last executing test programs: 43m29.318914687s ago: executing program 32 (id=263): setresgid(0xee00, 0xee01, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setgroups(0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x29b) semop(r1, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10000, &(0x7f0000000340), 0x1, 0x50b, &(0x7f0000000380)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L0mav1v63dMN+RABAADgL64Qtb/9L0w20oXC5GT9GtCh2FsoX19Y/F9EXJur3yMwGsXCpflyKb8gNxrFJL/+OdqUn27Jn86uG380MFLLT85eL89tdfCwy+2r9fmkrf+nflrjdV5gG9pB96EBa9Sr/x++t0k7Amw6v/+wezX1/25Ptqj4SxnYmfz+w+7Vqf/fjs9WvXfBdwZsf1V9GXa11ft/7+dtAtvXYLzZSNdue+54ty2wE3X//XdmADtY75vkh9Z87/9yojrU+a3h6PDEgOF1VdEzMdKhri1JpCOrDSywGBH9rTyyniryIWD3JzwU1lbgULS/NRCrbZV0fo5DRFS6bpV+Kj335/Lhfht/6UbytP6gzB4B5s9E2ehm8/lyPy32ebi7JH7rt/k53wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaU3wMAAP//hKnQPw==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000900), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x1) ioctl$TCSETS(r2, 0x89f2, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) r4 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) setuid(0xee00) getgroups(0x1, &(0x7f0000000280)=[r0]) r5 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f00000000c0)="89", 0x1) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x11, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4}, @noop, @noop, @timestamp={0x44, 0x8, 0xb1, 0x0, 0x9, [0x200007]}, @ssrr={0x89, 0x13, 0xd2, [@loopback, @remote, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x82, 0x4, "9c13"}]}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb}, "b83532727c38417e"}}}}}, 0x0) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 43m22.092755415s ago: executing program 33 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000007c0)={0x2, 0x4e23, @multicast2}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000080)=0x2a0) 41m24.014295604s ago: executing program 34 (id=393): ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f000000a200), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000000a240)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f000000a280), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f000000a2c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f000000a300)={0x0, 0x0, &(0x7f000000a340)={&(0x7f000000a380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f000000a4c0)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f000000a500)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f000000a540)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f000000a580)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f000000a5c0)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 38m39.187303395s ago: executing program 35 (id=564): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1a000, 0x8040) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) 36m15.186911946s ago: executing program 36 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000007c0)={0x2, 0x4e23, @multicast2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./mysys\x00', 0x1ff) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000080)=0x2a0) 33m6.545219013s ago: executing program 37 (id=936): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000500)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x80007, 0x4101, 0x4000000000000b, 0x1, 0x7, 0x400000400, 0x80000000000a, 0x5, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x761c9023, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 32m45.827161288s ago: executing program 38 (id=955): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000100)=""/95, 0x5f, 0x1000, 0x7}) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x42, 0x1ff) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14000000f803"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) mount(0x0, &(0x7f0000000540)='./tracing\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000740), 0x1, 0x269, &(0x7f0000000dc0)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001180)) renameat2(0xffffffffffffff9c, &(0x7f0000001400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000001500)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 26m44.442970028s ago: executing program 39 (id=1271): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3, 0x20000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x3c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x251, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 25m3.644180082s ago: executing program 40 (id=1366): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1a000, 0x8040) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m31.340027622s ago: executing program 41 (id=1673): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000019580)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f00000195c0)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000019700), 0x800001d, 0x1c) 19m22.759801169s ago: executing program 42 (id=1680): syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22400) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, 0xffffffffffffffff, 0xd0b5b000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000023c0)=""/102392, 0x18ff8) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f000001b3c0)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f000001b400), 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x80, 0x0) read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020) 18m12.720383252s ago: executing program 43 (id=1740): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1a000, 0x8040) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) 16m36.959887878s ago: executing program 44 (id=1855): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 12m56.553442466s ago: executing program 45 (id=2162): syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) 12m47.69953115s ago: executing program 6 (id=2186): setresgid(0xee00, 0xee01, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setgroups(0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x29b) semop(r1, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10000, &(0x7f0000000340), 0x1, 0x50b, &(0x7f0000000380)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x1) ioctl$TCSETS(r2, 0x89f2, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) r4 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) setuid(0xee00) getgroups(0x1, &(0x7f0000000280)=[r0]) r5 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f00000000c0)="89", 0x1) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x11, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4}, @noop, @noop, @timestamp={0x44, 0x8, 0xb1, 0x0, 0x9, [0x200007]}, @ssrr={0x89, 0x13, 0xd2, [@loopback, @remote, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x82, 0x4, "9c13"}]}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb}, "b83532727c38417e"}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0xa08, 0x4) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 12m42.615967703s ago: executing program 6 (id=2190): syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22400) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, 0xffffffffffffffff, 0xd0b5b000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000023c0)=""/102392, 0x18ff8) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x80, 0x0) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) 12m41.025535953s ago: executing program 6 (id=2191): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e0}}], 0x1, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x2, 0x2001) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000019840)=0x1, 0x4) syz_open_procfs(0x0, &(0x7f00000198c0)='fdinfo/4\x00') 12m32.326500881s ago: executing program 6 (id=2194): setresgid(0xee00, 0xee01, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) setgroups(0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10000, &(0x7f0000000340), 0x1, 0x50b, &(0x7f0000000380)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000900), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x1) ioctl$TCSETS(r1, 0x89f2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) r3 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, 0x0) setuid(0xee00) getgroups(0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r4, 0x0, 0xb, &(0x7f00000000c0)="89", 0x1) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x11, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4}, @noop, @noop, @timestamp={0x44, 0x8, 0xb1, 0x0, 0x9, [0x200007]}, @ssrr={0x89, 0x13, 0xd2, [@loopback, @remote, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x82, 0x4, "9c13"}]}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb}, "b83532727c38417e"}}}}}, 0x0) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 12m27.505408168s ago: executing program 6 (id=2203): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e0}}], 0x1, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x2, 0x2001) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000019840)=0x1, 0x4) syz_open_procfs(0x0, &(0x7f00000198c0)='fdinfo/4\x00') 12m11.748707958s ago: executing program 46 (id=2203): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e0}}], 0x1, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x2, 0x2001) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000800)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000019840)=0x1, 0x4) syz_open_procfs(0x0, &(0x7f00000198c0)='fdinfo/4\x00') 9m3.411023369s ago: executing program 5 (id=2441): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x81) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000019580)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f00000195c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000019600)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffa, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000019700), 0x800001d, 0x1c) 9m2.41060928s ago: executing program 5 (id=2444): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000200)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0), 0x0, 0x20000854) 8m59.524374872s ago: executing program 5 (id=2447): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102400, 0x19000) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x2a) 8m57.736628202s ago: executing program 5 (id=2448): r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22400) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, 0xffffffffffffffff, 0xd0b5b000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f00000023c0)=""/102392, 0x18ff8) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f000001b3c0)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r4, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f000001b400), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000340)) 8m51.80828447s ago: executing program 5 (id=2456): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000019580)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000019600)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffa, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000019700), 0x800001d, 0x1c) 8m48.511857983s ago: executing program 5 (id=2459): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000640)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="307ddfb90fb58ea26e7519ece1faecb59bf6246bb080d7543699ad6e25f0049775959f73da3df93437fea1341d5222b70ef28f3ae42b1399cddfe4fd55493029141662", 0x43}], 0x1}}], 0x3, 0x2000c8c0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="e8000000100001"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000008c0)}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/225, 0xe1}], 0x12}, 0x1003}], 0x1, 0x100, 0x0) 8m32.308494569s ago: executing program 47 (id=2459): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000640)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="307ddfb90fb58ea26e7519ece1faecb59bf6246bb080d7543699ad6e25f0049775959f73da3df93437fea1341d5222b70ef28f3ae42b1399cddfe4fd55493029141662", 0x43}], 0x1}}], 0x3, 0x2000c8c0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="e8000000100001"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000008c0)}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=""/225, 0xe1}], 0x12}, 0x1003}], 0x1, 0x100, 0x0) 6m37.990471998s ago: executing program 3 (id=2640): syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) 6m30.230460982s ago: executing program 3 (id=2650): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1a000, 0x8040) mount(0x0, 0x0, 0x0, 0x0, 0x0) 6m27.46914326s ago: executing program 3 (id=2654): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0x2, 0x0, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) openat(0xffffffffffffffff, 0x0, 0x1, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a40)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000001a80)=0x8) r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc4c85513, &(0x7f00000002c0)={0xb, 0x1, 0x0, 0x0, '\x00', 0xfffffffc}) 6m26.199793809s ago: executing program 3 (id=2658): pipe2(0x0, 0x4800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000780)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r4, &(0x7f0000002f40)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f000001bf40)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r5, 0x0, 0x0, 0x6, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f000001cfc0)={0x0, 0x0, &(0x7f000001d000)={&(0x7f000001d040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d100)={&(0x7f000001d140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xff}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 6m24.260505214s ago: executing program 3 (id=2661): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f0000019580)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f00000195c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000019600)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffa, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000019700), 0x800001d, 0x1c) 6m21.933811689s ago: executing program 3 (id=2664): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80080100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) read$FUSE(r0, &(0x7f00000193c0)={0x2020}, 0x2020) 6m6.86676063s ago: executing program 48 (id=2664): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80080100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) read$FUSE(r0, &(0x7f00000193c0)={0x2020}, 0x2020) 4m58.876930923s ago: executing program 7 (id=2777): setresgid(0xee00, 0xee01, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setgroups(0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x29b) semop(r1, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10000, &(0x7f0000000340), 0x1, 0x50b, &(0x7f0000000380)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000900), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x1) ioctl$TCSETS(r2, 0x89f2, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) r4 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) setuid(0xee00) getgroups(0x1, &(0x7f0000000280)=[r0]) r5 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r5, 0x0, 0xb, &(0x7f00000000c0)="89", 0x1) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x10, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4}, @noop, @noop, @timestamp={0x44, 0x8, 0xb1, 0x0, 0x9, [0x200007]}, @ssrr={0x89, 0xf, 0xd2, [@loopback, @remote, @remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x82, 0x4, "9c13"}]}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb}, "b83532727c38417e"}}}}}, 0x0) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 4m56.458047397s ago: executing program 7 (id=2780): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0x2, 0x0, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a40)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x1a) 4m54.295465855s ago: executing program 7 (id=2784): signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a00)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f000001ae40)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x9, 0xfffffffffffffff7, 0x80000000, 0x100000001]}, &(0x7f000001aec0)=0x78) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4m52.694936507s ago: executing program 7 (id=2787): syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) 4m48.920677838s ago: executing program 7 (id=2790): syz_ublk_setup_io_uring(0x622, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x155}, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/102392, 0x18ff8) sendfile(r0, r0, 0x0, 0x20000005) 4m47.660576815s ago: executing program 7 (id=2792): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0x2, 0x0, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f00000002c0)={0xb, 0x1, 0x0, 0x0, '\x00', 0xfffffffc}) 4m32.559954129s ago: executing program 49 (id=2792): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0x2, 0x0, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f00000002c0)={0xb, 0x1, 0x0, 0x0, '\x00', 0xfffffffc}) 4m18.558029533s ago: executing program 0 (id=2820): pipe2(0x0, 0x4800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000780)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r4, &(0x7f0000002f40)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f000001bf40)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r5, 0x0, 0x0, 0x6, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f000001cfc0)={0x0, 0x0, &(0x7f000001d000)={&(0x7f000001d040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d100)={&(0x7f000001d140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xff}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000ec0)={0x2020}, 0x2020) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x30, 0x0, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0xc40) 4m15.879158783s ago: executing program 0 (id=2823): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040810) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000354, 0x42, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000900), &(0x7f0000000940)=0x14) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x101341) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000400)={0x1, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgrp2/cgroup.subtree_control\x00', 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x65) ioctl$UI_DEV_CREATE(r4, 0x5501) 4m3.064339197s ago: executing program 0 (id=2832): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 4m1.651010009s ago: executing program 0 (id=2833): ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f00000040c0)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f000001d0c0)='/sys/kernel/fscaps', 0x600203, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r5, &(0x7f0000000340), 0xffffff98) splice(r4, 0x0, r2, 0x0, 0x100000006, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3m57.902222408s ago: executing program 0 (id=2838): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000019580)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f00000195c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000019600)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffa, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000019700), 0x800001d, 0x1c) 3m45.995231469s ago: executing program 0 (id=2847): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0x2, 0x0, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) write(r5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a40)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000001a80)=0x8) r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc4c85513, &(0x7f00000002c0)={0xb, 0x1, 0x0, 0x0, '\x00', 0xfffffffc}) 3m29.816441543s ago: executing program 50 (id=2847): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0x2, 0x0, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) write(r5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a40)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000001a80)=0x8) r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc4c85513, &(0x7f00000002c0)={0xb, 0x1, 0x0, 0x0, '\x00', 0xfffffffc}) 2m22.059889482s ago: executing program 2 (id=2923): setresgid(0xee00, 0xee01, 0x0) getresgid(&(0x7f0000000000), 0x0, &(0x7f0000000080)) setgroups(0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10000, &(0x7f0000000340), 0x1, 0x50b, &(0x7f0000000380)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000900), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x1) semctl$IPC_SET(r0, 0x0, 0x1, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) socket$inet6(0xa, 0x3, 0xfa) setuid(0xee00) r3 = socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x11, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4}, @noop, @noop, @timestamp={0x44, 0x8, 0xb1, 0x0, 0x9, [0x200007]}, @ssrr={0x89, 0x13, 0xd2, [@loopback, @remote, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x82, 0x4, "9c13"}]}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb}, "b83532727c38417e"}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0xa08, 0x4) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 2m19.202038321s ago: executing program 2 (id=2930): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80080100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) read$FUSE(r0, &(0x7f00000193c0)={0x2020}, 0x2020) 2m15.236539811s ago: executing program 2 (id=2936): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f0000000000)="060000007f00000100500000000000006d6800"/44, 0x2c) setsockopt(r0, 0x0, 0x487, 0x0, 0x0) 2m12.723262035s ago: executing program 2 (id=2941): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000019580)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f00000195c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000019600)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffa, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000019700), 0x800001d, 0x1c) 2m12.346310073s ago: executing program 2 (id=2943): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000019300)=0x80000000000003) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) 2m10.78488007s ago: executing program 2 (id=2944): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f0000000000)="060000007f00000100500000000000006d6800"/44, 0x2c) setsockopt(r0, 0x0, 0x487, &(0x7f0000000040)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) setsockopt(r0, 0x0, 0x484, &(0x7f0000000140)="060000007f00000100500000000000006d6800"/44, 0x2c) 1m55.52628424s ago: executing program 51 (id=2944): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f0000000000)="060000007f00000100500000000000006d6800"/44, 0x2c) setsockopt(r0, 0x0, 0x487, &(0x7f0000000040)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) setsockopt(r0, 0x0, 0x484, &(0x7f0000000140)="060000007f00000100500000000000006d6800"/44, 0x2c) 10.01760912s ago: executing program 1 (id=3082): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x5d) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xfa, 0x2, 0xffff}]}, 0x10) 4.67097356s ago: executing program 1 (id=3077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00008a4000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000900)={0x0, &(0x7f0000001a80)=[@wrmsr={0x65, 0x20, {0x40000105, 0xffffffff00000001}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000001ac0)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.120929106s ago: executing program 8 (id=3078): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002480)='./proc/thread-self/fail-nth\x00', 0x2, 0x10d) write(r0, &(0x7f00000024c0)='10', 0x2) unshare(0x6000480) 2.49898007s ago: executing program 8 (id=3084): mkdirat(0xffffffffffffff9c, &(0x7f0000004bc0)='./mnt\x00', 0x1ff) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb2a}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x4000004) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, 0x0) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @core='@stats_print 0 0 10'}}) mount(0x0, &(0x7f0000004c80)='./mnt\x00', &(0x7f0000004cc0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004dc0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f0000004e00)=""/16384, 0x4000) 2.362854414s ago: executing program 1 (id=3085): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) listen(r0, 0x8) 2.362640103s ago: executing program 4 (id=3087): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debugfs\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000180)="00ffffffffffff0031d8000000003a0005160104a51f11782ade95a3544c99260f50540000000101010101010101010101010101010164190040410026301888360030e41000001800000010000000000000000000000000000000fd00324b1e5009000a202020202020000000fc00564b4d530a2020202020202020007c", 0x80) 2.204690119s ago: executing program 4 (id=3089): mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x0) mount(&(0x7f0000000a00)=@filename='mtd0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000ac0)='./file0\x00') mknodat$md(0xffffffffffffff9c, &(0x7f0000000ec0)='./md0\x00', 0x6180, 0x0) 2.090937031s ago: executing program 1 (id=3090): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.090607581s ago: executing program 9 (id=3091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x6a1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000980)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000004c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_ACT={0x4}, @TCA_BASIC_ACT={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000ac0), 0x56) sendmsg$kcm(r6, &(0x7f0000000e80)={&(0x7f0000000ec0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f80)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.90387424s ago: executing program 4 (id=3092): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x10d) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 1.722403618s ago: executing program 9 (id=3093): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1b7) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) r0 = open$dir(&(0x7f0000000280)='./mnt\x00', 0x0, 0x2) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000002c0)=0x2) openat(r0, &(0x7f0000000380)='./mnt\x00', 0x40, 0x33) 1.571962073s ago: executing program 9 (id=3094): mknodat$md(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f00000001c0)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000200)={0x0, 0x5a, 0x0, 0x40, 0x1, 0xb7e, 0x0, 0x403, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000280)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f00000002c0)={0x4, {0x1, 0x0}, 0x0, 0x220}) 1.448500546s ago: executing program 8 (id=3095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000a80)="b80e0000000f23c80f21f835040040000f23f8b8af2b00000f23d00f21f83520000009c10f23f8f8ba4100b86551c9d966b83e000f00d0c4c219bff60f01703cb9800000c00f3235008000000f300f239cb9ed080000b807000000ba000000000f30df0bd2f4", 0x66}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.188618502s ago: executing program 4 (id=3096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x7, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 905.66323ms ago: executing program 8 (id=3097): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000004c0)) 770.826854ms ago: executing program 4 (id=3098): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x800, 0x0, 0x68, 'integrity\x00', {{@ram={'/dev/ram', 0x1}, 0x20, '16'}, 0x20, '8', 0x20, 'R', ' 2 internal_hash:crc32c reset_recalculate'}}]}) 670.539384ms ago: executing program 9 (id=3099): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xe00, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0xa0001, 0x0, 0x0, @by_dev={r4}, [@striped={0x0, 0xc00, 0x0, 0x60, 'striped\x00', {0x1, 0x20, '128', [{0x20, {@ram_num={'1:', 0x0}, 0x20, '1024'}}]}}]}) 496.039982ms ago: executing program 8 (id=3100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000500)="0711c7e537c9c5950f4e93dc42dfb3659b02c9c207d4c4d573852c3a4e4c31fa8f8fafd9aa6ce7773161e0b7141eff71fd9127040b574ab4695905aa962880be56379f1d965ee52208008ced39197621d7ba2e106932333d", 0x58, 0x1010, 0x0, 0x0) 335.022938ms ago: executing program 9 (id=3101): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./dev\x00', &(0x7f0000000b40)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./mnt\x00', 0x1b7) mount(&(0x7f0000000bc0)=@filename='./dev/sda1\x00', &(0x7f0000000c00)='./mnt\x00', &(0x7f0000000c40)='ext4\x00', 0x808412, 0x0) r0 = open$dir(&(0x7f0000000c80)='./mnt\x00', 0x0, 0x2) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000cc0)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 269.881874ms ago: executing program 8 (id=3102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) setns(0xc9, 0x0) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') 235.728468ms ago: executing program 4 (id=3103): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000003500)='./proc\x00', &(0x7f0000003540)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000003580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000035c0)='270', 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) pipe2$watch_queue(0x0, 0x80) mount(0x0, &(0x7f0000025cc0)='./proc\x00', &(0x7f0000025d00)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000025d40)='./dir0\x00', 0x1ff) mount(&(0x7f0000025d80)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000025dc0)='./dir0\x00', &(0x7f0000025e00)='ceph\x00', 0x0, 0x0) 154.823735ms ago: executing program 1 (id=3104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1b7) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) r0 = open$dir(&(0x7f0000000280)='./mnt\x00', 0x0, 0x2) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000002c0)=0x2) 153.552225ms ago: executing program 9 (id=3105): openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{0x81, 0x3}, {0x4, 0x1ff}], 0xee01}, 0x18, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000001280)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./file2\x00', 0x2c3) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380), 0x0, &(0x7f00000013c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000001400)='./file0/file1\x00', 0xe2) 102.541981ms ago: executing program 6 (id=2963): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/51, 0x0}) 0s ago: executing program 1 (id=3106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000a80)="b80e0000000f23c80f21f835040040000f23f8b8af2b00000f23d00f21f83520000009c10f23f8f8ba4100b86551c9d966b83e000f00d0c4c219bff60f01703cb9800000c00f3235008000000f300f239cb9ed080000b807000000ba000000000f30df0bd2f4", 0x66}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): bond_slave_0): Enslaving as an active interface with an up link [ 2618.341703][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2618.358546][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2618.392140][T20566] device veth0_vlan entered promiscuous mode [ 2619.917461][T20795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2620.013124][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2620.068337][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2620.119142][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2620.157987][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2620.171834][T20566] device veth1_vlan entered promiscuous mode [ 2620.253978][T20795] team0: Port device team_slave_0 added [ 2620.321933][T20795] team0: Port device team_slave_1 added [ 2620.386969][T20566] device veth0_macvtap entered promiscuous mode [ 2620.468811][T19432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2620.488088][T19432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2620.578935][T19432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2620.629696][T20566] device veth1_macvtap entered promiscuous mode [ 2620.662875][T20795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2620.671496][T20795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2620.777524][T20795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2620.891734][T20795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2620.898904][T20795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2620.989092][T20795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2621.054341][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2621.124688][T20566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2621.176962][T20566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.207676][T20566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2621.257399][T20566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.267270][T20566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2621.307395][T20566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.317275][T20566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2621.387390][T20566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.409199][T20566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2621.447428][T19432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2621.495210][T19432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2621.530213][T20795] device hsr_slave_0 entered promiscuous mode [ 2621.558531][T20795] device hsr_slave_1 entered promiscuous mode [ 2621.577626][T20795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2621.585252][T20795] Cannot create hsr debugfs directory [ 2621.661507][T20566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2621.707600][T20566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.797338][T20566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2621.847508][T20566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.907334][T20566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2621.955345][T20566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2621.968214][T20566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2622.007304][T20566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2622.060696][T20566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2622.138695][T19432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2622.208307][T19432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2622.342301][T20566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2622.377356][T20566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2622.386120][T20566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2622.457314][T20566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2622.830848][T20904] FAULT_INJECTION: forcing a failure. [ 2622.830848][T20904] name failslab, interval 1, probability 5, space 0, times 10000 [ 2622.911129][T20904] CPU: 0 PID: 20904 Comm: syz.1.2824 Not tainted syzkaller #0 [ 2622.918620][T20904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2622.928685][T20904] Call Trace: [ 2622.931987][T20904] [ 2622.934945][T20904] dump_stack_lvl+0x188/0x24e [ 2622.939659][T20904] ? show_regs_print_info+0x12/0x12 [ 2622.944862][T20904] ? load_image+0x410/0x410 [ 2622.949364][T20904] ? __might_sleep+0xd0/0xd0 [ 2622.953961][T20904] ? __lock_acquire+0x7ea0/0x7ea0 [ 2622.959003][T20904] should_fail_ex+0x390/0x4c0 [ 2622.963681][T20904] should_failslab+0x5/0x20 [ 2622.968201][T20904] slab_pre_alloc_hook+0x59/0x300 [ 2622.973262][T20904] ? vidtv_psi_pat_program_init+0x56/0x270 [ 2622.979093][T20904] __kmem_cache_alloc_node+0x4f/0x270 [ 2622.984491][T20904] ? kstrdup+0x52/0x70 [ 2622.988630][T20904] ? vidtv_psi_pat_program_init+0x56/0x270 [ 2622.994456][T20904] kmalloc_trace+0x26/0xe0 [ 2622.998872][T20904] vidtv_psi_pat_program_init+0x56/0x270 [ 2623.004609][T20904] vidtv_channel_s302m_init+0x1f0/0x830 [ 2623.010175][T20904] ? vidtv_mux_init+0x3ad/0x1950 [ 2623.015117][T20904] vidtv_channels_init+0x41/0x90 [ 2623.020072][T20904] vidtv_mux_init+0x4d0/0x1950 [ 2623.024871][T20904] vidtv_start_feed+0x368/0x590 [ 2623.029724][T20904] ? vidtv_i2c_func+0x10/0x10 [ 2623.034400][T20904] ? vidtv_stop_feed+0x250/0x250 [ 2623.039338][T20904] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2623.044536][T20904] ? lockdep_hardirqs_on+0x94/0x140 [ 2623.049771][T20904] dmx_ts_feed_start_filtering+0x11c/0x210 [ 2623.055605][T20904] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 2623.061497][T20904] dvb_dmxdev_filter_start+0x422/0x1060 [ 2623.067063][T20904] dvb_demux_do_ioctl+0x48d/0x530 [ 2623.072179][T20904] dvb_usercopy+0x191/0x2b0 [ 2623.076682][T20904] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 2623.082227][T20904] ? dvb_generic_ioctl+0xb0/0xb0 [ 2623.087200][T20904] ? dvb_demux_poll+0x210/0x210 [ 2623.092083][T20904] dvb_demux_ioctl+0x25/0x30 [ 2623.096677][T20904] __se_sys_ioctl+0xfa/0x170 [ 2623.101284][T20904] do_syscall_64+0x4c/0xa0 [ 2623.105711][T20904] ? clear_bhb_loop+0x60/0xb0 [ 2623.110420][T20904] ? clear_bhb_loop+0x60/0xb0 [ 2623.115131][T20904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2623.121031][T20904] RIP: 0033:0x7f4c4f99fb19 [ 2623.125534][T20904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2623.145239][T20904] RSP: 002b:00007f4c4dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2623.153691][T20904] RAX: ffffffffffffffda RBX: 00007f4c4fc26090 RCX: 00007f4c4f99fb19 [ 2623.161664][T20904] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000008 [ 2623.169636][T20904] RBP: 00007f4c4fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2623.177605][T20904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2623.185580][T20904] R13: 00007f4c4fc26128 R14: 00007f4c4fc26090 R15: 00007ffe64636948 [ 2623.193562][T20904] [ 2624.127997][ T4616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2624.150889][ T4616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2624.323212][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2624.442637][ T4616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2624.467105][ T4616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2624.564172][T19432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2628.098999][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 2628.187967][T20933] CIFS mount error: No usable UNC path provided in device string! [ 2628.187967][T20933] [ 2628.236846][T20933] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2630.310057][T20945] usb usb8: usbfs: process 20945 (syz.0.2823) did not claim interface 0 before use [ 2631.152365][T20795] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2632.479366][T20795] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2632.525554][T20795] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2634.875610][T20795] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2636.498756][T19448] device hsr_slave_0 left promiscuous mode [ 2639.415428][T19448] device hsr_slave_1 left promiscuous mode [ 2639.435507][T19448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2639.442985][T19448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2639.626039][T19448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2639.633555][T19448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2641.493317][T19448] device bridge_slave_1 left promiscuous mode [ 2641.499937][T19448] bridge0: port 2(bridge_slave_1) entered disabled state [ 2641.579291][T19448] device bridge_slave_0 left promiscuous mode [ 2641.595155][T19448] bridge0: port 1(bridge_slave_0) entered disabled state [ 2641.825721][T19448] device veth1_macvtap left promiscuous mode [ 2641.831848][T19448] device veth0_macvtap left promiscuous mode [ 2641.865068][T19448] device veth1_vlan left promiscuous mode [ 2641.870950][T19448] device veth0_vlan left promiscuous mode [ 2643.931116][T21001] loop2: detected capacity change from 0 to 512 [ 2645.996818][T21001] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.2843: iget: bad i_size value: 38620345925642 [ 2646.067624][T21001] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2843: couldn't read orphan inode 15 (err -117) [ 2646.162795][T21001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2647.093771][T21001] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2843: bg 0: block 5: invalid block bitmap [ 2647.153788][T21001] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 568 with error 28 [ 2647.181593][T21001] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2647.181593][T21001] [ 2647.254488][T21001] EXT4-fs (loop2): Total free blocks count 0 [ 2647.260553][T21001] EXT4-fs (loop2): Free/Dirty block details [ 2647.319479][T21001] EXT4-fs (loop2): free_blocks=0 [ 2647.335098][T21001] EXT4-fs (loop2): dirty_blocks=568 [ 2647.356896][T21001] EXT4-fs (loop2): Block reservation details [ 2647.362958][T21001] EXT4-fs (loop2): i_reserved_data_blocks=568 [ 2649.261497][T20566] EXT4-fs (loop2): unmounting filesystem. [ 2651.647264][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.653558][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.277574][T21088] CIFS mount error: No usable UNC path provided in device string! [ 2652.277574][T21088] [ 2652.337950][T21088] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2658.597440][T19448] team0 (unregistering): Port device team_slave_1 removed [ 2658.737545][T21115] FAULT_INJECTION: forcing a failure. [ 2658.737545][T21115] name failslab, interval 1, probability 5, space 0, times 10000 [ 2658.766180][T19448] team0 (unregistering): Port device team_slave_0 removed [ 2658.775638][T21115] CPU: 0 PID: 21115 Comm: syz.2.2855 Not tainted syzkaller #0 [ 2658.783147][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2658.793231][T21115] Call Trace: [ 2658.796536][T21115] [ 2658.799492][T21115] dump_stack_lvl+0x188/0x24e [ 2658.804209][T21115] ? show_regs_print_info+0x12/0x12 [ 2658.809411][T21115] ? load_image+0x410/0x410 [ 2658.814001][T21115] ? __might_sleep+0xd0/0xd0 [ 2658.818586][T21115] ? __lock_acquire+0x7ea0/0x7ea0 [ 2658.823631][T21115] should_fail_ex+0x390/0x4c0 [ 2658.828343][T21115] should_failslab+0x5/0x20 [ 2658.832859][T21115] slab_pre_alloc_hook+0x59/0x300 [ 2658.837900][T21115] ? vidtv_psi_short_event_desc_init+0x290/0x6b0 [ 2658.844241][T21115] __kmem_cache_alloc_node+0x4f/0x270 [ 2658.849650][T21115] ? vidtv_psi_short_event_desc_init+0x290/0x6b0 [ 2658.855995][T21115] __kmalloc_node_track_caller+0xa0/0x240 [ 2658.861727][T21115] kstrdup+0x37/0x70 [ 2658.865637][T21115] vidtv_psi_short_event_desc_init+0x290/0x6b0 [ 2658.871803][T21115] vidtv_channel_s302m_init+0x3f0/0x830 [ 2658.877361][T21115] ? vidtv_mux_init+0x3ad/0x1950 [ 2658.882319][T21115] vidtv_channels_init+0x41/0x90 [ 2658.887266][T21115] vidtv_mux_init+0x4d0/0x1950 [ 2658.892061][T21115] vidtv_start_feed+0x368/0x590 [ 2658.897012][T21115] ? vidtv_i2c_func+0x10/0x10 [ 2658.901697][T21115] ? vidtv_stop_feed+0x250/0x250 [ 2658.906647][T21115] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2658.911854][T21115] ? lockdep_hardirqs_on+0x94/0x140 [ 2658.917064][T21115] dmx_ts_feed_start_filtering+0x11c/0x210 [ 2658.922882][T21115] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 2658.928791][T21115] dvb_dmxdev_filter_start+0x422/0x1060 [ 2658.934372][T21115] dvb_demux_do_ioctl+0x48d/0x530 [ 2658.939416][T21115] dvb_usercopy+0x191/0x2b0 [ 2658.943931][T21115] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 2658.949494][T21115] ? dvb_generic_ioctl+0xb0/0xb0 [ 2658.954548][T21115] ? dvb_demux_poll+0x210/0x210 [ 2658.959414][T21115] dvb_demux_ioctl+0x25/0x30 [ 2658.964046][T21115] __se_sys_ioctl+0xfa/0x170 [ 2658.968653][T21115] do_syscall_64+0x4c/0xa0 [ 2658.973089][T21115] ? clear_bhb_loop+0x60/0xb0 [ 2658.977780][T21115] ? clear_bhb_loop+0x60/0xb0 [ 2658.982471][T21115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2658.988394][T21115] RIP: 0033:0x7f157879fb19 [ 2658.992820][T21115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2659.012521][T21115] RSP: 002b:00007f15795d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2659.020962][T21115] RAX: ffffffffffffffda RBX: 00007f1578a25fa0 RCX: 00007f157879fb19 [ 2659.029032][T21115] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 2659.037008][T21115] RBP: 00007f1578837b70 R08: 0000000000000000 R09: 0000000000000000 [ 2659.044992][T21115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2659.052971][T21115] R13: 00007f1578a26038 R14: 00007f1578a25fa0 R15: 00007ffdd60aeea8 [ 2659.060971][T21115] [ 2659.232156][T19448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2659.465743][T19448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2659.733383][T21115] FAULT_INJECTION: forcing a failure. [ 2659.733383][T21115] name failslab, interval 1, probability 5, space 0, times 9999 [ 2659.782925][T21115] CPU: 1 PID: 21115 Comm: syz.2.2855 Not tainted syzkaller #0 [ 2659.790451][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2659.800618][T21115] Call Trace: [ 2659.803910][T21115] [ 2659.806867][T21115] dump_stack_lvl+0x188/0x24e [ 2659.811576][T21115] ? show_regs_print_info+0x12/0x12 [ 2659.816772][T21115] ? load_image+0x410/0x410 [ 2659.821273][T21115] ? __might_sleep+0xd0/0xd0 [ 2659.825858][T21115] ? __lock_acquire+0x7ea0/0x7ea0 [ 2659.830902][T21115] should_fail_ex+0x390/0x4c0 [ 2659.835600][T21115] should_failslab+0x5/0x20 [ 2659.840108][T21115] slab_pre_alloc_hook+0x59/0x300 [ 2659.845151][T21115] ? vidtv_psi_sdt_service_init+0x59/0x270 [ 2659.850985][T21115] __kmem_cache_alloc_node+0x4f/0x270 [ 2659.856364][T21115] ? vidtv_psi_sdt_service_init+0x59/0x270 [ 2659.862170][T21115] kmalloc_trace+0x26/0xe0 [ 2659.866587][T21115] vidtv_psi_sdt_service_init+0x59/0x270 [ 2659.872226][T21115] vidtv_channel_s302m_init+0xcd/0x830 [ 2659.877769][T21115] ? vidtv_mux_init+0x3ad/0x1950 [ 2659.882742][T21115] vidtv_channels_init+0x41/0x90 [ 2659.887722][T21115] vidtv_mux_init+0x4d0/0x1950 [ 2659.892501][T21115] vidtv_start_feed+0x368/0x590 [ 2659.897358][T21115] ? vidtv_i2c_func+0x10/0x10 [ 2659.902035][T21115] ? vidtv_stop_feed+0x250/0x250 [ 2659.906977][T21115] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2659.912271][T21115] ? lockdep_hardirqs_on+0x94/0x140 [ 2659.917478][T21115] dmx_ts_feed_start_filtering+0x11c/0x210 [ 2659.923282][T21115] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 2659.929187][T21115] dvb_dmxdev_filter_start+0x422/0x1060 [ 2659.934740][T21115] dvb_demux_do_ioctl+0x48d/0x530 [ 2659.939869][T21115] dvb_usercopy+0x191/0x2b0 [ 2659.944375][T21115] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 2659.949925][T21115] ? dvb_generic_ioctl+0xb0/0xb0 [ 2659.954874][T21115] ? dvb_demux_poll+0x210/0x210 [ 2659.959721][T21115] dvb_demux_ioctl+0x25/0x30 [ 2659.964311][T21115] __se_sys_ioctl+0xfa/0x170 [ 2659.968903][T21115] do_syscall_64+0x4c/0xa0 [ 2659.973318][T21115] ? clear_bhb_loop+0x60/0xb0 [ 2659.977992][T21115] ? clear_bhb_loop+0x60/0xb0 [ 2659.982694][T21115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2659.988606][T21115] RIP: 0033:0x7f157879fb19 [ 2659.993022][T21115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2660.012625][T21115] RSP: 002b:00007f15795d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2660.021043][T21115] RAX: ffffffffffffffda RBX: 00007f1578a25fa0 RCX: 00007f157879fb19 [ 2660.029010][T21115] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 2660.036992][T21115] RBP: 00007f1578837b70 R08: 0000000000000000 R09: 0000000000000000 [ 2660.044959][T21115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2660.052945][T21115] R13: 00007f1578a26038 R14: 00007f1578a25fa0 R15: 00007ffdd60aeea8 [ 2660.060920][T21115] [ 2661.596327][T21115] FAULT_INJECTION: forcing a failure. [ 2661.596327][T21115] name failslab, interval 1, probability 5, space 0, times 9998 [ 2661.643629][T21115] CPU: 1 PID: 21115 Comm: syz.2.2855 Not tainted syzkaller #0 [ 2661.651164][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2661.661218][T21115] Call Trace: [ 2661.664505][T21115] [ 2661.667462][T21115] dump_stack_lvl+0x188/0x24e [ 2661.672177][T21115] ? show_regs_print_info+0x12/0x12 [ 2661.677375][T21115] ? load_image+0x410/0x410 [ 2661.681878][T21115] ? __lock_acquire+0x7ea0/0x7ea0 [ 2661.686915][T21115] should_fail_ex+0x390/0x4c0 [ 2661.691716][T21115] should_failslab+0x5/0x20 [ 2661.696230][T21115] slab_pre_alloc_hook+0x59/0x300 [ 2661.701251][T21115] ? dm_table_create+0x81/0x320 [ 2661.706099][T21115] __kmem_cache_alloc_node+0x4f/0x270 [ 2661.711468][T21115] ? dm_table_create+0x81/0x320 [ 2661.716329][T21115] kmalloc_trace+0x26/0xe0 [ 2661.720741][T21115] dm_table_create+0x81/0x320 [ 2661.725417][T21115] ? __find_device_hash_cell+0x435/0x5b0 [ 2661.731045][T21115] table_load+0x157/0x760 [ 2661.735369][T21115] ? __kmem_cache_alloc_node+0x19d/0x270 [ 2661.740995][T21115] ? dev_wait+0x330/0x330 [ 2661.745317][T21115] ? __might_fault+0xc2/0x120 [ 2661.750004][T21115] ? __might_fault+0xa6/0x120 [ 2661.754702][T21115] dm_ctl_ioctl+0xa9c/0xec0 [ 2661.759219][T21115] ? dev_wait+0x330/0x330 [ 2661.763549][T21115] ? dm_poll+0x120/0x120 [ 2661.767803][T21115] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2661.772745][T21115] ? security_file_ioctl+0x7c/0xa0 [ 2661.777871][T21115] ? dm_poll+0x120/0x120 [ 2661.782107][T21115] __se_sys_ioctl+0xfa/0x170 [ 2661.786699][T21115] do_syscall_64+0x4c/0xa0 [ 2661.791116][T21115] ? clear_bhb_loop+0x60/0xb0 [ 2661.795804][T21115] ? clear_bhb_loop+0x60/0xb0 [ 2661.800485][T21115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2661.806372][T21115] RIP: 0033:0x7f157879fb19 [ 2661.810782][T21115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2661.830412][T21115] RSP: 002b:00007f15795d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2661.838831][T21115] RAX: ffffffffffffffda RBX: 00007f1578a25fa0 RCX: 00007f157879fb19 [ 2661.846800][T21115] RDX: 0000200000002bc0 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 2661.854778][T21115] RBP: 00007f1578837b70 R08: 0000000000000000 R09: 0000000000000000 [ 2661.862744][T21115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2661.870722][T21115] R13: 00007f1578a26038 R14: 00007f1578a25fa0 R15: 00007ffdd60aeea8 [ 2661.878698][T21115] [ 2665.616327][T19448] bond0 (unregistering): Released all slaves [ 2665.990696][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2666.012297][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2666.020878][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2666.032212][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2666.040550][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2666.047951][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2666.234181][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2850'. [ 2666.432026][T21188] rxe_eth0 speed is unknown, defaulting to 1000 [ 2666.702875][ T6329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2666.713271][ T6329] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2666.721973][ T6329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2666.730773][ T6329] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2666.738198][ T6329] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2666.745646][ T6329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2668.392800][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 2668.408307][T21192] rxe_eth0 speed is unknown, defaulting to 1000 [ 2668.922494][ T4276] Bluetooth: hci6: command 0x0409 tx timeout [ 2670.451976][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 2670.819476][T21188] chnl_net:caif_netlink_parms(): no params data found [ 2671.001609][ T4276] Bluetooth: hci6: command 0x041b tx timeout [ 2671.088694][T21188] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.101851][T21188] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.110551][T21188] device bridge_slave_0 entered promiscuous mode [ 2671.130349][T21192] chnl_net:caif_netlink_parms(): no params data found [ 2671.197266][T21188] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.213535][T21188] bridge0: port 2(bridge_slave_1) entered disabled state [ 2671.282820][T21188] device bridge_slave_1 entered promiscuous mode [ 2671.454106][T21188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2671.524149][T21188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2671.703797][T21188] team0: Port device team_slave_0 added [ 2671.722595][T21188] team0: Port device team_slave_1 added [ 2672.157071][T21188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2672.181252][T21188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2673.565329][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 2673.572837][ T6329] Bluetooth: hci6: command 0x040f tx timeout [ 2673.770678][T21188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2673.812118][T21192] bridge0: port 1(bridge_slave_0) entered blocking state [ 2673.821562][T21192] bridge0: port 1(bridge_slave_0) entered disabled state [ 2673.830662][T21192] device bridge_slave_0 entered promiscuous mode [ 2674.818651][T21188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2674.831760][T21188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2675.001098][T21188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2675.040577][T21192] bridge0: port 2(bridge_slave_1) entered blocking state [ 2675.051207][T21192] bridge0: port 2(bridge_slave_1) entered disabled state [ 2675.059531][T21192] device bridge_slave_1 entered promiscuous mode [ 2675.650536][ T6329] Bluetooth: hci6: command 0x0419 tx timeout [ 2675.650545][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 2676.287711][T21192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2676.625619][T21188] device hsr_slave_0 entered promiscuous mode [ 2678.341744][T21188] device hsr_slave_1 entered promiscuous mode [ 2678.365106][T21188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2678.393189][T21188] Cannot create hsr debugfs directory [ 2678.401117][T21192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2679.397896][T21192] team0: Port device team_slave_0 added [ 2679.471880][T21192] team0: Port device team_slave_1 added [ 2679.895693][T21192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2679.987729][T21192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2680.101324][T21192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2680.155516][T21192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2680.280336][T21192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2680.770285][T21192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2681.778771][T19448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2681.964601][T21192] device hsr_slave_0 entered promiscuous mode [ 2682.020534][T21192] device hsr_slave_1 entered promiscuous mode [ 2682.060943][T21192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2682.089264][T21192] Cannot create hsr debugfs directory [ 2682.137505][T21354] loop9: detected capacity change from 0 to 512 [ 2682.359332][T21354] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.2873: iget: bad i_size value: 38620345925642 [ 2682.729021][T21354] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.2873: couldn't read orphan inode 15 (err -117) [ 2682.894372][T19448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2682.906207][T21354] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2683.069873][T21354] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.2873: bg 0: block 5: invalid block bitmap [ 2683.098194][T21360] FAULT_INJECTION: forcing a failure. [ 2683.098194][T21360] name failslab, interval 1, probability 5, space 0, times 9997 [ 2683.120527][T21354] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 44 with error 28 [ 2683.170109][T21354] EXT4-fs (loop9): This should not happen!! Data will be lost [ 2683.170109][T21354] [ 2683.179846][T21354] EXT4-fs (loop9): Total free blocks count 0 [ 2683.190560][T21360] CPU: 1 PID: 21360 Comm: syz.2.2874 Not tainted syzkaller #0 [ 2683.198058][T21360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2683.208112][T21360] Call Trace: [ 2683.211389][T21360] [ 2683.214329][T21360] dump_stack_lvl+0x188/0x24e [ 2683.219011][T21360] ? show_regs_print_info+0x12/0x12 [ 2683.224220][T21360] ? load_image+0x410/0x410 [ 2683.228742][T21360] ? __lock_acquire+0x7ea0/0x7ea0 [ 2683.233781][T21360] should_fail_ex+0x390/0x4c0 [ 2683.238468][T21360] should_failslab+0x5/0x20 [ 2683.242966][T21360] slab_pre_alloc_hook+0x59/0x300 [ 2683.247988][T21360] kmem_cache_alloc+0x56/0x2f0 [ 2683.252745][T21360] ? mempool_init_node+0x1e5/0x480 [ 2683.257854][T21360] ? mempool_free+0x320/0x320 [ 2683.262544][T21360] mempool_init_node+0x1e5/0x480 [ 2683.267563][T21360] ? mempool_alloc_slab+0x60/0x60 [ 2683.272633][T21360] ? mempool_free+0x320/0x320 [ 2683.277332][T21360] mempool_init+0x36/0x50 [ 2683.281686][T21360] bioset_init+0x282/0x6d0 [ 2683.286103][T21360] dm_table_complete+0x1e23/0x24f0 [ 2683.291243][T21360] ? __kmem_cache_free+0xb6/0x200 [ 2683.296414][T21360] ? dm_table_add_target+0x6b8/0xbc0 [ 2683.301711][T21360] ? dm_destroy_crypto_profile+0x30/0x30 [ 2683.307376][T21360] table_load+0x375/0x760 [ 2683.311725][T21360] ? dev_wait+0x330/0x330 [ 2683.316060][T21360] ? __might_fault+0xc2/0x120 [ 2683.320733][T21360] ? __might_fault+0xa6/0x120 [ 2683.325409][T21360] dm_ctl_ioctl+0xa9c/0xec0 [ 2683.329925][T21360] ? dev_wait+0x330/0x330 [ 2683.334302][T21360] ? dm_poll+0x120/0x120 [ 2683.338576][T21360] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2683.343526][T21360] ? security_file_ioctl+0x7c/0xa0 [ 2683.348666][T21360] ? dm_poll+0x120/0x120 [ 2683.352913][T21360] __se_sys_ioctl+0xfa/0x170 [ 2683.357513][T21360] do_syscall_64+0x4c/0xa0 [ 2683.361929][T21360] ? clear_bhb_loop+0x60/0xb0 [ 2683.366616][T21360] ? clear_bhb_loop+0x60/0xb0 [ 2683.371294][T21360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2683.377224][T21360] RIP: 0033:0x7f157879fb19 [ 2683.381662][T21360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2683.401277][T21360] RSP: 002b:00007f15795b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2683.409690][T21360] RAX: ffffffffffffffda RBX: 00007f1578a26090 RCX: 00007f157879fb19 [ 2683.417660][T21360] RDX: 0000200000002bc0 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 2683.425632][T21360] RBP: 00007f1578837b70 R08: 0000000000000000 R09: 0000000000000000 [ 2683.433597][T21360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2683.441563][T21360] R13: 00007f1578a26128 R14: 00007f1578a26090 R15: 00007ffdd60aeea8 [ 2683.449537][T21360] [ 2683.490176][T21354] EXT4-fs (loop9): Free/Dirty block details [ 2683.560375][T21354] EXT4-fs (loop9): free_blocks=0 [ 2683.584851][T21354] EXT4-fs (loop9): dirty_blocks=48 [ 2683.590709][T21354] EXT4-fs (loop9): Block reservation details [ 2683.596758][T21354] EXT4-fs (loop9): i_reserved_data_blocks=48 [ 2683.613064][T19448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2683.631990][T21360] device-mapper: table: unable to allocate mempools [ 2683.835746][T19448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2683.978993][T18485] EXT4-fs (loop9): unmounting filesystem. [ 2684.310678][T21371] loop9: detected capacity change from 0 to 512 [ 2684.372888][T21371] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.2876: iget: bad i_size value: 38620345925642 [ 2684.394305][T21371] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.2876: couldn't read orphan inode 15 (err -117) [ 2684.437309][T21371] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2684.483633][T21369] loop2: detected capacity change from 0 to 512 [ 2684.615529][T21369] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.2884: iget: bad i_size value: 38620345925642 [ 2684.662397][T21376] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.2876: bg 0: block 5: invalid block bitmap [ 2684.768747][T21369] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2884: couldn't read orphan inode 15 (err -117) [ 2684.831565][T21376] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 392 with error 28 [ 2684.905344][T21376] EXT4-fs (loop9): This should not happen!! Data will be lost [ 2684.905344][T21376] [ 2684.941257][T21369] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2684.989915][T21376] EXT4-fs (loop9): Total free blocks count 0 [ 2684.995977][T21376] EXT4-fs (loop9): Free/Dirty block details [ 2685.009823][T21376] EXT4-fs (loop9): free_blocks=0 [ 2685.020249][T21376] EXT4-fs (loop9): dirty_blocks=396 [ 2685.059801][T21376] EXT4-fs (loop9): Block reservation details [ 2685.065880][T21376] EXT4-fs (loop9): i_reserved_data_blocks=396 [ 2685.074851][T21370] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2884: bg 0: block 5: invalid block bitmap [ 2685.110211][T21370] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 88 with error 28 [ 2685.189979][T21370] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2685.189979][T21370] [ 2685.240258][T21370] EXT4-fs (loop2): Total free blocks count 0 [ 2685.284581][T21370] EXT4-fs (loop2): Free/Dirty block details [ 2685.349813][T21370] EXT4-fs (loop2): free_blocks=0 [ 2685.391045][T21370] EXT4-fs (loop2): dirty_blocks=88 [ 2685.396238][T21370] EXT4-fs (loop2): Block reservation details [ 2685.428974][T18485] EXT4-fs (loop9): unmounting filesystem. [ 2685.487258][T21370] EXT4-fs (loop2): i_reserved_data_blocks=88 [ 2685.608259][T21188] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2685.984419][T20566] EXT4-fs (loop2): unmounting filesystem. [ 2686.900754][T21188] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2686.952102][T21188] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2688.305976][T21188] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2691.947252][T21452] FAULT_INJECTION: forcing a failure. [ 2691.947252][T21452] name failslab, interval 1, probability 5, space 0, times 9996 [ 2692.209801][T21452] CPU: 1 PID: 21452 Comm: syz.2.2885 Not tainted syzkaller #0 [ 2692.217333][T21452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2692.227423][T21452] Call Trace: [ 2692.230734][T21452] [ 2692.233701][T21452] dump_stack_lvl+0x188/0x24e [ 2692.238432][T21452] ? show_regs_print_info+0x12/0x12 [ 2692.243670][T21452] ? load_image+0x410/0x410 [ 2692.248218][T21452] ? __lock_acquire+0x7ea0/0x7ea0 [ 2692.253302][T21452] should_fail_ex+0x390/0x4c0 [ 2692.258027][T21452] should_failslab+0x5/0x20 [ 2692.262565][T21452] slab_pre_alloc_hook+0x59/0x300 [ 2692.267643][T21452] ? dm_split_args+0x84/0x560 [ 2692.272357][T21452] __kmem_cache_alloc_node+0x4f/0x270 [ 2692.277770][T21452] ? dm_split_args+0x84/0x560 [ 2692.282466][T21452] kmalloc_trace+0x26/0xe0 [ 2692.286896][T21452] dm_split_args+0x84/0x560 [ 2692.291401][T21452] dm_table_add_target+0x518/0xbc0 [ 2692.296528][T21452] table_load+0x2ce/0x760 [ 2692.300859][T21452] ? dev_wait+0x330/0x330 [ 2692.305447][T21452] ? __might_fault+0xc2/0x120 [ 2692.310121][T21452] ? __might_fault+0xa6/0x120 [ 2692.314810][T21452] dm_ctl_ioctl+0xa9c/0xec0 [ 2692.319326][T21452] ? dev_wait+0x330/0x330 [ 2692.323664][T21452] ? dm_poll+0x120/0x120 [ 2692.327920][T21452] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2692.332856][T21452] ? security_file_ioctl+0x7c/0xa0 [ 2692.337964][T21452] ? dm_poll+0x120/0x120 [ 2692.342203][T21452] __se_sys_ioctl+0xfa/0x170 [ 2692.346794][T21452] do_syscall_64+0x4c/0xa0 [ 2692.351337][T21452] ? clear_bhb_loop+0x60/0xb0 [ 2692.356036][T21452] ? clear_bhb_loop+0x60/0xb0 [ 2692.360724][T21452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2692.366648][T21452] RIP: 0033:0x7f157879fb19 [ 2692.371068][T21452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2692.390697][T21452] RSP: 002b:00007f15795b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2692.399122][T21452] RAX: ffffffffffffffda RBX: 00007f1578a26090 RCX: 00007f157879fb19 [ 2692.407104][T21452] RDX: 0000200000002bc0 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 2692.415092][T21452] RBP: 00007f1578837b70 R08: 0000000000000000 R09: 0000000000000000 [ 2692.423059][T21452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2692.431043][T21452] R13: 00007f1578a26128 R14: 00007f1578a26090 R15: 00007ffdd60aeea8 [ 2692.439022][T21452] [ 2692.486427][T21452] device-mapper: table: 248:6: linear: couldn't split parameters (-ENOMEM) [ 2692.508387][T21452] device-mapper: ioctl: error adding target to table [ 2693.021256][T21188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2693.138169][T17224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2693.153977][T17224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2693.170051][T21461] loop2: detected capacity change from 0 to 512 [ 2693.183092][T21192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2693.250762][T21461] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.2887: iget: bad i_size value: 38620345925642 [ 2693.267919][T21461] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2887: couldn't read orphan inode 15 (err -117) [ 2693.285429][T21461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2693.286840][T21188] 8021q: adding VLAN 0 to HW filter on device team0 [ 2693.366904][T21192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2693.396434][T21192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2693.427280][T21461] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2887: bg 0: block 5: invalid block bitmap [ 2693.442402][T21461] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1364 with error 28 [ 2693.542497][T21461] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2693.542497][T21461] [ 2693.578711][T21461] EXT4-fs (loop2): Total free blocks count 0 [ 2693.598842][T21461] EXT4-fs (loop2): Free/Dirty block details [ 2693.609192][T21461] EXT4-fs (loop2): free_blocks=0 [ 2693.620909][T21192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2693.679386][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2693.702533][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2693.706264][T21461] EXT4-fs (loop2): dirty_blocks=1368 [ 2693.711938][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 2693.716387][T21461] EXT4-fs (loop2): Block reservation details [ 2693.723187][ T6854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2693.769278][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2693.786285][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2693.796716][T21461] EXT4-fs (loop2): i_reserved_data_blocks=1368 [ 2693.820131][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 2693.827262][ T6854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2693.875846][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2693.900043][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2693.980688][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2693.998548][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2694.027475][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2694.089429][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2694.808269][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2694.817551][T17375] Bluetooth: hci2: command 0x0406 tx timeout [ 2694.838233][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2694.894391][T20566] EXT4-fs (loop2): unmounting filesystem. [ 2695.920646][ T26] audit: type=1326 audit(1794098866.943:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21469 comm="syz.1.2889" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c4f99fb19 code=0x0 [ 2697.822230][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2697.863468][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2697.908595][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2697.934133][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2697.981543][T21188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2698.338334][T21192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2698.402637][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2698.438030][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2698.491634][T21192] 8021q: adding VLAN 0 to HW filter on device team0 [ 2698.598336][T17224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2698.648748][T17224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2698.688319][T17224] bridge0: port 1(bridge_slave_0) entered blocking state [ 2698.695432][T17224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2698.759175][T17224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2698.788916][T17224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2698.803782][T17224] bridge0: port 2(bridge_slave_1) entered blocking state [ 2698.810932][T17224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2698.846861][T17224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2698.881076][T17224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2698.922702][T19448] device hsr_slave_0 left promiscuous mode [ 2698.968459][T19448] device hsr_slave_1 left promiscuous mode [ 2698.988252][T19448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2699.008997][T19448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2699.037156][T19448] device bridge_slave_1 left promiscuous mode [ 2699.058433][T19448] bridge0: port 2(bridge_slave_1) entered disabled state [ 2699.099672][T19448] device bridge_slave_0 left promiscuous mode [ 2699.106020][T19448] bridge0: port 1(bridge_slave_0) entered disabled state [ 2699.164506][T19448] device hsr_slave_0 left promiscuous mode [ 2699.198398][T19448] device hsr_slave_1 left promiscuous mode [ 2699.217503][T19448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2699.227791][T19448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2699.248973][T19448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2699.256460][T19448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2699.298935][T19448] device bridge_slave_1 left promiscuous mode [ 2699.305216][T19448] bridge0: port 2(bridge_slave_1) entered disabled state [ 2699.417070][T21492] FAULT_INJECTION: forcing a failure. [ 2699.417070][T21492] name failslab, interval 1, probability 5, space 0, times 9995 [ 2699.508078][T21492] CPU: 1 PID: 21492 Comm: syz.2.2894 Not tainted syzkaller #0 [ 2699.515630][T21492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2699.525731][T21492] Call Trace: [ 2699.529055][T21492] [ 2699.531989][T21492] dump_stack_lvl+0x188/0x24e [ 2699.536696][T21492] ? show_regs_print_info+0x12/0x12 [ 2699.541918][T21492] ? load_image+0x410/0x410 [ 2699.546427][T21492] ? __might_sleep+0xd0/0xd0 [ 2699.551017][T21492] ? __lock_acquire+0x7ea0/0x7ea0 [ 2699.556067][T21492] should_fail_ex+0x390/0x4c0 [ 2699.560748][T21492] should_failslab+0x5/0x20 [ 2699.565249][T21492] slab_pre_alloc_hook+0x59/0x300 [ 2699.570273][T21492] ? dm_table_complete+0x147e/0x24f0 [ 2699.575556][T21492] __kmem_cache_alloc_node+0x4f/0x270 [ 2699.580947][T21492] ? dm_table_complete+0x147e/0x24f0 [ 2699.586273][T21492] kmalloc_trace+0x26/0xe0 [ 2699.590720][T21492] dm_table_complete+0x147e/0x24f0 [ 2699.595948][T21492] ? __kmem_cache_free+0xb6/0x200 [ 2699.601000][T21492] ? dm_table_add_target+0x6b8/0xbc0 [ 2699.606323][T21492] ? dm_destroy_crypto_profile+0x30/0x30 [ 2699.611978][T21492] table_load+0x375/0x760 [ 2699.616340][T21492] ? dev_wait+0x330/0x330 [ 2699.620704][T21492] ? __might_fault+0xc2/0x120 [ 2699.625414][T21492] ? __might_fault+0xa6/0x120 [ 2699.630365][T21492] dm_ctl_ioctl+0xa9c/0xec0 [ 2699.634882][T21492] ? dev_wait+0x330/0x330 [ 2699.639244][T21492] ? dm_poll+0x120/0x120 [ 2699.643508][T21492] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2699.648450][T21492] ? security_file_ioctl+0x7c/0xa0 [ 2699.653584][T21492] ? dm_poll+0x120/0x120 [ 2699.657823][T21492] __se_sys_ioctl+0xfa/0x170 [ 2699.662434][T21492] do_syscall_64+0x4c/0xa0 [ 2699.666851][T21492] ? clear_bhb_loop+0x60/0xb0 [ 2699.671532][T21492] ? clear_bhb_loop+0x60/0xb0 [ 2699.676217][T21492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2699.682117][T21492] RIP: 0033:0x7f157879fb19 [ 2699.686534][T21492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2699.706145][T21492] RSP: 002b:00007f15795b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2699.714566][T21492] RAX: ffffffffffffffda RBX: 00007f1578a26090 RCX: 00007f157879fb19 [ 2699.722539][T21492] RDX: 0000200000002bc0 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 2699.730512][T21492] RBP: 00007f1578837b70 R08: 0000000000000000 R09: 0000000000000000 [ 2699.738483][T21492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2699.746461][T21492] R13: 00007f1578a26128 R14: 00007f1578a26090 R15: 00007ffdd60aeea8 [ 2699.754447][T21492] [ 2699.771684][T19448] device bridge_slave_0 left promiscuous mode [ 2699.781682][T19448] bridge0: port 1(bridge_slave_0) entered disabled state [ 2699.805604][T21492] device-mapper: table: could not construct crypto profile. [ 2699.875340][T19448] device veth1_macvtap left promiscuous mode [ 2699.901979][T19448] device veth0_macvtap left promiscuous mode [ 2699.923069][T19448] device veth1_vlan left promiscuous mode [ 2699.945224][T19448] device veth0_vlan left promiscuous mode [ 2703.511010][T19448] team0 (unregistering): Port device team_slave_1 removed [ 2703.576806][T19448] team0 (unregistering): Port device team_slave_0 removed [ 2703.639161][T19448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2703.681898][T19448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2703.850736][T19448] bond0 (unregistering): Released all slaves [ 2705.069843][T19448] team0 (unregistering): Port device team_slave_1 removed [ 2705.139684][T19448] team0 (unregistering): Port device team_slave_0 removed [ 2705.248980][T19448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2705.443679][T19448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2706.407772][T19448] bond0 (unregistering): Released all slaves [ 2707.242215][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2707.313373][T21497] tipc: Started in network mode [ 2707.332132][T21497] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2707.394683][T21497] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2707.448848][T21497] tipc: Enabled bearer , priority 10 [ 2707.487570][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 2707.574382][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2707.673265][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2707.764138][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2707.828151][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2707.861327][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2707.914892][T21192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2707.967662][T21192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2708.016380][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2708.050658][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2708.075037][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2708.091948][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2708.108243][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2708.144835][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2708.155606][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2708.187487][T21188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2709.553655][ T2125] tipc: Node number set to 1 [ 2709.907188][T21586] FAULT_INJECTION: forcing a failure. [ 2709.907188][T21586] name failslab, interval 1, probability 5, space 0, times 9994 [ 2709.966438][T21586] CPU: 0 PID: 21586 Comm: syz.1.2904 Not tainted syzkaller #0 [ 2709.973981][T21586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2709.984080][T21586] Call Trace: [ 2709.987389][T21586] [ 2709.990352][T21586] dump_stack_lvl+0x188/0x24e [ 2709.995091][T21586] ? show_regs_print_info+0x12/0x12 [ 2710.000341][T21586] ? load_image+0x410/0x410 [ 2710.004885][T21586] ? __might_sleep+0xd0/0xd0 [ 2710.009511][T21586] ? __lock_acquire+0x7ea0/0x7ea0 [ 2710.014575][T21586] should_fail_ex+0x390/0x4c0 [ 2710.019298][T21586] should_failslab+0x5/0x20 [ 2710.023840][T21586] slab_pre_alloc_hook+0x59/0x300 [ 2710.028903][T21586] ? rwsem_write_trylock+0x135/0x1c0 [ 2710.034229][T21586] ? dm_get_device+0x38d/0x7f0 [ 2710.039026][T21586] __kmem_cache_alloc_node+0x4f/0x270 [ 2710.044445][T21586] ? dm_get_device+0x38d/0x7f0 [ 2710.049240][T21586] kmalloc_trace+0x26/0xe0 [ 2710.053693][T21586] dm_get_device+0x38d/0x7f0 [ 2710.058325][T21586] ? dm_get_dev_t+0xf0/0xf0 [ 2710.062851][T21586] ? skip_atoi+0xe0/0xe0 [ 2710.067118][T21586] linear_ctr+0x1c0/0x3e0 [ 2710.071458][T21586] ? dm_linear_exit+0x20/0x20 [ 2710.076140][T21586] ? rcu_is_watching+0x11/0xa0 [ 2710.080946][T21586] ? skip_spaces+0x86/0xa0 [ 2710.085464][T21586] dm_table_add_target+0x571/0xbc0 [ 2710.090628][T21586] table_load+0x2ce/0x760 [ 2710.095014][T21586] ? dev_wait+0x330/0x330 [ 2710.099368][T21586] ? __might_fault+0xc2/0x120 [ 2710.104066][T21586] ? __might_fault+0xa6/0x120 [ 2710.108756][T21586] dm_ctl_ioctl+0xa9c/0xec0 [ 2710.113279][T21586] ? dev_wait+0x330/0x330 [ 2710.117625][T21586] ? dm_poll+0x120/0x120 [ 2710.121922][T21586] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2710.126889][T21586] ? security_file_ioctl+0x7c/0xa0 [ 2710.132032][T21586] ? dm_poll+0x120/0x120 [ 2710.136283][T21586] __se_sys_ioctl+0xfa/0x170 [ 2710.140892][T21586] do_syscall_64+0x4c/0xa0 [ 2710.145326][T21586] ? clear_bhb_loop+0x60/0xb0 [ 2710.150022][T21586] ? clear_bhb_loop+0x60/0xb0 [ 2710.154711][T21586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2710.160618][T21586] RIP: 0033:0x7f4c4f99fb19 [ 2710.165047][T21586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2710.184679][T21586] RSP: 002b:00007f4c4dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2710.193106][T21586] RAX: ffffffffffffffda RBX: 00007f4c4fc26090 RCX: 00007f4c4f99fb19 [ 2710.201089][T21586] RDX: 0000200000002bc0 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 2710.209071][T21586] RBP: 00007f4c4fa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2710.217050][T21586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2710.225026][T21586] R13: 00007f4c4fc26128 R14: 00007f4c4fc26090 R15: 00007ffe64636948 [ 2710.233023][T21586] [ 2710.857982][T19450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2710.865487][T19450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2710.906722][T21586] device-mapper: table: 248:5: linear: Device lookup failed (-ENOMEM) [ 2710.914986][T21586] device-mapper: ioctl: error adding target to table [ 2710.925469][T21192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2711.421071][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2711.437411][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2711.772467][T19442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2712.102217][T19442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2712.219376][T19442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2712.240447][T19442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2712.260965][T21188] device veth0_vlan entered promiscuous mode [ 2712.342353][T21188] device veth1_vlan entered promiscuous mode [ 2713.087027][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.093403][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.135099][T21188] device veth0_macvtap entered promiscuous mode [ 2713.307677][T14602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2713.479447][T14602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2713.587461][T14602] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2713.740028][T21188] device veth1_macvtap entered promiscuous mode [ 2713.786349][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2713.873788][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2714.527231][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2714.680533][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2715.156091][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2715.236122][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2715.328813][T21188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2715.431697][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2715.544133][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2715.575197][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2715.596576][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2715.647207][T21188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2715.666164][T21188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2715.738663][T21188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2715.762996][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2715.796196][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2715.805143][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2715.960331][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2715.998642][T21188] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2716.034861][T21188] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2716.106925][T21188] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2716.166063][T21188] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2716.398118][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2716.430145][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2716.502972][T21192] device veth0_vlan entered promiscuous mode [ 2716.546491][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2717.296291][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2717.361795][T21192] device veth1_vlan entered promiscuous mode [ 2717.384530][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2717.407351][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2717.456525][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2717.486017][ T4616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2717.526093][ T4616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2717.548566][T19440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2717.633425][T19440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2717.706953][T19440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2717.742572][T21192] device veth0_macvtap entered promiscuous mode [ 2717.779646][T19440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2717.788403][T21192] device veth1_macvtap entered promiscuous mode [ 2717.825384][T19440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2717.839654][T21192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.213817][T21192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.237414][T21192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.248421][T21192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.267217][T21192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.279676][T21192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.289916][T21192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2718.322800][T21192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2718.639649][T21192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2718.900066][T21192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.004598][T21192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.061718][T21192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.110518][T21192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.635865][T21192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.648964][T21192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.666289][T21192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.688263][T21192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.775679][T21192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2720.516258][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2720.540931][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2720.575963][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2720.657364][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2720.706335][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2720.736350][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2720.785783][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2720.826943][T21192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2720.851404][T21192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2720.877519][T21192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2720.908459][T21192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2721.117741][ T6849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2721.142577][ T6849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2721.554691][T19438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2722.185896][T14602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2722.194422][T14602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2722.245861][T14602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2729.874580][ T26] audit: type=1326 audit(1794099157.474:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21752 comm="syz.4.2919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9d219fb19 code=0x0 [ 2732.282190][T21768] FAULT_INJECTION: forcing a failure. [ 2732.282190][T21768] name failslab, interval 1, probability 5, space 0, times 10000 [ 2732.317982][T21772] loop2: detected capacity change from 0 to 512 [ 2732.384209][T21768] CPU: 1 PID: 21768 Comm: syz.9.2924 Not tainted syzkaller #0 [ 2732.391756][T21768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2732.401938][T21768] Call Trace: [ 2732.405256][T21768] [ 2732.408218][T21768] dump_stack_lvl+0x188/0x24e [ 2732.412937][T21768] ? show_regs_print_info+0x12/0x12 [ 2732.418176][T21768] ? load_image+0x410/0x410 [ 2732.422829][T21768] ? __might_sleep+0xd0/0xd0 [ 2732.427465][T21768] ? __lock_acquire+0x7ea0/0x7ea0 [ 2732.432539][T21768] should_fail_ex+0x390/0x4c0 [ 2732.437242][T21768] should_failslab+0x5/0x20 [ 2732.441757][T21768] slab_pre_alloc_hook+0x59/0x300 [ 2732.446804][T21768] ? vidtv_psi_service_list_desc_init+0xcf/0x5a0 [ 2732.453149][T21768] __kmem_cache_alloc_node+0x4f/0x270 [ 2732.458543][T21768] ? vidtv_psi_service_list_desc_init+0xcf/0x5a0 [ 2732.464902][T21768] kmalloc_trace+0x26/0xe0 [ 2732.469332][T21768] vidtv_psi_service_list_desc_init+0xcf/0x5a0 [ 2732.475503][T21768] vidtv_psi_nit_table_init+0x3c3/0x850 [ 2732.481064][T21768] vidtv_channel_si_init+0x108e/0x15c0 [ 2732.486652][T21768] vidtv_mux_init+0x4ff/0x1950 [ 2732.491456][T21768] vidtv_start_feed+0x368/0x590 [ 2732.496338][T21768] ? vidtv_i2c_func+0x10/0x10 [ 2732.501037][T21768] ? vidtv_stop_feed+0x250/0x250 [ 2732.505996][T21768] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2732.511213][T21768] ? lockdep_hardirqs_on+0x94/0x140 [ 2732.516531][T21768] dmx_ts_feed_start_filtering+0x11c/0x210 [ 2732.522350][T21768] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 2732.528449][T21768] dvb_dmxdev_filter_start+0x422/0x1060 [ 2732.534027][T21768] dvb_demux_do_ioctl+0x48d/0x530 [ 2732.539075][T21768] dvb_usercopy+0x191/0x2b0 [ 2732.543593][T21768] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 2732.549153][T21768] ? dvb_generic_ioctl+0xb0/0xb0 [ 2732.554241][T21768] ? dvb_demux_poll+0x210/0x210 [ 2732.559131][T21768] dvb_demux_ioctl+0x25/0x30 [ 2732.563748][T21768] __se_sys_ioctl+0xfa/0x170 [ 2732.568356][T21768] do_syscall_64+0x4c/0xa0 [ 2732.573220][T21768] ? clear_bhb_loop+0x60/0xb0 [ 2732.577915][T21768] ? clear_bhb_loop+0x60/0xb0 [ 2732.582611][T21768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2732.588519][T21768] RIP: 0033:0x7f9579b9fb19 [ 2732.592941][T21768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2732.612558][T21768] RSP: 002b:00007f957ab19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2732.620998][T21768] RAX: ffffffffffffffda RBX: 00007f9579e25fa0 RCX: 00007f9579b9fb19 [ 2732.628981][T21768] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 2732.636959][T21768] RBP: 00007f9579c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2732.644944][T21768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2732.652919][T21768] R13: 00007f9579e26038 R14: 00007f9579e25fa0 R15: 00007ffcaa1e4638 [ 2732.660917][T21768] [ 2732.742763][T21772] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.2923: iget: bad i_size value: 38620345925642 [ 2732.770718][T21774] device-mapper: table: 248:7: linear: Device lookup failed (-ENODEV) [ 2732.814722][T21772] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2923: couldn't read orphan inode 15 (err -117) [ 2732.827314][T21774] device-mapper: ioctl: error adding target to table [ 2732.835069][T21772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2732.995938][T21782] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2923: bg 0: block 5: invalid block bitmap [ 2733.028517][T21782] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 632 with error 28 [ 2733.144071][T21782] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2733.144071][T21782] [ 2733.184077][T21782] EXT4-fs (loop2): Total free blocks count 0 [ 2733.194234][T21782] EXT4-fs (loop2): Free/Dirty block details [ 2733.200189][T21782] EXT4-fs (loop2): free_blocks=0 [ 2733.223990][T21782] EXT4-fs (loop2): dirty_blocks=636 [ 2733.229257][T21782] EXT4-fs (loop2): Block reservation details [ 2733.253971][T21782] EXT4-fs (loop2): i_reserved_data_blocks=636 [ 2734.930545][T20566] EXT4-fs (loop2): unmounting filesystem. [ 2735.378406][T21802] usb usb8: usbfs: process 21802 (syz.1.2920) did not claim interface 0 before use [ 2735.395529][T21802] input: syz0 as /devices/virtual/input/input10 [ 2736.265843][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2928'. [ 2738.018747][T21823] loop4: detected capacity change from 0 to 512 [ 2738.106818][T21823] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.2934: iget: bad i_size value: 38620345925642 [ 2738.183806][T21823] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.2934: couldn't read orphan inode 15 (err -117) [ 2738.236524][T21823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2738.394973][T21829] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2934: bg 0: block 5: invalid block bitmap [ 2738.497050][T21829] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 304 with error 28 [ 2738.538894][T21829] EXT4-fs (loop4): This should not happen!! Data will be lost [ 2738.538894][T21829] [ 2738.579458][T21829] EXT4-fs (loop4): Total free blocks count 0 [ 2738.613317][T21829] EXT4-fs (loop4): Free/Dirty block details [ 2738.619297][T21829] EXT4-fs (loop4): free_blocks=0 [ 2738.663246][T21829] EXT4-fs (loop4): dirty_blocks=308 [ 2738.668524][T21829] EXT4-fs (loop4): Block reservation details [ 2738.693284][T21829] EXT4-fs (loop4): i_reserved_data_blocks=308 [ 2740.994091][T21192] EXT4-fs (loop4): unmounting filesystem. [ 2741.032320][T21841] device-mapper: table: 248:7: linear: Device lookup failed (-ENODEV) [ 2741.063053][T21841] device-mapper: ioctl: error adding target to table [ 2741.934601][T21856] loop9: detected capacity change from 0 to 1024 [ 2741.973776][T21856] EXT4-fs: Ignoring removed i_version option [ 2743.467886][T21856] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2743.678770][T21871] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2744.035509][T18485] EXT4-fs (loop9): unmounting filesystem. [ 2760.555991][ T6329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2760.566815][ T6329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2760.581331][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2760.590683][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2760.599262][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2760.607710][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2762.251751][T21966] rxe_eth0 speed is unknown, defaulting to 1000 [ 2763.510586][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 2763.849292][ T26] audit: type=1326 audit(1794099447.580:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.9.2966" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9579b9fb19 code=0x0 [ 2764.273820][T14602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2764.454251][T14602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2765.681475][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 2766.114671][T14602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2766.542531][T14602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.656246][T21966] chnl_net:caif_netlink_parms(): no params data found [ 2767.710123][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 2768.061335][T21966] bridge0: port 1(bridge_slave_0) entered blocking state [ 2768.079848][T21966] bridge0: port 1(bridge_slave_0) entered disabled state [ 2768.150317][T21966] device bridge_slave_0 entered promiscuous mode [ 2768.282734][T21966] bridge0: port 2(bridge_slave_1) entered blocking state [ 2768.319796][T21966] bridge0: port 2(bridge_slave_1) entered disabled state [ 2768.328171][T21966] device bridge_slave_1 entered promiscuous mode [ 2768.476048][T21966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2768.533311][T21966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2769.789702][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 2769.833120][T21966] team0: Port device team_slave_0 added [ 2770.430059][T21966] team0: Port device team_slave_1 added [ 2770.609047][T22045] usb usb8: usbfs: process 22045 (syz.4.2973) did not claim interface 0 before use [ 2770.626180][T22045] input: syz0 as /devices/virtual/input/input11 [ 2772.936700][T21966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2772.992120][T21966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2774.122234][T22063] loop9: detected capacity change from 0 to 512 [ 2774.129192][T21966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2774.335201][T21966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2774.363864][T21966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2774.505327][T21966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2774.517505][T22063] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.2980: iget: bad i_size value: 38620345925642 [ 2774.529191][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.543928][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.636611][T22070] loop4: detected capacity change from 0 to 512 [ 2774.643247][T22063] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.2980: couldn't read orphan inode 15 (err -117) [ 2774.711265][T22070] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 2774.753540][T22063] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2774.768543][T22070] EXT4-fs (loop4): invalid journal inode [ 2775.468836][T22068] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 2775.544050][T22074] xt_NFQUEUE: number of total queues is 0 [ 2775.970172][T19444] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 272 with error 28 [ 2776.149013][T19444] EXT4-fs (loop9): This should not happen!! Data will be lost [ 2776.149013][T19444] [ 2776.283334][T19444] EXT4-fs (loop9): Total free blocks count 0 [ 2776.347869][T19444] EXT4-fs (loop9): Free/Dirty block details [ 2776.349882][T21966] device hsr_slave_0 entered promiscuous mode [ 2776.448733][T19444] EXT4-fs (loop9): free_blocks=0 [ 2776.489583][T19444] EXT4-fs (loop9): dirty_blocks=272 [ 2776.494856][T19444] EXT4-fs (loop9): Block reservation details [ 2777.045032][T21966] device hsr_slave_1 entered promiscuous mode [ 2777.808333][T19444] EXT4-fs (loop9): i_reserved_data_blocks=272 [ 2777.828687][T21966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2777.836286][T21966] Cannot create hsr debugfs directory [ 2781.400269][T18485] EXT4-fs (loop9): unmounting filesystem. [ 2782.679218][T22104] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2788.330770][ T26] audit: type=1326 audit(1794099727.662:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22134 comm="syz.9.2994" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9579b9fb19 code=0x0 [ 2790.172558][T22151] loop9: detected capacity change from 0 to 512 [ 2790.267932][T22149] FAULT_INJECTION: forcing a failure. [ 2790.267932][T22149] name failslab, interval 1, probability 5, space 0, times 10000 [ 2790.401489][T22153] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2790.446773][T22151] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.2999: iget: bad i_size value: 38620345925642 [ 2790.480761][T22149] CPU: 1 PID: 22149 Comm: syz.8.2988 Not tainted syzkaller #0 [ 2790.488293][T22149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2790.498391][T22149] Call Trace: [ 2790.501694][T22149] [ 2790.504653][T22149] dump_stack_lvl+0x188/0x24e [ 2790.509387][T22149] ? show_regs_print_info+0x12/0x12 [ 2790.514637][T22149] ? load_image+0x410/0x410 [ 2790.518997][T22157] device-mapper: table: 248:8: linear: Device lookup failed (-ENODEV) [ 2790.519169][T22149] ? __might_sleep+0xd0/0xd0 [ 2790.531960][T22149] ? __lock_acquire+0x7ea0/0x7ea0 [ 2790.537032][T22149] should_fail_ex+0x390/0x4c0 [ 2790.541761][T22149] should_failslab+0x5/0x20 [ 2790.546290][T22149] slab_pre_alloc_hook+0x59/0x300 [ 2790.551351][T22149] ? vidtv_psi_nit_table_init+0x5e/0x850 [ 2790.556986][T22149] __kmem_cache_alloc_node+0x4f/0x270 [ 2790.562359][T22149] ? vidtv_psi_nit_table_init+0x5e/0x850 [ 2790.567992][T22149] kmalloc_trace+0x26/0xe0 [ 2790.572405][T22149] vidtv_psi_nit_table_init+0x5e/0x850 [ 2790.577862][T22149] vidtv_channel_si_init+0x108e/0x15c0 [ 2790.583339][T22149] vidtv_mux_init+0x4ff/0x1950 [ 2790.588129][T22149] vidtv_start_feed+0x368/0x590 [ 2790.593038][T22149] ? vidtv_i2c_func+0x10/0x10 [ 2790.597774][T22149] ? vidtv_stop_feed+0x250/0x250 [ 2790.602750][T22149] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2790.607952][T22149] ? lockdep_hardirqs_on+0x94/0x140 [ 2790.613155][T22149] dmx_ts_feed_start_filtering+0x11c/0x210 [ 2790.618966][T22149] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 2790.624854][T22149] dvb_dmxdev_filter_start+0x422/0x1060 [ 2790.630422][T22149] dvb_demux_do_ioctl+0x48d/0x530 [ 2790.635456][T22149] dvb_usercopy+0x191/0x2b0 [ 2790.639974][T22149] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 2790.645531][T22149] ? dvb_generic_ioctl+0xb0/0xb0 [ 2790.650480][T22149] ? dvb_demux_poll+0x210/0x210 [ 2790.655329][T22149] dvb_demux_ioctl+0x25/0x30 [ 2790.659918][T22149] __se_sys_ioctl+0xfa/0x170 [ 2790.664510][T22149] do_syscall_64+0x4c/0xa0 [ 2790.668942][T22149] ? clear_bhb_loop+0x60/0xb0 [ 2790.673633][T22149] ? clear_bhb_loop+0x60/0xb0 [ 2790.678320][T22149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2790.684210][T22149] RIP: 0033:0x7fc9a639fb19 [ 2790.688623][T22149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2790.708297][T22149] RSP: 002b:00007fc9a7259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2790.716726][T22149] RAX: ffffffffffffffda RBX: 00007fc9a6625fa0 RCX: 00007fc9a639fb19 [ 2790.724699][T22149] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 2790.732687][T22149] RBP: 00007fc9a6437b70 R08: 0000000000000000 R09: 0000000000000000 [ 2790.740657][T22149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2790.748623][T22149] R13: 00007fc9a6626038 R14: 00007fc9a6625fa0 R15: 00007fff623e09b8 [ 2790.756616][T22149] [ 2790.787226][T22151] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.2999: couldn't read orphan inode 15 (err -117) [ 2790.838466][T22151] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2791.063837][T22160] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.2999: bg 0: block 5: invalid block bitmap [ 2791.215923][T22157] device-mapper: ioctl: error adding target to table [ 2791.277144][T22160] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 216 with error 28 [ 2791.289971][T22160] EXT4-fs (loop9): This should not happen!! Data will be lost [ 2791.289971][T22160] [ 2791.299865][T22160] EXT4-fs (loop9): Total free blocks count 0 [ 2791.305883][T22160] EXT4-fs (loop9): Free/Dirty block details [ 2791.313317][T22160] EXT4-fs (loop9): free_blocks=0 [ 2791.318466][T22160] EXT4-fs (loop9): dirty_blocks=220 [ 2791.323684][T22160] EXT4-fs (loop9): Block reservation details [ 2791.330138][T22160] EXT4-fs (loop9): i_reserved_data_blocks=220 [ 2791.607965][T22164] FAULT_INJECTION: forcing a failure. [ 2791.607965][T22164] name failslab, interval 1, probability 5, space 0, times 10000 [ 2791.682120][T18485] EXT4-fs (loop9): unmounting filesystem. [ 2791.698027][T22164] CPU: 0 PID: 22164 Comm: syz.4.3002 Not tainted syzkaller #0 [ 2791.705576][T22164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2791.715647][T22164] Call Trace: [ 2791.718935][T22164] [ 2791.721895][T22164] dump_stack_lvl+0x188/0x24e [ 2791.726586][T22164] ? show_regs_print_info+0x12/0x12 [ 2791.731809][T22164] ? load_image+0x410/0x410 [ 2791.736317][T22164] ? __might_sleep+0xd0/0xd0 [ 2791.740905][T22164] ? __lock_acquire+0x7ea0/0x7ea0 [ 2791.745946][T22164] ? kernel_text_address+0x9c/0xd0 [ 2791.751146][T22164] should_fail_ex+0x390/0x4c0 [ 2791.755827][T22164] should_failslab+0x5/0x20 [ 2791.760324][T22164] slab_pre_alloc_hook+0x59/0x300 [ 2791.765350][T22164] ? __get_vm_area_node+0x122/0x330 [ 2791.770570][T22164] __kmem_cache_alloc_node+0x4f/0x270 [ 2791.775938][T22164] ? stack_trace_save+0xa6/0xf0 [ 2791.780828][T22164] ? __get_vm_area_node+0x122/0x330 [ 2791.786029][T22164] kmalloc_node_trace+0x22/0xe0 [ 2791.790877][T22164] __get_vm_area_node+0x122/0x330 [ 2791.795910][T22164] ? kasan_set_track+0x60/0x70 [ 2791.800684][T22164] ? __kasan_kmalloc+0x8e/0xa0 [ 2791.805457][T22164] __vmalloc_node_range+0x357/0x1380 [ 2791.810748][T22164] ? vidtv_s302m_encoder_init+0x174/0x770 [ 2791.816473][T22164] ? __se_sys_ioctl+0xfa/0x170 [ 2791.821252][T22164] ? do_syscall_64+0x4c/0xa0 [ 2791.825844][T22164] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2791.832105][T22164] ? free_vm_area+0x50/0x50 [ 2791.836620][T22164] ? vidtv_s302m_encoder_init+0x174/0x770 [ 2791.842340][T22164] vzalloc+0x75/0x80 [ 2791.846248][T22164] ? vidtv_s302m_encoder_init+0x174/0x770 [ 2791.851964][T22164] vidtv_s302m_encoder_init+0x174/0x770 [ 2791.857530][T22164] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 2791.863089][T22164] ? rcu_is_watching+0x11/0xa0 [ 2791.867887][T22164] ? vidtv_psi_registration_desc_init+0x30/0x2a0 [ 2791.874220][T22164] ? __kmalloc+0xe4/0x240 [ 2791.878558][T22164] vidtv_channel_s302m_init+0x357/0x830 [ 2791.884114][T22164] ? vidtv_mux_init+0x3ad/0x1950 [ 2791.889076][T22164] vidtv_channels_init+0x41/0x90 [ 2791.894037][T22164] vidtv_mux_init+0x4d0/0x1950 [ 2791.898809][T22164] vidtv_start_feed+0x368/0x590 [ 2791.903675][T22164] ? vidtv_i2c_func+0x10/0x10 [ 2791.908345][T22164] ? vidtv_stop_feed+0x250/0x250 [ 2791.913311][T22164] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2791.918515][T22164] ? lockdep_hardirqs_on+0x94/0x140 [ 2791.923719][T22164] dmx_ts_feed_start_filtering+0x11c/0x210 [ 2791.929538][T22164] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 2791.935428][T22164] dvb_dmxdev_filter_start+0x422/0x1060 [ 2791.940981][T22164] dvb_demux_do_ioctl+0x48d/0x530 [ 2791.946005][T22164] dvb_usercopy+0x191/0x2b0 [ 2791.950522][T22164] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 2791.956153][T22164] ? dvb_generic_ioctl+0xb0/0xb0 [ 2791.961101][T22164] ? dvb_demux_poll+0x210/0x210 [ 2791.965970][T22164] dvb_demux_ioctl+0x25/0x30 [ 2791.970561][T22164] __se_sys_ioctl+0xfa/0x170 [ 2791.975154][T22164] do_syscall_64+0x4c/0xa0 [ 2791.979666][T22164] ? clear_bhb_loop+0x60/0xb0 [ 2791.984353][T22164] ? clear_bhb_loop+0x60/0xb0 [ 2791.989042][T22164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2791.994950][T22164] RIP: 0033:0x7ff9d219fb19 [ 2791.999364][T22164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2792.018968][T22164] RSP: 002b:00007ff9d30df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2792.027396][T22164] RAX: ffffffffffffffda RBX: 00007ff9d2425fa0 RCX: 00007ff9d219fb19 [ 2792.035402][T22164] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 2792.043657][T22164] RBP: 00007ff9d2237b70 R08: 0000000000000000 R09: 0000000000000000 [ 2792.051646][T22164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2792.059615][T22164] R13: 00007ff9d2426038 R14: 00007ff9d2425fa0 R15: 00007ffe0021eca8 [ 2792.067593][T22164] [ 2792.071640][T17375] Bluetooth: hci5: command 0x0406 tx timeout [ 2792.079334][ T4276] Bluetooth: hci6: command 0x0406 tx timeout [ 2793.633230][T22164] syz.4.3002: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 2793.649818][T22164] CPU: 0 PID: 22164 Comm: syz.4.3002 Not tainted syzkaller #0 [ 2793.657348][T22164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2793.667464][T22164] Call Trace: [ 2793.670753][T22164] [ 2793.673699][T22164] dump_stack_lvl+0x188/0x24e [ 2793.678403][T22164] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2793.684870][T22164] ? show_regs_print_info+0x12/0x12 [ 2793.690087][T22164] ? load_image+0x410/0x410 [ 2793.694615][T22164] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2793.701045][T22164] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2793.707591][T22164] warn_alloc+0x242/0x330 [ 2793.711956][T22164] ? __get_vm_area_node+0x122/0x330 [ 2793.717171][T22164] ? zone_watermark_ok_safe+0x270/0x270 [ 2793.722739][T22164] ? rcu_is_watching+0x11/0xa0 [ 2793.727526][T22164] ? __get_vm_area_node+0x318/0x330 [ 2793.732739][T22164] ? kasan_set_track+0x60/0x70 [ 2793.737519][T22164] ? __kasan_kmalloc+0x8e/0xa0 [ 2793.742320][T22164] __vmalloc_node_range+0x37c/0x1380 [ 2793.747618][T22164] ? __se_sys_ioctl+0xfa/0x170 [ 2793.752394][T22164] ? do_syscall_64+0x4c/0xa0 [ 2793.757001][T22164] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2793.763107][T22164] ? free_vm_area+0x50/0x50 [ 2793.767640][T22164] ? vidtv_s302m_encoder_init+0x174/0x770 [ 2793.773371][T22164] vzalloc+0x75/0x80 [ 2793.777286][T22164] ? vidtv_s302m_encoder_init+0x174/0x770 [ 2793.783016][T22164] vidtv_s302m_encoder_init+0x174/0x770 [ 2793.788579][T22164] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 2793.794144][T22164] ? rcu_is_watching+0x11/0xa0 [ 2793.798922][T22164] ? vidtv_psi_registration_desc_init+0x30/0x2a0 [ 2793.805258][T22164] ? __kmalloc+0xe4/0x240 [ 2793.809604][T22164] vidtv_channel_s302m_init+0x357/0x830 [ 2793.815195][T22164] ? vidtv_mux_init+0x3ad/0x1950 [ 2793.820177][T22164] vidtv_channels_init+0x41/0x90 [ 2793.825137][T22164] vidtv_mux_init+0x4d0/0x1950 [ 2793.829920][T22164] vidtv_start_feed+0x368/0x590 [ 2793.834783][T22164] ? vidtv_i2c_func+0x10/0x10 [ 2793.839471][T22164] ? vidtv_stop_feed+0x250/0x250 [ 2793.844425][T22164] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2793.849638][T22164] ? lockdep_hardirqs_on+0x94/0x140 [ 2793.854852][T22164] dmx_ts_feed_start_filtering+0x11c/0x210 [ 2793.860666][T22164] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 2793.866575][T22164] dvb_dmxdev_filter_start+0x422/0x1060 [ 2793.872154][T22164] dvb_demux_do_ioctl+0x48d/0x530 [ 2793.877291][T22164] dvb_usercopy+0x191/0x2b0 [ 2793.881807][T22164] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 2793.887372][T22164] ? dvb_generic_ioctl+0xb0/0xb0 [ 2793.892349][T22164] ? dvb_demux_poll+0x210/0x210 [ 2793.897223][T22164] dvb_demux_ioctl+0x25/0x30 [ 2793.901828][T22164] __se_sys_ioctl+0xfa/0x170 [ 2793.906437][T22164] do_syscall_64+0x4c/0xa0 [ 2793.910884][T22164] ? clear_bhb_loop+0x60/0xb0 [ 2793.915572][T22164] ? clear_bhb_loop+0x60/0xb0 [ 2793.920265][T22164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2793.926171][T22164] RIP: 0033:0x7ff9d219fb19 [ 2793.930599][T22164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2793.950213][T22164] RSP: 002b:00007ff9d30df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2793.958638][T22164] RAX: ffffffffffffffda RBX: 00007ff9d2425fa0 RCX: 00007ff9d219fb19 [ 2793.966615][T22164] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000007 [ 2793.974595][T22164] RBP: 00007ff9d2237b70 R08: 0000000000000000 R09: 0000000000000000 [ 2793.982572][T22164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2793.990548][T22164] R13: 00007ff9d2426038 R14: 00007ff9d2425fa0 R15: 00007ffe0021eca8 [ 2793.998546][T22164] [ 2794.188086][T22164] Mem-Info: [ 2794.191385][T22164] active_anon:42570 inactive_anon:0 isolated_anon:0 [ 2794.191385][T22164] active_file:17456 inactive_file:47404 isolated_file:0 [ 2794.191385][T22164] unevictable:768 dirty:133 writeback:0 [ 2794.191385][T22164] slab_reclaimable:22972 slab_unreclaimable:100613 [ 2794.191385][T22164] mapped:47037 shmem:36994 pagetables:816 [ 2794.191385][T22164] sec_pagetables:0 bounce:0 [ 2794.191385][T22164] kernel_misc_reclaimable:0 [ 2794.191385][T22164] free:1267402 free_pcp:9256 free_cma:0 [ 2794.729836][T22192] loop1: detected capacity change from 0 to 512 [ 2794.800586][T22194] loop9: detected capacity change from 0 to 512 [ 2794.861835][T22192] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.3000: iget: bad i_size value: 38620345925642 [ 2794.884273][T22164] Node 0 active_anon:176900kB inactive_anon:0kB active_file:69824kB inactive_file:189416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:180584kB dirty:536kB writeback:0kB shmem:152868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12456kB pagetables:3252kB sec_pagetables:0kB all_unreclaimable? no [ 2794.916800][T22192] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3000: couldn't read orphan inode 15 (err -117) [ 2794.922823][T22164] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2794.959606][T22164] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2794.997099][T22164] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 2795.003099][T22164] Node 0 DMA32 free:1147568kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:177800kB inactive_anon:0kB active_file:69824kB inactive_file:189416kB unevictable:1536kB writepending:536kB present:3129332kB managed:2574604kB mlocked:0kB bounce:0kB free_pcp:12532kB local_pcp:8108kB free_cma:0kB [ 2795.005581][T22194] EXT4-fs (loop9): failed to initialize system zone (-117) [ 2795.034390][T22164] lowmem_reserve[]: 0 0 1 1 1 [ 2795.048032][T22164] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2795.049918][T22192] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2795.085209][T22164] lowmem_reserve[]: 0 0 0 0 0 [ 2795.093789][T22164] Node 1 Normal free:3906680kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17064kB local_pcp:8040kB free_cma:0kB [ 2795.124911][T22164] lowmem_reserve[]: 0 0 0 0 0 [ 2795.129781][T22164] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2795.143083][T22164] Node 0 DMA32: 248*4kB (UE) 2886*8kB (UME) 4101*16kB (UME) 1041*32kB (UME) 415*64kB (UME) 325*128kB (UME) 128*256kB (UME) 52*512kB (UME) 41*1024kB (UM) 13*2048kB (M) 202*4096kB (M) = 1146560kB [ 2795.163069][T22164] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2795.174833][T22164] Node 1 Normal: 180*4kB (UE) 39*8kB (UME) 25*16kB (UME) 25*32kB (UME) 15*64kB (UE) 10*128kB (UME) 5*256kB (UME) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 951*4096kB (M) = 3906680kB [ 2795.193502][T22194] EXT4-fs (loop9): mount failed [ 2795.274594][T22164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2795.335705][T22164] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 2795.367750][T22192] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.3000: bg 0: block 5: invalid block bitmap [ 2795.406718][T22192] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 176 with error 28 [ 2795.435899][T22192] EXT4-fs (loop1): This should not happen!! Data will be lost [ 2795.435899][T22192] [ 2795.482169][T22192] EXT4-fs (loop1): Total free blocks count 0 [ 2795.505347][T22192] EXT4-fs (loop1): Free/Dirty block details [ 2795.518936][T22194] loop9: detected capacity change from 0 to 2048 [ 2795.544043][T22192] EXT4-fs (loop1): free_blocks=0 [ 2795.582059][T22194] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 2795.596644][T22192] EXT4-fs (loop1): dirty_blocks=180 [ 2795.622468][T22164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2795.632405][T22164] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2795.643019][T22164] 109708 total pagecache pages [ 2795.647983][T22164] 0 pages in swap cache [ 2795.652248][T22164] Free swap = 124728kB [ 2795.656691][T22164] Total swap = 124996kB [ 2795.659357][T22192] EXT4-fs (loop1): Block reservation details [ 2795.660936][T22164] 2097051 pages RAM [ 2795.675152][T22164] 0 pages HighMem/MovableOnly [ 2795.716191][T22192] EXT4-fs (loop1): i_reserved_data_blocks=180 [ 2795.718102][T22164] 419799 pages reserved [ 2795.750680][T21966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2795.897388][T22164] 0 pages cma reserved [ 2795.953754][T21966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2796.004050][T21966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2796.321954][T14602] device hsr_slave_0 left promiscuous mode [ 2796.352065][T17969] EXT4-fs (loop1): unmounting filesystem. [ 2796.538774][T14602] device hsr_slave_1 left promiscuous mode [ 2796.571799][T14602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2796.606245][T14602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2796.646882][T14602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2796.654394][T14602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2796.978797][T22213] FAULT_INJECTION: forcing a failure. [ 2796.978797][T22213] name failslab, interval 1, probability 5, space 0, times 9999 [ 2797.216267][T22213] CPU: 1 PID: 22213 Comm: syz.4.3011 Not tainted syzkaller #0 [ 2797.223781][T22213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2797.233845][T22213] Call Trace: [ 2797.237134][T22213] [ 2797.240066][T22213] dump_stack_lvl+0x188/0x24e [ 2797.244763][T22213] ? show_regs_print_info+0x12/0x12 [ 2797.249967][T22213] ? load_image+0x410/0x410 [ 2797.254469][T22213] ? __lock_acquire+0x7ea0/0x7ea0 [ 2797.259494][T22213] should_fail_ex+0x390/0x4c0 [ 2797.264170][T22213] should_failslab+0x5/0x20 [ 2797.268684][T22213] slab_pre_alloc_hook+0x59/0x300 [ 2797.273849][T22213] kmem_cache_alloc+0x56/0x2f0 [ 2797.278660][T22213] ? mempool_init_node+0x1e5/0x480 [ 2797.283824][T22213] ? mempool_free+0x320/0x320 [ 2797.288548][T22213] mempool_init_node+0x1e5/0x480 [ 2797.293523][T22213] ? mempool_alloc_slab+0x60/0x60 [ 2797.298575][T22213] ? mempool_free+0x320/0x320 [ 2797.303276][T22213] mempool_init+0x36/0x50 [ 2797.307624][T22213] bioset_init+0x282/0x6d0 [ 2797.312071][T22213] dm_table_complete+0x1e23/0x24f0 [ 2797.317233][T22213] ? __kmem_cache_free+0xb6/0x200 [ 2797.322312][T22213] ? dm_table_add_target+0x6b8/0xbc0 [ 2797.327653][T22213] ? dm_destroy_crypto_profile+0x30/0x30 [ 2797.333306][T22213] table_load+0x375/0x760 [ 2797.337642][T22213] ? dev_wait+0x330/0x330 [ 2797.341974][T22213] ? __might_fault+0xc2/0x120 [ 2797.346676][T22213] ? __might_fault+0xa6/0x120 [ 2797.351388][T22213] dm_ctl_ioctl+0xa9c/0xec0 [ 2797.355933][T22213] ? dev_wait+0x330/0x330 [ 2797.360261][T22213] ? dm_poll+0x120/0x120 [ 2797.364520][T22213] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2797.369459][T22213] ? security_file_ioctl+0x7c/0xa0 [ 2797.374574][T22213] ? dm_poll+0x120/0x120 [ 2797.378815][T22213] __se_sys_ioctl+0xfa/0x170 [ 2797.383408][T22213] do_syscall_64+0x4c/0xa0 [ 2797.387840][T22213] ? clear_bhb_loop+0x60/0xb0 [ 2797.392514][T22213] ? clear_bhb_loop+0x60/0xb0 [ 2797.397189][T22213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2797.403101][T22213] RIP: 0033:0x7ff9d219fb19 [ 2797.407523][T22213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2797.427134][T22213] RSP: 002b:00007ff9d30df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2797.435564][T22213] RAX: ffffffffffffffda RBX: 00007ff9d2425fa0 RCX: 00007ff9d219fb19 [ 2797.443531][T22213] RDX: 0000200000002bc0 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 2797.451494][T22213] RBP: 00007ff9d2237b70 R08: 0000000000000000 R09: 0000000000000000 [ 2797.459458][T22213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2797.467421][T22213] R13: 00007ff9d2426038 R14: 00007ff9d2425fa0 R15: 00007ffe0021eca8 [ 2797.475399][T22213] [ 2797.481433][T14602] device bridge_slave_1 left promiscuous mode [ 2797.513763][T14602] bridge0: port 2(bridge_slave_1) entered disabled state [ 2797.566619][T14602] device bridge_slave_0 left promiscuous mode [ 2797.572889][T14602] bridge0: port 1(bridge_slave_0) entered disabled state [ 2797.630110][T22220] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2797.651378][T22213] device-mapper: table: unable to allocate mempools [ 2797.848687][T22222] loop1: detected capacity change from 0 to 1024 [ 2797.907003][T22222] EXT4-fs: Ignoring removed i_version option [ 2797.963205][T14602] device veth1_macvtap left promiscuous mode [ 2797.976252][T14602] device veth0_macvtap left promiscuous mode [ 2797.996210][T14602] device veth1_vlan left promiscuous mode [ 2798.013106][T14602] device veth0_vlan left promiscuous mode [ 2798.015817][T22222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2798.358780][T22233] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2799.787109][T17969] EXT4-fs (loop1): unmounting filesystem. [ 2800.137118][T22242] usb usb8: usbfs: process 22242 (syz.1.3016) did not claim interface 0 before use [ 2800.154401][T22242] input: syz0 as /devices/virtual/input/input12 [ 2802.271914][T22254] loop4: detected capacity change from 0 to 512 [ 2802.501881][T22254] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.3019: iget: bad i_size value: 38620345925642 [ 2802.681956][T22254] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3019: couldn't read orphan inode 15 (err -117) [ 2802.798094][T22254] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2803.156548][T22254] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.3019: bg 0: block 5: invalid block bitmap [ 2803.264886][T22254] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 124 with error 28 [ 2804.245369][T22254] EXT4-fs (loop4): This should not happen!! Data will be lost [ 2804.245369][T22254] [ 2804.309920][T22254] EXT4-fs (loop4): Total free blocks count 0 [ 2804.355424][T22254] EXT4-fs (loop4): Free/Dirty block details [ 2804.361393][T22254] EXT4-fs (loop4): free_blocks=0 [ 2805.315788][T22254] EXT4-fs (loop4): dirty_blocks=128 [ 2805.405221][T22254] EXT4-fs (loop4): Block reservation details [ 2805.411288][T22254] EXT4-fs (loop4): i_reserved_data_blocks=128 [ 2806.117492][T21192] EXT4-fs (loop4): unmounting filesystem. [ 2808.358089][T22293] FAULT_INJECTION: forcing a failure. [ 2808.358089][T22293] name failslab, interval 1, probability 5, space 0, times 9998 [ 2808.496976][T22293] CPU: 1 PID: 22293 Comm: syz.8.3024 Not tainted syzkaller #0 [ 2808.504618][T22293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2808.514696][T22293] Call Trace: [ 2808.517988][T22293] [ 2808.520937][T22293] dump_stack_lvl+0x188/0x24e [ 2808.525625][T22293] ? show_regs_print_info+0x12/0x12 [ 2808.530826][T22293] ? load_image+0x410/0x410 [ 2808.535339][T22293] ? __might_sleep+0xd0/0xd0 [ 2808.539941][T22293] ? __lock_acquire+0x7ea0/0x7ea0 [ 2808.544968][T22293] should_fail_ex+0x390/0x4c0 [ 2808.549653][T22293] should_failslab+0x5/0x20 [ 2808.554150][T22293] slab_pre_alloc_hook+0x59/0x300 [ 2808.559185][T22293] ? kvmalloc_node+0x6c/0x180 [ 2808.563908][T22293] __kmem_cache_alloc_node+0x4f/0x270 [ 2808.569283][T22293] ? kvmalloc_node+0x6c/0x180 [ 2808.573953][T22293] __kmalloc_node+0xa2/0x240 [ 2808.578538][T22293] ? __might_fault+0xa6/0x120 [ 2808.583214][T22293] kvmalloc_node+0x6c/0x180 [ 2808.587709][T22293] dm_ctl_ioctl+0x4a5/0xec0 [ 2808.592212][T22293] ? dev_wait+0x330/0x330 [ 2808.596553][T22293] ? dm_poll+0x120/0x120 [ 2808.600808][T22293] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2808.605743][T22293] ? security_file_ioctl+0x7c/0xa0 [ 2808.610854][T22293] ? dm_poll+0x120/0x120 [ 2808.615092][T22293] __se_sys_ioctl+0xfa/0x170 [ 2808.619699][T22293] do_syscall_64+0x4c/0xa0 [ 2808.624114][T22293] ? clear_bhb_loop+0x60/0xb0 [ 2808.628791][T22293] ? clear_bhb_loop+0x60/0xb0 [ 2808.633502][T22293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2808.639399][T22293] RIP: 0033:0x7fc9a639fb19 [ 2808.643813][T22293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2808.663413][T22293] RSP: 002b:00007fc9a7259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2808.671821][T22293] RAX: ffffffffffffffda RBX: 00007fc9a6625fa0 RCX: 00007fc9a639fb19 [ 2808.679788][T22293] RDX: 0000200000002bc0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 2808.687752][T22293] RBP: 00007fc9a6437b70 R08: 0000000000000000 R09: 0000000000000000 [ 2808.695718][T22293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2808.703682][T22293] R13: 00007fc9a6626038 R14: 00007fc9a6625fa0 R15: 00007fff623e09b8 [ 2808.711657][T22293] [ 2813.438596][T14602] team0 (unregistering): Port device team_slave_1 removed [ 2815.932005][T14602] team0 (unregistering): Port device team_slave_0 removed [ 2817.034243][T14602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2817.474345][T14602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2821.330066][T22368] loop4: detected capacity change from 0 to 512 [ 2821.558825][T22375] loop8: detected capacity change from 0 to 512 [ 2821.594692][T22368] EXT4-fs (loop4): failed to initialize system zone (-117) [ 2821.633817][T22368] EXT4-fs (loop4): mount failed [ 2821.703320][T22375] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.3032: iget: bad i_size value: 38620345925642 [ 2821.754213][T17375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2821.771755][T17375] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2821.779955][T17375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2821.790191][T17375] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2821.797783][T17375] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2821.821700][T17375] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2821.839392][T22375] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.3032: couldn't read orphan inode 15 (err -117) [ 2821.932513][T22375] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2822.099309][T22386] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.3032: bg 0: block 5: invalid block bitmap [ 2822.145594][T22368] loop4: detected capacity change from 0 to 2048 [ 2822.201575][T22368] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 2822.249446][T22386] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 352 with error 28 [ 2822.335010][T22386] EXT4-fs (loop8): This should not happen!! Data will be lost [ 2822.335010][T22386] [ 2822.473211][T22386] EXT4-fs (loop8): Total free blocks count 0 [ 2822.479244][T22386] EXT4-fs (loop8): Free/Dirty block details [ 2822.510599][T22386] EXT4-fs (loop8): free_blocks=0 [ 2822.533143][T22386] EXT4-fs (loop8): dirty_blocks=356 [ 2822.538415][T22386] EXT4-fs (loop8): Block reservation details [ 2822.571973][T22393] device-mapper: table: 248:7: linear: Device lookup failed (-ENODEV) [ 2822.580326][T22386] EXT4-fs (loop8): i_reserved_data_blocks=356 [ 2822.628726][T22393] device-mapper: ioctl: error adding target to table [ 2823.932175][T17375] Bluetooth: hci2: command 0x0409 tx timeout [ 2824.187254][T21188] EXT4-fs (loop8): unmounting filesystem. [ 2827.091888][T17375] Bluetooth: hci2: command 0x041b tx timeout [ 2829.381050][T17375] Bluetooth: hci2: command 0x040f tx timeout [ 2830.532816][T14602] bond0 (unregistering): Released all slaves [ 2831.063414][T22426] loop8: detected capacity change from 0 to 1024 [ 2831.082786][T21966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2831.113342][T22426] EXT4-fs: Ignoring removed i_version option [ 2831.298109][T22426] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2831.461985][T17375] Bluetooth: hci2: command 0x0419 tx timeout [ 2831.942339][T22379] rxe_eth0 speed is unknown, defaulting to 1000 [ 2832.632725][T21188] EXT4-fs (loop8): unmounting filesystem. [ 2833.172876][T22455] loop8: detected capacity change from 0 to 512 [ 2833.269160][T22455] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.3049: iget: bad i_size value: 38620345925642 [ 2833.330705][T22379] chnl_net:caif_netlink_parms(): no params data found [ 2833.378832][T22455] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.3049: couldn't read orphan inode 15 (err -117) [ 2833.442389][T22455] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2833.726706][T22379] bridge0: port 1(bridge_slave_0) entered blocking state [ 2833.762658][T22461] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.3049: bg 0: block 5: invalid block bitmap [ 2833.787127][T22379] bridge0: port 1(bridge_slave_0) entered disabled state [ 2833.963623][T22379] device bridge_slave_0 entered promiscuous mode [ 2833.993283][T22379] bridge0: port 2(bridge_slave_1) entered blocking state [ 2834.000494][T22379] bridge0: port 2(bridge_slave_1) entered disabled state [ 2834.024198][T22379] device bridge_slave_1 entered promiscuous mode [ 2834.052831][T22461] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 788 with error 28 [ 2834.320797][T22461] EXT4-fs (loop8): This should not happen!! Data will be lost [ 2834.320797][T22461] [ 2834.411736][T22461] EXT4-fs (loop8): Total free blocks count 0 [ 2834.419625][T22461] EXT4-fs (loop8): Free/Dirty block details [ 2834.428655][T22461] EXT4-fs (loop8): free_blocks=0 [ 2834.435057][T22461] EXT4-fs (loop8): dirty_blocks=792 [ 2834.440389][T22461] EXT4-fs (loop8): Block reservation details [ 2834.455069][T22461] EXT4-fs (loop8): i_reserved_data_blocks=792 [ 2835.948102][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2835.954508][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.545579][T22379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2836.598858][T22379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2837.883022][T21188] EXT4-fs (loop8): unmounting filesystem. [ 2837.926831][T22379] team0: Port device team_slave_0 added [ 2837.973634][T22379] team0: Port device team_slave_1 added [ 2838.097077][T22379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2838.182404][T22379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2838.227185][T22483] loop4: detected capacity change from 0 to 512 [ 2838.808149][T22379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2840.293117][T22379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2840.300118][T22379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2840.460945][T22379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2840.462425][T22483] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.3051: iget: bad i_size value: 38620345925642 [ 2840.747165][T22483] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3051: couldn't read orphan inode 15 (err -117) [ 2840.967799][T22483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2841.216503][T22379] device hsr_slave_0 entered promiscuous mode [ 2841.265263][T22379] device hsr_slave_1 entered promiscuous mode [ 2841.400920][T22379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2841.408529][T22379] Cannot create hsr debugfs directory [ 2841.511359][T21192] EXT4-fs (loop4): unmounting filesystem. [ 2843.005552][T22505] usb usb8: usbfs: process 22505 (syz.4.3057) did not claim interface 0 before use [ 2843.025115][T22505] input: syz0 as /devices/virtual/input/input13 [ 2853.441738][T22379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2853.498707][T22379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2853.803320][T22379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2853.886842][T22379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2854.539420][T22379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2854.624239][T22379] 8021q: adding VLAN 0 to HW filter on device team0 [ 2854.691439][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2854.709921][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2854.773111][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2854.964845][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2855.028434][T19434] bridge0: port 1(bridge_slave_0) entered blocking state [ 2855.035680][T19434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2855.779717][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2855.820597][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2855.847675][T19434] bridge0: port 2(bridge_slave_1) entered blocking state [ 2855.854813][T19434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2855.923567][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2855.976675][T14602] device hsr_slave_0 left promiscuous mode [ 2856.089110][T14602] device hsr_slave_1 left promiscuous mode [ 2856.179231][T14602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2856.232103][T22573] loop9: detected capacity change from 0 to 512 [ 2856.252111][T14602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2856.299859][T14602] device bridge_slave_1 left promiscuous mode [ 2856.309553][T14602] bridge0: port 2(bridge_slave_1) entered disabled state [ 2857.885052][T14602] device bridge_slave_0 left promiscuous mode [ 2857.905069][T14602] bridge0: port 1(bridge_slave_0) entered disabled state [ 2857.959124][T22573] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.3066: iget: bad i_size value: 38620345925642 [ 2859.439269][T22573] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.3066: couldn't read orphan inode 15 (err -117) [ 2860.379544][T22573] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2860.818802][T22588] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 2860.970495][T18485] EXT4-fs (loop9): unmounting filesystem. [ 2861.138168][T22596] usb usb8: usbfs: process 22596 (syz.1.3069) did not claim interface 0 before use [ 2861.156443][T22596] input: syz0 as /devices/virtual/input/input14 [ 2866.700761][T14602] team0 (unregistering): Port device team_slave_1 removed [ 2866.874505][T14602] team0 (unregistering): Port device team_slave_0 removed [ 2866.901345][T22617] loop8: detected capacity change from 0 to 512 [ 2867.039888][T22617] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 2867.115573][T14602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2867.147985][T22617] EXT4-fs (loop8): invalid journal inode [ 2867.263219][T14602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2867.346090][T22620] xt_NFQUEUE: number of total queues is 0 [ 2868.439414][T22626] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2868.484168][T22626] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2869.344112][T22632] loop4: detected capacity change from 0 to 512 [ 2869.387918][T14602] bond0 (unregistering): Released all slaves [ 2869.414579][T22632] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.3074: iget: bad i_size value: 38620345925642 [ 2869.433671][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2869.449411][T22632] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3074: couldn't read orphan inode 15 (err -117) [ 2869.458509][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2869.484798][T22632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2869.491182][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2869.508062][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2869.519005][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2869.573430][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2869.611215][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2869.680049][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2869.704980][T22632] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.3074: bg 0: block 5: invalid block bitmap [ 2869.725452][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2869.776501][T22379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2869.790034][T22632] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 556 with error 28 [ 2869.799732][T22379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2869.832376][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2869.850162][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2869.858241][T22632] EXT4-fs (loop4): This should not happen!! Data will be lost [ 2869.858241][T22632] [ 2869.872016][T22632] EXT4-fs (loop4): Total free blocks count 0 [ 2869.882862][T22632] EXT4-fs (loop4): Free/Dirty block details [ 2869.908005][T22632] EXT4-fs (loop4): free_blocks=0 [ 2869.926301][T22632] EXT4-fs (loop4): dirty_blocks=556 [ 2869.972370][T22632] EXT4-fs (loop4): Block reservation details [ 2870.000252][T22632] EXT4-fs (loop4): i_reserved_data_blocks=556 [ 2870.233880][T21192] EXT4-fs (loop4): unmounting filesystem. [ 2870.630101][T22655] autofs4:pid:22655:autofs_fill_super: called with bogus options [ 2870.658167][T22379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2870.687404][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2870.707674][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2871.198658][T22674] FAULT_INJECTION: forcing a failure. [ 2871.198658][T22674] name failslab, interval 1, probability 5, space 0, times 9996 [ 2871.227556][T22674] CPU: 0 PID: 22674 Comm: syz.8.3078 Not tainted syzkaller #0 [ 2871.235080][T22674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2871.245174][T22674] Call Trace: [ 2871.248482][T22674] [ 2871.251442][T22674] dump_stack_lvl+0x188/0x24e [ 2871.256168][T22674] ? show_regs_print_info+0x12/0x12 [ 2871.261411][T22674] ? load_image+0x410/0x410 [ 2871.265968][T22674] ? __might_sleep+0xd0/0xd0 [ 2871.270597][T22674] ? __lock_acquire+0x7ea0/0x7ea0 [ 2871.275668][T22674] should_fail_ex+0x390/0x4c0 [ 2871.280384][T22674] should_failslab+0x5/0x20 [ 2871.284903][T22674] slab_pre_alloc_hook+0x59/0x300 [ 2871.289942][T22674] ? _raw_spin_unlock_irq+0x2a/0x40 [ 2871.295150][T22674] ? copy_time_ns+0x123/0x440 [ 2871.299922][T22674] __kmem_cache_alloc_node+0x4f/0x270 [ 2871.305341][T22674] ? copy_time_ns+0x123/0x440 [ 2871.310046][T22674] kmalloc_trace+0x26/0xe0 [ 2871.314479][T22674] copy_time_ns+0x123/0x440 [ 2871.319010][T22674] create_new_namespaces+0x467/0x700 [ 2871.324380][T22674] unshare_nsproxy_namespaces+0x116/0x160 [ 2871.330114][T22674] ksys_unshare+0x4f6/0x8e0 [ 2871.334655][T22674] ? sighand_ctor+0x40/0x40 [ 2871.339170][T22674] ? lock_chain_count+0x20/0x20 [ 2871.344036][T22674] ? syscall_enter_from_user_mode+0x21/0x80 [ 2871.349941][T22674] __x64_sys_unshare+0x34/0x40 [ 2871.354715][T22674] do_syscall_64+0x4c/0xa0 [ 2871.359145][T22674] ? clear_bhb_loop+0x60/0xb0 [ 2871.363854][T22674] ? clear_bhb_loop+0x60/0xb0 [ 2871.368563][T22674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2871.374482][T22674] RIP: 0033:0x7fc9a639fb19 [ 2871.378913][T22674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2871.398538][T22674] RSP: 002b:00007fc9a7259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2871.406966][T22674] RAX: ffffffffffffffda RBX: 00007fc9a6625fa0 RCX: 00007fc9a639fb19 [ 2871.414948][T22674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000480 [ 2871.422928][T22674] RBP: 00007fc9a6437b70 R08: 0000000000000000 R09: 0000000000000000 [ 2871.430905][T22674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2871.438884][T22674] R13: 00007fc9a6626038 R14: 00007fc9a6625fa0 R15: 00007fff623e09b8 [ 2871.446877][T22674] [ 2871.456895][T22622] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2871.467202][T22622] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2871.479660][T22622] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2871.499998][T22622] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2871.521426][T22622] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2871.529341][T22622] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2871.557775][T22622] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2871.564335][T22622] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2871.600158][T22622] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2871.621268][T22622] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2871.646803][T22622] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2871.697440][ T6329] Bluetooth: hci4: command 0x0c1a tx timeout [ 2871.993737][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2872.015602][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2872.048035][T22689] jffs2: notice: (22689) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 2872.058017][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2872.093740][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2872.135881][T22379] device veth0_vlan entered promiscuous mode [ 2872.152971][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2872.162773][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2872.181214][T22696] device syzkaller0 entered promiscuous mode [ 2872.198586][T22379] device veth1_vlan entered promiscuous mode [ 2872.306649][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2872.316319][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2872.345841][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2872.371637][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2872.387163][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2872.399275][T22379] device veth0_macvtap entered promiscuous mode [ 2872.421679][T22379] device veth1_macvtap entered promiscuous mode [ 2872.456869][T22704] EXT4-fs (sda1): shut down requested (2) [ 2872.463453][T22704] Aborting journal on device sda1-8. [ 2872.466861][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2872.506217][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.533301][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2872.559711][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.581252][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2872.608870][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2872.626462][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.649621][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2872.660371][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2872.671520][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2872.683419][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.693599][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2872.705422][T22379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2872.716454][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2872.726014][ T7] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2872.737785][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2872.745975][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2872.759419][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2872.769948][ T7] usb 2-1: Product: syz [ 2872.774159][ T7] usb 2-1: Manufacturer: syz [ 2872.787880][T19434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2872.796091][ T7] usb 2-1: SerialNumber: syz [ 2872.823158][ T7] usb 2-1: config 0 descriptor?? [ 2872.831725][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2872.859352][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.875607][T22719] block device autoloading is deprecated and will be removed. [ 2872.877853][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2872.898226][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.908618][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2872.920576][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.931221][T22379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2872.942739][T22379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2872.984231][T22379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2872.985286][T22719] block device autoloading is deprecated and will be removed. [ 2873.003090][T21086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2873.021354][T21086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2873.026607][T22719] md: invalid raid superblock magic on ram19 [ 2873.038388][T22719] md: ram19 does not have a valid v0.0 superblock, not importing! [ 2873.043088][T22379] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2873.055822][T22719] md: md_import_device returned -22 [ 2873.071108][T22379] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2873.080511][T22379] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2873.085134][ T7] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2873.089560][T22379] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2873.154518][T22722] block device autoloading is deprecated and will be removed. [ 2873.204708][T22722] md: invalid raid superblock magic on ram18 [ 2873.215597][T22722] md: ram18 does not have a valid v0.0 superblock, not importing! [ 2873.232516][T22722] md: md_import_device returned -22 [ 2873.288451][ T7] usb 2-1: USB disconnect, device number 21 [ 2873.328325][T21086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2873.343146][T21086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2873.369990][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2873.434507][ T6882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2873.482146][ T6882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2873.511382][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2873.537558][ T6329] Bluetooth: hci5: command 0x0c1a tx timeout [ 2873.537567][T17375] Bluetooth: hci1: command 0x0c1a tx timeout [ 2873.617125][ T6329] Bluetooth: hci2: command 0x0c1a tx timeout [ 2873.618191][T17375] Bluetooth: hci6: command 0x0c1a tx timeout [ 2873.777357][ T6329] Bluetooth: hci4: command 0x0406 tx timeout [ 2873.985974][T22761] capability: warning: `syz.4.3103' uses deprecated v2 capabilities in a way that may be insecure [ 2874.038202][T22761] FAULT_INJECTION: forcing a failure. [ 2874.038202][T22761] name failslab, interval 1, probability 5, space 0, times 9995 [ 2874.146269][T22761] CPU: 0 PID: 22761 Comm: syz.4.3103 Not tainted syzkaller #0 [ 2874.153816][T22761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2874.163909][T22761] Call Trace: [ 2874.167220][T22761] [ 2874.170185][T22761] dump_stack_lvl+0x188/0x24e [ 2874.174910][T22761] ? show_regs_print_info+0x12/0x12 [ 2874.180154][T22761] ? load_image+0x410/0x410 [ 2874.184703][T22761] ? __might_sleep+0xd0/0xd0 [ 2874.189331][T22761] ? __lock_acquire+0x7ea0/0x7ea0 [ 2874.194408][T22761] should_fail_ex+0x390/0x4c0 [ 2874.199134][T22761] should_failslab+0x5/0x20 [ 2874.203664][T22761] slab_pre_alloc_hook+0x59/0x300 [ 2874.208728][T22761] ? apply_wqattrs_prepare+0xf4/0xb80 [ 2874.214142][T22761] __kmem_cache_alloc_node+0x4f/0x270 [ 2874.219556][T22761] ? apply_wqattrs_prepare+0xf4/0xb80 [ 2874.224948][T22761] kmalloc_trace+0x26/0xe0 [ 2874.229382][T22761] apply_wqattrs_prepare+0xf4/0xb80 [ 2874.234608][T22761] apply_workqueue_attrs+0xd7/0x180 [ 2874.239822][T22761] alloc_workqueue+0xf8f/0x14a0 [ 2874.244696][T22761] ? mempool_init_node+0x3c0/0x480 [ 2874.249833][T22761] ? apply_workqueue_attrs+0x180/0x180 [ 2874.255303][T22761] ? msgpool_alloc+0x1b0/0x1b0 [ 2874.260163][T22761] ? ceph_msgpool_init+0x180/0x180 [ 2874.265294][T22761] ? mempool_create+0x7d/0xc0 [ 2874.269990][T22761] ? mempool_create+0xad/0xc0 [ 2874.274684][T22761] ? ceph_msgpool_init+0xcd/0x180 [ 2874.279724][T22761] ceph_osdc_init+0x5a0/0x8a0 [ 2874.284468][T22761] ceph_create_client+0x242/0x300 [ 2874.289507][T22761] ceph_get_tree+0x1c1/0x1350 [ 2874.294269][T22761] ? bpf_lsm_capable+0x5/0x10 [ 2874.298958][T22761] ? security_capable+0x85/0xb0 [ 2874.303905][T22761] vfs_get_tree+0x88/0x270 [ 2874.308334][T22761] do_new_mount+0x247/0xa50 [ 2874.312857][T22761] __se_sys_mount+0x2e3/0x3d0 [ 2874.317546][T22761] ? __x64_sys_mount+0xc0/0xc0 [ 2874.322325][T22761] ? lockdep_hardirqs_on+0x94/0x140 [ 2874.327529][T22761] ? __x64_sys_mount+0x1c/0xc0 [ 2874.332303][T22761] do_syscall_64+0x4c/0xa0 [ 2874.336734][T22761] ? clear_bhb_loop+0x60/0xb0 [ 2874.341422][T22761] ? clear_bhb_loop+0x60/0xb0 [ 2874.346119][T22761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2874.352023][T22761] RIP: 0033:0x7ff9d219fb19 [ 2874.356451][T22761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2874.376083][T22761] RSP: 002b:00007ff9d30df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2874.384516][T22761] RAX: ffffffffffffffda RBX: 00007ff9d2425fa0 RCX: 00007ff9d219fb19 [ 2874.392504][T22761] RDX: 0000200000025e00 RSI: 0000200000025dc0 RDI: 0000200000025d80 [ 2874.400520][T22761] RBP: 00007ff9d2237b70 R08: 0000000000000000 R09: 0000000000000000 [ 2874.408512][T22761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2874.416493][T22761] R13: 00007ff9d2426038 R14: 00007ff9d2425fa0 R15: 00007ffe0021eca8 [ 2874.424498][T22761] [ 2874.453281][T21086] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2874.574348][T21086] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 2875.374094][T21086] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2875.657565][T21086] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2876.949834][T21086] device hsr_slave_0 left promiscuous mode [ 2876.956085][T21086] device hsr_slave_1 left promiscuous mode [ 2876.965542][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2876.973205][T21086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2876.981083][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2876.988574][T21086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2876.996261][T21086] device bridge_slave_1 left promiscuous mode [ 2877.002685][T21086] bridge0: port 2(bridge_slave_1) entered disabled state [ 2877.012094][T21086] device bridge_slave_0 left promiscuous mode [ 2877.018517][T21086] bridge0: port 1(bridge_slave_0) entered disabled state [ 2877.039952][T21086] device veth1_macvtap left promiscuous mode [ 2877.045974][T21086] device veth0_macvtap left promiscuous mode [ 2877.052152][T21086] device veth1_vlan left promiscuous mode [ 2877.058091][T21086] device veth0_vlan left promiscuous mode [ 2877.634644][T21086] team0 (unregistering): Port device team_slave_1 removed [ 2877.681866][T21086] team0 (unregistering): Port device team_slave_0 removed [ 2877.736223][T21086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2877.788045][T21086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2878.132499][T21086] bond0 (unregistering): Released all slaves [ 2878.703784][T21086] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2878.774823][T21086] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2878.856324][T21086] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2878.923724][T21086] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.073914][T21086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.166577][T21086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.238700][T21086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.338234][T21086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.484428][T21086] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.566329][T21086] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.625203][T21086] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.684724][T21086] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.843094][T21086] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2879.924896][T21086] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2880.002257][T21086] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2880.063216][T21086] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2880.333253][T21086] tipc: Disabling bearer [ 2880.338853][T21086] tipc: Left network mode [ 2882.826842][T21086] device hsr_slave_0 left promiscuous mode [ 2882.833204][T21086] device hsr_slave_1 left promiscuous mode [ 2882.842238][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2882.850004][T21086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2882.859459][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2882.867127][T21086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2882.874622][T21086] device bridge_slave_1 left promiscuous mode [ 2882.881049][T21086] bridge0: port 2(bridge_slave_1) entered disabled state [ 2882.890930][T21086] device bridge_slave_0 left promiscuous mode [ 2882.899331][T21086] bridge0: port 1(bridge_slave_0) entered disabled state [ 2882.912379][T21086] device hsr_slave_0 left promiscuous mode [ 2882.919303][T21086] device hsr_slave_1 left promiscuous mode [ 2882.926157][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2882.933593][T21086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2882.941367][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2882.948953][T21086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2882.956808][T21086] device bridge_slave_1 left promiscuous mode [ 2882.962966][T21086] bridge0: port 2(bridge_slave_1) entered disabled state [ 2882.972571][T21086] device bridge_slave_0 left promiscuous mode [ 2882.979092][T21086] bridge0: port 1(bridge_slave_0) entered disabled state [ 2882.990271][T21086] device hsr_slave_0 left promiscuous mode [ 2882.997015][T21086] device hsr_slave_1 left promiscuous mode [ 2883.004230][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2883.011962][T21086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2883.019764][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2883.027430][T21086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2883.035391][T21086] device bridge_slave_1 left promiscuous mode [ 2883.041756][T21086] bridge0: port 2(bridge_slave_1) entered disabled state [ 2883.049992][T21086] device bridge_slave_0 left promiscuous mode [ 2883.056673][T21086] bridge0: port 1(bridge_slave_0) entered disabled state [ 2883.069036][T21086] device hsr_slave_0 left promiscuous mode [ 2883.075252][T21086] device hsr_slave_1 left promiscuous mode [ 2883.082092][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2883.089597][T21086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2883.097822][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2883.105242][T21086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2883.113095][T21086] device bridge_slave_1 left promiscuous mode [ 2883.119561][T21086] bridge0: port 2(bridge_slave_1) entered disabled state [ 2883.128220][T21086] device bridge_slave_0 left promiscuous mode [ 2883.134422][T21086] bridge0: port 1(bridge_slave_0) entered disabled state [ 2883.189946][T21086] device veth1_macvtap left promiscuous mode [ 2883.196325][T21086] device veth0_macvtap left promiscuous mode [ 2883.202409][T21086] device veth1_vlan left promiscuous mode [ 2883.208484][T21086] device veth0_vlan left promiscuous mode [ 2883.215308][T21086] device veth1_macvtap left promiscuous mode [ 2883.221499][T21086] device veth0_macvtap left promiscuous mode [ 2883.227828][T21086] device veth1_vlan left promiscuous mode [ 2883.233622][T21086] device veth0_vlan left promiscuous mode [ 2883.240768][T21086] device veth1_macvtap left promiscuous mode [ 2883.247040][T21086] device veth0_macvtap left promiscuous mode [ 2883.253247][T21086] device veth1_vlan left promiscuous mode [ 2883.259268][T21086] device veth0_vlan left promiscuous mode [ 2883.266538][T21086] device veth1_macvtap left promiscuous mode [ 2883.272596][T21086] device veth0_macvtap left promiscuous mode [ 2883.279056][T21086] device veth1_vlan left promiscuous mode [ 2883.284839][T21086] device veth0_vlan left promiscuous mode [ 2884.069136][T21086] team0 (unregistering): Port device team_slave_1 removed [ 2884.118167][T21086] team0 (unregistering): Port device team_slave_0 removed [ 2884.165312][T21086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2884.213433][T21086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2884.554271][T21086] bond0 (unregistering): Released all slaves