned up [ 428.657370][ T8497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.047939][ T8502] loop3: detected capacity change from 0 to 512 [ 429.066150][ T8502] ext4: Unknown parameter 'seclabel' [ 429.093420][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.484636][ T8050] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 434.768248][ T5967] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 435.132489][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 435.148723][ T5967] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 435.156901][ T5967] usb 4-1: config 0 has no interface number 0 [ 435.178310][ T5967] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 435.188445][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.196529][ T5967] usb 4-1: Product: syz [ 435.205793][ T5967] usb 4-1: Manufacturer: syz [ 435.211160][ T5967] usb 4-1: SerialNumber: syz [ 435.225191][ T5967] usb 4-1: config 0 descriptor?? [ 435.233859][ T5967] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 435.989791][ T5967] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 436.010220][ T5967] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 436.258996][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 436.332083][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 436.340826][ T5967] usb 4-1: USB disconnect, device number 6 [ 436.355128][ T5967] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 436.379737][ T5967] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 436.397817][ T5967] quatech2 4-1:0.51: device disconnected [ 439.265894][ T8566] fuse: Bad value for 'fd' [ 441.588936][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.595324][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.775832][ T8575] Bluetooth: MGMT ver 1.22 [ 446.577107][ T8600] loop4: detected capacity change from 0 to 2048 [ 446.950320][ T8600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.963438][ T8600] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.260981][ T7104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.611729][ T8609] loop0: detected capacity change from 0 to 1024 [ 447.619480][ T8609] hfsplus: unable to parse mount options [ 448.438583][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 450.474322][ T5836] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 451.353472][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 451.380774][ T8635] [U]  [ 451.395198][ T5836] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 451.439345][ T5836] usb 1-1: config 0 has no interface number 0 [ 451.461440][ T5836] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 451.472001][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.492276][ T5836] usb 1-1: Product: syz [ 451.496615][ T5836] usb 1-1: Manufacturer: syz [ 451.518058][ T5836] usb 1-1: SerialNumber: syz [ 451.527042][ T5836] usb 1-1: config 0 descriptor?? [ 451.551482][ T5836] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 451.579184][ T8639] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 452.383554][ T5836] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 452.462355][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 453.448682][ T5836] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 455.428669][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 455.561416][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 455.574533][ T5839] usb 1-1: USB disconnect, device number 7 [ 455.620979][ T5839] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 455.727884][ T8659] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 455.789137][ T5839] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 456.078870][ T5839] quatech2 1-1:0.51: device disconnected [ 456.160621][ T8659] syz.4.549: attempt to access beyond end of device [ 456.160621][ T8659] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 456.174163][ T8659] XFS (nbd4): SB validate failed with error -5. [ 462.018729][ T5836] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 462.308490][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 462.398355][ T5836] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 462.503265][ T5836] usb 1-1: config 0 has no interface number 0 [ 462.704673][ T5836] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 462.825540][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.846886][ T5836] usb 1-1: Product: syz [ 462.877468][ T5836] usb 1-1: Manufacturer: syz [ 462.894145][ T5836] usb 1-1: SerialNumber: syz [ 462.920977][ T5836] usb 1-1: config 0 descriptor?? [ 463.141096][ T5836] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 464.324054][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 468.238472][ T5836] usb 1-1: qt2_attach - failed to power on unit: -110 [ 468.245647][ T5836] quatech2: probe of 1-1:0.51 failed with error -110 [ 468.418470][ T5958] usb 1-1: USB disconnect, device number 8 [ 471.421595][ T8735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.566'. [ 471.433395][ T8735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.566'. [ 471.890385][ T8742] fuse: Bad value for 'fd' [ 473.902979][ T8754] loop3: detected capacity change from 0 to 256 [ 474.462438][ T8756] syz.1.563 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 475.620735][ T8754] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 475.709017][ T5958] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 475.898504][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 475.924433][ T5958] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 475.958258][ T5958] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 475.988597][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.018421][ T5958] usb 5-1: config 0 descriptor?? [ 478.831438][ T5822] usb 5-1: USB disconnect, device number 8 [ 478.911520][ T8770] loop0: detected capacity change from 0 to 128 [ 478.983480][ T8770] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.011514][ T8770] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.191932][ T8776] futex_wake_op: syz.4.578 tries to shift op by 144; fix this program [ 480.494620][ T8784] bond2: (slave ip6gretap1): Releasing active interface [ 480.548401][ T5836] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 480.770780][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 480.791407][ T5836] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 480.828274][ T8721] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 480.847288][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.849325][ T5836] usb 5-1: config 0 has no interface number 0 [ 480.906244][ T5836] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 480.926465][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.956767][ T5836] usb 5-1: Product: syz [ 480.968244][ T5836] usb 5-1: Manufacturer: syz [ 480.972920][ T5836] usb 5-1: SerialNumber: syz [ 481.003875][ T5836] usb 5-1: config 0 descriptor?? [ 481.039063][ T8721] usb 2-1: Using ep0 maxpacket: 32 [ 481.046825][ T5836] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 481.071493][ T8721] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 481.080023][ T8721] usb 2-1: config 0 has no interface number 0 [ 481.110787][ T8721] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 481.128215][ T8721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.136344][ T8721] usb 2-1: Product: syz [ 481.165679][ T8721] usb 2-1: Manufacturer: syz [ 481.177281][ T8788] fuse: Bad value for 'fd' [ 482.033670][ T8721] usb 2-1: SerialNumber: syz [ 482.039547][ T5836] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 482.059267][ T8721] usb 2-1: config 0 descriptor?? [ 482.076236][ T8721] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 482.087463][ T5836] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 482.099553][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 484.549859][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 484.550944][ T5822] usb 5-1: USB disconnect, device number 9 [ 484.621702][ T8721] usb 2-1: qt2_attach - failed to power on unit: -71 [ 484.658497][ T8721] quatech2: probe of 2-1:0.51 failed with error -71 [ 484.702746][ T5822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 484.732018][ T8721] usb 2-1: USB disconnect, device number 6 [ 484.784425][ T5822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 486.491836][ T8805] loop4: detected capacity change from 0 to 256 [ 486.691899][ T8805] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 486.853447][ T5822] quatech2 5-1:0.51: device disconnected [ 492.508067][ T8830] Cannot find add_set index 0 as target [ 493.456479][ T8838] loop4: detected capacity change from 0 to 16 [ 493.489025][ T8838] erofs: (device loop4): mounted with root inode @ nid 36. [ 495.101006][ T5836] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 495.389328][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 495.404611][ T5836] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 495.497204][ T8842] syz.4.593: attempt to access beyond end of device [ 495.497204][ T8842] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 495.512064][ T8842] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 496.338627][ T5836] usb 2-1: config 0 has no interface number 0 [ 496.348685][ T5836] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 496.358098][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.387210][ T5836] usb 2-1: Product: syz [ 496.429121][ T5836] usb 2-1: Manufacturer: syz [ 496.433830][ T5836] usb 2-1: SerialNumber: syz [ 496.534147][ T5836] usb 2-1: config 0 descriptor?? [ 496.544357][ T5836] usb 2-1: can't set config #0, error -71 [ 496.553109][ T5836] usb 2-1: USB disconnect, device number 7 [ 500.716915][ T8867] loop4: detected capacity change from 0 to 256 [ 500.738351][ T8867] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 501.642055][ T8871] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 502.249709][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.256181][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.713364][ T8884] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 506.722650][ T8884] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 508.758538][ T27] audit: type=1800 audit(1781302856.321:355): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.612" name="file0" dev="overlay" ino=448 res=0 errno=0 [ 509.528661][ T5967] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 509.675059][ T8899] ipvlan2: entered allmulticast mode [ 509.680892][ T8899] batadv_slave_1: entered allmulticast mode [ 509.694586][ T8899] batman_adv: batadv0: Adding interface: ipvlan2 [ 509.701124][ T8899] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.728328][ T8899] batman_adv: batadv0: Interface activated: ipvlan2 [ 509.788789][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 509.885768][ T5967] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 510.006018][ T5967] usb 5-1: config 0 has no interface number 0 [ 510.209695][ T5967] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 510.323751][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.351701][ T5967] usb 5-1: Product: syz [ 510.420576][ T5967] usb 5-1: Manufacturer: syz [ 510.453180][ T5967] usb 5-1: SerialNumber: syz [ 510.583887][ T5967] usb 5-1: config 0 descriptor?? [ 510.678879][ T5967] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 511.688722][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 511.958407][ T5822] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 514.469668][ T5967] usb 5-1: qt2_attach - failed to power on unit: -71 [ 514.476848][ T5967] quatech2: probe of 5-1:0.51 failed with error -71 [ 514.538695][ T5967] usb 5-1: USB disconnect, device number 10 [ 514.681364][ T8918] loop4: detected capacity change from 0 to 256 [ 514.704482][ T8918] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 514.886921][ T8921] loop3: detected capacity change from 0 to 16 [ 514.934792][ T8921] erofs: (device loop3): mounted with root inode @ nid 36. [ 515.473782][ T8925] syz.3.604: attempt to access beyond end of device [ 515.473782][ T8925] loop3: rw=0, sector=296, nr_sectors = 8 limit=16 [ 515.486989][ T8925] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 516.560280][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 516.580743][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 516.603545][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 516.625240][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 516.835062][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 516.882258][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 517.188302][ T5822] usb 1-1: device descriptor read/64, error -110 [ 518.661863][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 519.133746][ T51] Bluetooth: hci3: command tx timeout [ 520.476913][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.508845][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.644935][ T8928] bridge_slave_0: entered allmulticast mode [ 520.763957][ T8928] bridge_slave_0: entered promiscuous mode [ 521.102494][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.185191][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.224021][ T5790] Bluetooth: hci3: command tx timeout [ 521.278731][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 521.340530][ T8928] bridge_slave_1: entered allmulticast mode [ 521.527883][ T8928] bridge_slave_1: entered promiscuous mode [ 522.464614][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.629508][ T12] tipc: Left network mode [ 522.722272][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.278586][ T5790] Bluetooth: hci3: command tx timeout [ 523.373755][ T8928] team0: Port device team_slave_0 added [ 524.628715][ T8952] loop4: detected capacity change from 0 to 8192 [ 525.051940][ T8952] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 525.059444][ T8952] UDF-fs: Scanning with blocksize 512 failed [ 525.094022][ T8952] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 525.101498][ T8952] UDF-fs: Scanning with blocksize 1024 failed [ 525.118237][ T8952] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 525.125680][ T8952] UDF-fs: Scanning with blocksize 2048 failed [ 525.149027][ T8952] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.371673][ T5790] Bluetooth: hci3: command tx timeout [ 526.310185][ T8928] team0: Port device team_slave_1 added [ 526.694120][ T27] audit: type=1800 audit(1781302875.031:356): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.618" name="file0" dev="overlay" ino=920 res=0 errno=0 [ 527.466841][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.496466][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.629938][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.700563][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.744567][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.789355][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.897893][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.619'. [ 529.134833][ T8928] hsr_slave_0: entered promiscuous mode [ 529.185909][ T8928] hsr_slave_1: entered promiscuous mode [ 529.205614][ T8928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.270987][ T8928] Cannot create hsr debugfs directory [ 529.287868][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 529.296922][ T8976] netlink: 'syz.1.620': attribute type 2 has an invalid length. [ 529.305343][ T8976] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 533.637545][ T8928] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 537.118630][ T8928] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 537.298502][ T12] hsr_slave_0: left promiscuous mode [ 537.311024][ T12] hsr_slave_1: left promiscuous mode [ 537.848555][ T8721] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 538.048832][ T8721] usb 4-1: Using ep0 maxpacket: 32 [ 538.064762][ T8721] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 538.073477][ T8721] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.090261][ T8721] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.32 [ 538.107666][ T8721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.143888][ T8721] usb 4-1: Product: syz [ 538.155211][ T8721] usb 4-1: Manufacturer: syz [ 538.164164][ T8721] usb 4-1: SerialNumber: syz [ 540.248929][ T5967] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 540.476564][ T5967] usb 2-1: Using ep0 maxpacket: 32 [ 540.484537][ T5839] usb 4-1: USB disconnect, device number 7 [ 540.497143][ T5967] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 540.524859][ T5967] usb 2-1: config 0 has no interface number 0 [ 540.535464][ T5967] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 540.544908][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.553147][ T5967] usb 2-1: Product: syz [ 540.557374][ T5967] usb 2-1: Manufacturer: syz [ 540.562116][ T5967] usb 2-1: SerialNumber: syz [ 540.575632][ T5967] usb 2-1: config 0 descriptor?? [ 540.601895][ T5967] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 540.828874][ T5967] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 540.863720][ T5967] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 544.030900][ T12] bond0 (unregistering): Released all slaves [ 545.109855][ T8928] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 545.129715][ T8928] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 545.212159][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 545.273434][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 545.284478][ T5822] usb 2-1: USB disconnect, device number 8 [ 545.333165][ T5822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 545.433667][ T5822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 545.482258][ T5822] quatech2 2-1:0.51: device disconnected [ 547.282276][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.362488][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.461944][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.634'. [ 547.551864][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.559133][ T6480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.208816][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.217285][ T6480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.314490][ T9061] syz.4.634 (9061) used greatest stack depth: 17896 bytes left [ 548.702695][ T12] IPVS: stop unused estimator thread 0... [ 550.399900][ T9080] loop4: detected capacity change from 0 to 128 [ 550.585248][ T9080] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 550.678625][ T9080] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 550.692282][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.003554][ T7104] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 552.648539][ T9102] loop4: detected capacity change from 0 to 32768 [ 552.832911][ T6553] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 553.069132][ T9110] random: crng reseeded on system resumption [ 558.107044][ T8928] veth0_vlan: entered promiscuous mode [ 558.122020][ T8928] veth1_vlan: entered promiscuous mode [ 558.206975][ T8928] veth0_macvtap: entered promiscuous mode [ 558.219912][ T8928] veth1_macvtap: entered promiscuous mode [ 558.243076][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.255231][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 558.291273][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.326429][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.383254][ T8928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.425144][ T9128] kAFS: unable to lookup cell '' [ 558.463245][ T8928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.581412][ T8928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.703719][ T8928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.528432][ T6480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.536587][ T6480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.612025][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.629338][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.522788][ T9149] netlink: set zone limit has 8 unknown bytes [ 564.938778][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.945162][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.338246][ T5822] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 565.348980][ T9160] loop4: detected capacity change from 0 to 512 [ 565.390954][ T9160] EXT4-fs: Ignoring removed oldalloc option [ 565.419007][ T9160] EXT4-fs (loop4): filesystem is read-only [ 565.438393][ T9160] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 565.478773][ T9160] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 565.542237][ T9160] loop4: detected capacity change from 0 to 512 [ 565.548612][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 565.559228][ T9160] journal_path: Lookup failure for './file1' [ 565.585789][ T9160] EXT4-fs: error: could not find journal device path [ 565.606540][ T5822] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 565.833090][ T5822] usb 2-1: config 0 has no interface number 0 [ 565.900771][ T5822] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 565.922430][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.991066][ T9165] loop4: detected capacity change from 0 to 512 [ 565.998515][ T9165] EXT4-fs: Ignoring removed orlov option [ 566.005080][ T9165] EXT4-fs: Ignoring removed mblk_io_submit option [ 566.060304][ T5822] usb 2-1: Product: syz [ 566.064729][ T5822] usb 2-1: Manufacturer: syz [ 566.102715][ T5822] usb 2-1: SerialNumber: syz [ 566.140776][ T5822] usb 2-1: config 0 descriptor?? [ 566.210736][ T5822] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 566.620130][ T5822] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 566.696006][ T9165] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.644: corrupted in-inode xattr: e_value size too large [ 566.720371][ T9165] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.644: couldn't read orphan inode 15 (err -117) [ 566.798379][ T9165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.830244][ T5822] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 568.008673][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 568.611879][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 568.622689][ T5822] usb 2-1: USB disconnect, device number 9 [ 568.635761][ T7104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.663537][ T5822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 568.716394][ T5822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 568.738872][ T5822] quatech2 2-1:0.51: device disconnected [ 568.884625][ T9178] loop3: detected capacity change from 0 to 256 [ 574.059744][ T9205] futex_wake_op: syz.5.649 tries to shift op by 144; fix this program [ 576.540653][ T9221] block device autoloading is deprecated and will be removed. [ 581.403968][ T9267] netlink: 204 bytes leftover after parsing attributes in process `syz.3.663'. [ 582.277774][ T5822] ================================================================== [ 582.285972][ T5822] BUG: KASAN: slab-use-after-free in __io_req_complete_post+0x797/0x10a0 [ 582.294482][ T5822] Read of size 8 at addr ffff88802cf842d8 by task kworker/1:4/5822 [ 582.302378][ T5822] [ 582.304711][ T5822] CPU: 1 PID: 5822 Comm: kworker/1:4 Not tainted syzkaller #0 [ 582.312173][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.322238][ T5822] Workqueue: events ublk_stop_work_fn [ 582.327668][ T5822] Call Trace: [ 582.330958][ T5822] [ 582.333894][ T5822] dump_stack_lvl+0x18c/0x250 [ 582.338694][ T5822] ? __lock_acquire+0x7d40/0x7d40 [ 582.343817][ T5822] ? show_regs_print_info+0x20/0x20 [ 582.349027][ T5822] ? load_image+0x420/0x420 [ 582.353563][ T5822] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 582.359099][ T5822] ? __virt_addr_valid+0x18c/0x540 [ 582.364226][ T5822] ? __virt_addr_valid+0x469/0x540 [ 582.369352][ T5822] print_report+0xa8/0x210 [ 582.373781][ T5822] ? __io_req_complete_post+0x797/0x10a0 [ 582.379426][ T5822] kasan_report+0x117/0x150 [ 582.384076][ T5822] ? __io_req_complete_post+0x797/0x10a0 [ 582.389725][ T5822] __io_req_complete_post+0x797/0x10a0 [ 582.395205][ T5822] io_uring_cmd_done+0x247/0x370 [ 582.400159][ T5822] ? io_uring_cmd_do_in_task_lazy+0x70/0x70 [ 582.406070][ T5822] ? do_raw_spin_unlock+0x121/0x230 [ 582.411289][ T5822] ublk_cancel_dev+0x1f5/0x3a0 [ 582.416073][ T5822] ublk_stop_dev+0x36e/0x410 [ 582.420701][ T5822] ? _raw_spin_unlock_irq+0x23/0x50 [ 582.425968][ T5822] ? process_scheduled_works+0x96f/0x15d0 [ 582.431709][ T5822] ? process_scheduled_works+0x96f/0x15d0 [ 582.437475][ T5822] process_scheduled_works+0xa5d/0x15d0 [ 582.443051][ T5822] ? worker_attach_to_pool+0x380/0x380 [ 582.448527][ T5822] ? assign_work+0x3d2/0x5d0 [ 582.453133][ T5822] worker_thread+0xa55/0xfc0 [ 582.457748][ T5822] kthread+0x2fa/0x390 [ 582.461832][ T5822] ? pr_cont_work+0x560/0x560 [ 582.466523][ T5822] ? kthread_blkcg+0xd0/0xd0 [ 582.471123][ T5822] ret_from_fork+0x48/0x80 [ 582.475554][ T5822] ? kthread_blkcg+0xd0/0xd0 [ 582.480173][ T5822] ret_from_fork_asm+0x11/0x20 [ 582.485040][ T5822] [ 582.488086][ T5822] [ 582.490435][ T5822] Allocated by task 9212: [ 582.494804][ T5822] kasan_set_track+0x4e/0x70 [ 582.499436][ T5822] __kasan_kmalloc+0x8f/0xa0 [ 582.504070][ T5822] io_ring_ctx_alloc+0x54/0xc10 [ 582.509012][ T5822] io_uring_create+0x2de/0x1320 [ 582.513914][ T5822] __se_sys_io_uring_setup+0x29f/0x2b0 [ 582.519415][ T5822] do_syscall_64+0x55/0xb0 [ 582.523868][ T5822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.529971][ T5822] [ 582.532300][ T5822] Freed by task 12: [ 582.536105][ T5822] kasan_set_track+0x4e/0x70 [ 582.540721][ T5822] kasan_save_free_info+0x2e/0x50 [ 582.545802][ T5822] ____kasan_slab_free+0x126/0x1e0 [ 582.551306][ T5822] slab_free_freelist_hook+0x130/0x1a0 [ 582.556814][ T5822] __kmem_cache_free+0xba/0x1e0 [ 582.561717][ T5822] io_ring_exit_work+0x795/0x820 [ 582.566711][ T5822] process_scheduled_works+0xa5d/0x15d0 [ 582.572310][ T5822] worker_thread+0xa55/0xfc0 [ 582.576956][ T5822] kthread+0x2fa/0x390 [ 582.581065][ T5822] ret_from_fork+0x48/0x80 [ 582.585611][ T5822] ret_from_fork_asm+0x11/0x20 [ 582.590423][ T5822] [ 582.592784][ T5822] Last potentially related work creation: [ 582.598540][ T5822] kasan_save_stack+0x3e/0x60 [ 582.603249][ T5822] __kasan_record_aux_stack+0xaf/0xc0 [ 582.608654][ T5822] insert_work+0x3d/0x310 [ 582.613009][ T5822] __queue_work+0xc39/0x1020 [ 582.617621][ T5822] queue_work_on+0x128/0x1f0 [ 582.622317][ T5822] io_ring_ctx_wait_and_kill+0x256/0x2b0 [ 582.627988][ T5822] io_uring_release+0x42/0x50 [ 582.632702][ T5822] __fput+0x234/0x970 [ 582.636705][ T5822] task_work_run+0x1d4/0x260 [ 582.641328][ T5822] do_exit+0x95a/0x2460 [ 582.645512][ T5822] do_group_exit+0x21b/0x2d0 [ 582.650126][ T5822] get_signal+0x12fc/0x13f0 [ 582.654650][ T5822] arch_do_signal_or_restart+0xc2/0x800 [ 582.660260][ T5822] exit_to_user_mode_loop+0x70/0x110 [ 582.665576][ T5822] exit_to_user_mode_prepare+0xee/0x180 [ 582.671186][ T5822] syscall_exit_to_user_mode+0x1a/0x50 [ 582.676679][ T5822] do_syscall_64+0x61/0xb0 [ 582.681127][ T5822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.687067][ T5822] [ 582.689411][ T5822] The buggy address belongs to the object at ffff88802cf84000 [ 582.689411][ T5822] which belongs to the cache kmalloc-4k of size 4096 [ 582.703494][ T5822] The buggy address is located 728 bytes inside of [ 582.703494][ T5822] freed 4096-byte region [ffff88802cf84000, ffff88802cf85000) [ 582.717399][ T5822] [ 582.719747][ T5822] The buggy address belongs to the physical page: [ 582.726251][ T5822] page:ffffea0000b3e000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cf80 [ 582.736424][ T5822] head:ffffea0000b3e000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 582.745378][ T5822] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 582.753422][ T5822] page_type: 0xffffffff() [ 582.757771][ T5822] raw: 00fff00000000840 ffff888017c42140 dead000000000122 0000000000000000 [ 582.766373][ T5822] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 582.774975][ T5822] page dumped because: kasan: bad access detected [ 582.781415][ T5822] page_owner tracks the page as allocated [ 582.787143][ T5822] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9213, tgid 9211 (iou-wrk-9212), ts 576055555850, free_ts 572341140110 [ 582.810188][ T5822] post_alloc_hook+0x1c1/0x200 [ 582.815036][ T5822] get_page_from_freelist+0x1951/0x19e0 [ 582.820606][ T5822] __alloc_pages+0x1f0/0x460 [ 582.825219][ T5822] alloc_slab_page+0x5d/0x160 [ 582.829928][ T5822] new_slab+0x87/0x2d0 [ 582.834029][ T5822] ___slab_alloc+0xc5d/0x12f0 [ 582.838731][ T5822] __kmem_cache_alloc_node+0x19e/0x250 [ 582.844219][ T5822] kmalloc_trace+0x2a/0xe0 [ 582.848663][ T5822] kobject_uevent_env+0x274/0x8b0 [ 582.853745][ T5822] device_add+0x5e8/0xc50 [ 582.858118][ T5822] cdev_device_add+0x1d6/0x390 [ 582.862915][ T5822] ublk_add_chdev+0x135/0x1b0 [ 582.867620][ T5822] ublk_ctrl_add_dev+0xa39/0xb80 [ 582.872589][ T5822] ublk_ctrl_uring_cmd+0x4d7/0x5e0 [ 582.877728][ T5822] io_uring_cmd+0x149/0x410 [ 582.882261][ T5822] io_issue_sqe+0x2c5/0xc90 [ 582.886793][ T5822] page last free stack trace: [ 582.891484][ T5822] free_unref_page_prepare+0x7b2/0x8c0 [ 582.896974][ T5822] free_unref_page+0x32/0x2e0 [ 582.901681][ T5822] __unfreeze_partials+0x1cf/0x210 [ 582.906815][ T5822] put_cpu_partial+0x17c/0x250 [ 582.911595][ T5822] __slab_free+0x319/0x400 [ 582.916035][ T5822] qlist_free_all+0x75/0xd0 [ 582.920594][ T5822] kasan_quarantine_reduce+0x143/0x160 [ 582.926087][ T5822] __kasan_slab_alloc+0x22/0x80 [ 582.930965][ T5822] slab_post_alloc_hook+0x6e/0x4b0 [ 582.936102][ T5822] __kmem_cache_alloc_node+0x13a/0x250 [ 582.941585][ T5822] __kmalloc+0xa4/0x230 [ 582.945774][ T5822] tomoyo_realpath_from_path+0xe3/0x5d0 [ 582.951383][ T5822] tomoyo_path_perm+0x282/0x560 [ 582.956250][ T5822] security_path_truncate+0xd3/0x120 [ 582.961571][ T5822] vfs_truncate+0x21d/0x300 [ 582.966095][ T5822] do_sys_truncate+0xf6/0x1c0 [ 582.970797][ T5822] [ 582.973136][ T5822] Memory state around the buggy address: [ 582.978788][ T5822] ffff88802cf84180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 582.986876][ T5822] ffff88802cf84200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 582.994964][ T5822] >ffff88802cf84280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.003045][ T5822] ^ [ 583.010001][ T5822] ffff88802cf84300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.018089][ T5822] ffff88802cf84380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 583.026174][ T5822] ================================================================== [ 583.034323][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.157260][ T5822] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 583.164543][ T5822] CPU: 1 PID: 5822 Comm: kworker/1:4 Not tainted syzkaller #0 [ 583.172042][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 583.182141][ T5822] Workqueue: events ublk_stop_work_fn [ 583.187596][ T5822] Call Trace: [ 583.190915][ T5822] [ 583.193886][ T5822] dump_stack_lvl+0x18c/0x250 [ 583.198612][ T5822] ? show_regs_print_info+0x20/0x20 [ 583.203853][ T5822] ? load_image+0x420/0x420 [ 583.208410][ T5822] panic+0x2dc/0x730 [ 583.212386][ T5822] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 583.218602][ T5822] ? bpf_jit_dump+0xd0/0xd0 [ 583.223143][ T5822] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 583.229160][ T5822] ? _raw_spin_unlock+0x40/0x40 [ 583.234045][ T5822] ? __io_req_complete_post+0x797/0x10a0 [ 583.239705][ T5822] check_panic_on_warn+0x84/0xa0 [ 583.244671][ T5822] ? __io_req_complete_post+0x797/0x10a0 [ 583.250326][ T5822] end_report+0x6f/0x130 [ 583.254669][ T5822] kasan_report+0x128/0x150 [ 583.259200][ T5822] ? __io_req_complete_post+0x797/0x10a0 [ 583.265223][ T5822] __io_req_complete_post+0x797/0x10a0 [ 583.270751][ T5822] io_uring_cmd_done+0x247/0x370 [ 583.275733][ T5822] ? io_uring_cmd_do_in_task_lazy+0x70/0x70 [ 583.281658][ T5822] ? do_raw_spin_unlock+0x121/0x230 [ 583.286893][ T5822] ublk_cancel_dev+0x1f5/0x3a0 [ 583.291701][ T5822] ublk_stop_dev+0x36e/0x410 [ 583.296329][ T5822] ? _raw_spin_unlock_irq+0x23/0x50 [ 583.301567][ T5822] ? process_scheduled_works+0x96f/0x15d0 [ 583.307314][ T5822] ? process_scheduled_works+0x96f/0x15d0 [ 583.313063][ T5822] process_scheduled_works+0xa5d/0x15d0 [ 583.318657][ T5822] ? worker_attach_to_pool+0x380/0x380 [ 583.324151][ T5822] ? assign_work+0x3d2/0x5d0 [ 583.328766][ T5822] worker_thread+0xa55/0xfc0 [ 583.333408][ T5822] kthread+0x2fa/0x390 [ 583.337501][ T5822] ? pr_cont_work+0x560/0x560 [ 583.342210][ T5822] ? kthread_blkcg+0xd0/0xd0 [ 583.346861][ T5822] ret_from_fork+0x48/0x80 [ 583.351311][ T5822] ? kthread_blkcg+0xd0/0xd0 [ 583.355930][ T5822] ret_from_fork_asm+0x11/0x20 [ 583.360739][ T5822] [ 583.364350][ T5822] Kernel Offset: disabled [ 583.368715][ T5822] Rebooting in 86400 seconds..