last executing test programs: 3.371753359s ago: executing program 1 (id=150): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x1) flock(r2, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 3.069598339s ago: executing program 1 (id=153): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xfffffff8, 0x3e0, 0xfffffe01, 0x2adf, 0x3}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1daa00000000000061101000000000009501000000a00000"], &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) unshare(0x22020600) close(r6) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x2000001, 0x80003, 0x41565559, 0x1, 0x8000, 0x3, 0x6, 0x10, 0x1, 0x7, 0x0, 0x1}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r2, r6, 0x2f, 0x0, @val=@netfilter={0x5, 0x1, 0x10001, 0x1}}, 0x20) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x2e7}}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x73, &(0x7f00000026c0)}, 0x10) fcntl$getown(r1, 0x9) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtaction={0x134, 0x30, 0x58f, 0x0, 0x4, {}, [{0x120, 0x1, [@m_nat={0x11c, 0x1, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x4, 0x5}, @multicast1, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xfffffffc, 0x4, 0x8, 0xa11}, @multicast2, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x5, 0x6, 0x9}, @remote, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8000, 0x800000a, 0x10000, 0x2}, @multicast1, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x10001, 0xffffffffffffffff, 0xf, 0x2}, @multicast2, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xac, 0x100, 0x4, 0x7, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r9) r10 = signalfd(r1, &(0x7f0000000000)={[0x81]}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="6000000000400000080020000400000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000013000000"], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000200040042dbd7000ffdbdf250214140008000000000000000c000c40000000000000000808000200ac1414aa"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x880) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)) 2.590841039s ago: executing program 3 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001880)={r0, &(0x7f00000002c0)="1e", &(0x7f0000000880)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r1}, 0x38) 2.488148765s ago: executing program 1 (id=158): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000640)="0b676ae7ce0aa301d6ff23b6557b", 0xe}], 0x1}, 0x44081) 2.400330755s ago: executing program 0 (id=159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x6c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa5a1, 0x42401}, [@IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5, @remote}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x6c}}, 0x4000844) 2.399410249s ago: executing program 3 (id=160): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200012, &(0x7f0000000600), 0x4, 0x5ab, &(0x7f0000000c00)="$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") symlink(&(0x7f00000008c0)='./file0\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.346799474s ago: executing program 4 (id=162): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004881, &(0x7f0000001580)=ANY=[@ANYRES16=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f4, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101000, 0x0) 2.079944306s ago: executing program 0 (id=164): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, 0x0, 0x2400c000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./cgroup.net/cgroup.procs\x00', 0x1047, 0x0, 0x1, 0x0, &(0x7f0000000300)) ftruncate(r0, 0x81fd) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) lseek(0xffffffffffffffff, 0x2, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 2.043169934s ago: executing program 4 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.974961819s ago: executing program 2 (id=166): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.79371031s ago: executing program 2 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcb) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.76196817s ago: executing program 0 (id=168): socket(0x15, 0x80005, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb96, &(0x7f0000002f40)="$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") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000a00)={0x3, 0x9c, 0x0, 0x1}) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 1.706962366s ago: executing program 4 (id=169): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000b14100028bd70"], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000010) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.658201023s ago: executing program 3 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.63502847s ago: executing program 2 (id=171): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = dup3(r1, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x8}, 0x94) 1.454652352s ago: executing program 2 (id=172): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 1.336239161s ago: executing program 0 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x44, 0x32, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 1.320485321s ago: executing program 3 (id=174): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000003c0)="a3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c42e152849ff5ad87e599f", 0xdb}], 0x1}}], 0x3, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.222506494s ago: executing program 2 (id=175): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.221033631s ago: executing program 1 (id=176): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r3, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x30}}, 0x0) 1.199019223s ago: executing program 3 (id=177): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[], 0x64}}, 0x0) 1.006817184s ago: executing program 1 (id=179): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)=0x1ff) 1.006652745s ago: executing program 5 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.006526787s ago: executing program 0 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x191100, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) 962.679921ms ago: executing program 3 (id=182): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x100000001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f00000010c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000001040)={0x6, 0x0, r2}) lsm_set_self_attr(0x66, &(0x7f0000000080)={0x65, 0x403, 0x20}, 0x20, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {0x25, 0x0, 0x3f}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) fcntl$setownex(r2, 0xf, &(0x7f0000001100)={0x2, r3}) 900.861603ms ago: executing program 2 (id=183): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xac1e0100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 900.081605ms ago: executing program 1 (id=184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xa797, 0xb, 0x20000000, 0x5}, 0x4f, 0x5, [{0x3e, 0x40, 0x400, 0xc46cc644, 0x551, 0x5}]}, [{0x0, 0x3, 0x9, 0x1, 0xf, 0x9}, {0x9, 0x3ff, 0x8, 0x1, 0xb5c, 0x3}, {0x8, 0x3ff, 0x7, 0x800, 0xe07, 0x4}, {0xffff93ee, 0x5dfd, 0x1, 0x2, 0xfffffffe, 0x39}, {0xd71, 0xff, 0x80000, 0x81, 0x3}, {0x4, 0x7, 0x7, 0xb, 0x8001, 0x8}, {0x9, 0x0, 0x7fff, 0x6, 0x7ff, 0xa1}, {0x6, 0x8, 0x4, 0x8, 0xc, 0x6}, {0x1, 0x6, 0xfffffffd, 0x9, 0x8, 0x6}, {0x81, 0x1, 0x3, 0x400, 0x7, 0xfffffffa}, {0x8, 0xf5, 0x8, 0x1000, 0x7, 0x9}, {0x5, 0x2, 0x3, 0x7, 0x96, 0x10000}, {0x1ff, 0x9, 0x79, 0x6, 0x5, 0xfffffff8}, {0xffff76f4, 0x1e, 0x3, 0x1, 0x8, 0xc0}, {0x89c, 0x0, 0x101, 0x3, 0xffff, 0xd}, {0x7fff, 0x2, 0xaf, 0x80000001, 0x6, 0x9}, {0x800, 0x7, 0xdfcb, 0x8, 0x7f72, 0x6}, {0x3, 0x6, 0x5, 0x3, 0x8, 0x7}, {0x1, 0xfffffffd, 0x1, 0x800, 0x4, 0x5}, {0xfffffffa, 0x8, 0x9, 0x9, 0x6, 0x1bad}, {0x272, 0x800, 0x7, 0xffffffff, 0x80000000, 0x2}, {0x3, 0x9, 0x8, 0x1, 0x40, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x101}, {0x6, 0x8001, 0x8, 0x6, 0xf, 0xfffffffc}, {0x3, 0xfffff1ad, 0xa, 0x101, 0x6, 0xd495}, {0x929, 0x5, 0x1, 0x400000, 0x6, 0x9}, {0x1ff, 0x8, 0x8, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x0, 0x2, 0xb}, {0xcd, 0x6, 0xa00000, 0x10001, 0x7, 0x1}, {0xfffffffa, 0x1, 0x2d, 0x3, 0x2, 0x2}, {0xb224, 0x8, 0x7, 0x509, 0x5, 0xfce9}, {0x4080, 0x61a0, 0x8, 0x5a4, 0x200, 0x10}, {0x2, 0x0, 0x4, 0x3, 0x9, 0x800}, {0x427d, 0x8d, 0x908d, 0xffffff9c, 0x3, 0x8}, {0xd6, 0x3ff, 0x2, 0x10001, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x1000, 0x80000001, 0x7}, {0x4fe49d73, 0x3, 0x30000000, 0x101, 0x9130, 0x7}, {0x2, 0xfffffffe, 0xfe, 0x8a69, 0x1, 0xc36}, {0x5c0, 0x6436, 0x8, 0x1, 0x4, 0x5}, {0xe26f, 0x200, 0x3, 0x85a, 0x608, 0xfffffffa}, {0x3, 0x1, 0x1000, 0x1000, 0x9, 0x2}, {0xa, 0x3, 0x40, 0xb0e, 0xc9d3, 0x7fff}, {0x10, 0x0, 0x4, 0x2, 0x8001, 0x3}, {0x8, 0x4, 0x24050b64, 0x84, 0x5, 0x8}, {0x8, 0x5e5, 0x4f0155f4, 0x8, 0x8}, {0xa08, 0x7, 0x2, 0x9, 0xfffffe00}, {0x0, 0x100, 0x2, 0x2, 0x3, 0x5e4}, {0x9, 0x7, 0x6, 0x81, 0x1ff, 0x8}, {0x1, 0xb2bfc89, 0x3, 0x7f, 0x10001, 0x2}, {0x8, 0xea31, 0x81, 0x1, 0x5, 0x18b4}, {0x0, 0x6, 0x36d, 0x1, 0xe1, 0x1}, {0x1400, 0x0, 0x1, 0x800, 0x6, 0x6294}, {0x100, 0x0, 0x6, 0x7d, 0x7fffffff, 0x18}, {0x3, 0x2, 0x5, 0x7, 0x8, 0x4}, {0x0, 0xffff7c05, 0x7, 0xe, 0x9}, {0x3, 0x80, 0x7, 0x5, 0x714, 0x590}, {0x5, 0x8, 0xe, 0x8, 0x49a24cd3}, {0x7, 0x3, 0x4, 0xb3, 0x2, 0xfff}, {0x80000000, 0x7, 0x5, 0x30fd, 0x9, 0x7ff}, {0x8, 0xa, 0x1, 0x2, 0xc7e7, 0x1000}, {0x0, 0xffffffff, 0x4, 0x3, 0x157d, 0x7}, {0x6, 0x2, 0x6, 0x74f, 0x4, 0x4}, {0x20d, 0x6, 0x8, 0x3, 0x6, 0x4}, {0x4, 0xb, 0x3, 0xddd, 0x5, 0x5}, {0xd4f, 0x4, 0xffffffff, 0x7, 0x81, 0x200}, {0x7, 0x1, 0x0, 0x4, 0x80000000, 0xffff}, {0x88, 0x9, 0xe, 0x9, 0x8, 0x457}, {0x9, 0xb, 0x8, 0xff, 0xfffffffa, 0x3}, {0x7, 0x5, 0x9, 0x7, 0xf, 0x2}, {0x6, 0x8900, 0xcc, 0x100, 0xffffffe3, 0xff}, {0x8, 0x0, 0x6, 0x400, 0x80, 0xfffffffe}, {0x0, 0x8, 0x5, 0x1, 0xffffffff, 0x8}, {0xb00, 0x7, 0x3, 0x0, 0x7, 0x7}, {0xffff0001, 0xb1ee, 0x6, 0x5823, 0x5, 0x9d}, {0x1, 0x101, 0x80000001, 0x8, 0x46b45ec5, 0xda2}, {0x1, 0x140, 0x5, 0x6d, 0xe, 0x1000}, {0x6, 0x8, 0xfffffb89, 0xa0a0, 0x3, 0xffff}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x3}, {0x400, 0x8, 0x800000, 0x8, 0x1}, {0x7, 0x80000001, 0x0, 0x7, 0x1, 0x100}, {0x9, 0x1, 0x9a, 0x5, 0x7, 0x6}, {0x6, 0x6, 0x3, 0x4, 0x2}, {0x1, 0x0, 0x800, 0x6, 0x6, 0x9}, {0x41, 0x3, 0x9cb8, 0x0, 0x14, 0x9}, {0x4, 0x6, 0x7, 0x71, 0x0, 0x5}, {0x27f6, 0xfffffff8, 0x80000000, 0x400, 0x9, 0x1000}, {0x5, 0x2, 0x6, 0xffffffba, 0x0, 0x2}, {0x5e70, 0x3, 0x7ff, 0x789, 0x5, 0x2}, {0x3db6, 0x9, 0xc, 0x8, 0x3, 0xdef}, {0xf3, 0x4, 0x4, 0x4, 0x5, 0x6}, {0xb57, 0x5, 0xb95, 0x9, 0xfff, 0x7}, {0x7, 0x200, 0x8, 0xfffeffff, 0x1ffc00, 0x8}, {0xfffffffe, 0xd, 0x8, 0x7, 0xa, 0x7}, {0x3, 0x81, 0x7, 0x4, 0x8, 0xcde5}, {0x572d, 0xb699, 0x5, 0x0, 0x8, 0xe}, {0x4bf, 0x3, 0x7, 0x1, 0x401}, {0x400, 0x0, 0x1, 0x0, 0x6, 0x3ff}, {0x101, 0x7, 0x4, 0x3c, 0x3, 0x1ff}, {0x4, 0x8, 0x4, 0xfff, 0x2, 0x1}, {0x3, 0x7596, 0x1, 0x9, 0xffff, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0xffff, 0xbb9}, {0x7, 0x6, 0x9, 0x9, 0x9, 0xffff}, {0x7fff, 0xd8ac, 0x400000, 0x5, 0xbde}, {0x11, 0x9, 0x2ed6, 0x2, 0x0, 0x81}, {0x27d, 0xf, 0xcde, 0x6, 0x5, 0x114a}, {0x1, 0x8, 0x5, 0x8, 0x4, 0xa}, {0xd9, 0x47, 0x7e, 0x6, 0x401, 0x4}, {0xa, 0x7, 0xb69, 0x1, 0x1f, 0x80000000}, {0x10000, 0x6, 0x4, 0x10000, 0x2, 0xc4}, {0x7ff, 0x80, 0x6, 0xfffffff8, 0x3f7, 0x5}, {0x1198, 0x9, 0x5, 0x5, 0x8, 0x9}, {0x4, 0x6, 0xa, 0x6, 0x0, 0x3}, {0x3, 0xafb, 0x1, 0x7, 0x0, 0x4}, {0x1ff, 0x9, 0x2, 0x5, 0x7f, 0xc}, {0xffffffc0, 0x0, 0xb6, 0x3, 0xf000, 0x7}, {0x0, 0x62b, 0x8, 0x800, 0x0, 0x8}, {0x3, 0x3, 0x6, 0x57d, 0x7, 0xd5}, {0xe800, 0x5, 0x2, 0x211, 0x8, 0x1}, {0x3, 0x6, 0x6, 0x5, 0x8}, {0xffff, 0x7fffffff, 0x4c, 0x785, 0x3}, {0x9, 0x401, 0x5000, 0x0, 0x3, 0x1d7}, {0x3, 0x3, 0xf, 0xfddb, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x9, 0x66, 0x4}, {0x8, 0x7, 0x4, 0x4, 0x2, 0x8}, {0x0, 0x6, 0x1, 0x5, 0x2, 0x9}, {0xe5, 0x43, 0x7ff, 0x2, 0x380, 0x2}, {0x8001, 0x5, 0x3, 0x8, 0xffffffff, 0x5}, {0x10000, 0x3, 0x400, 0xcb77, 0x2, 0xfe2a}], [{0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x833b0195d0c1ead6}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0xb0a1b2cb829f0c58}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x281f5cc8dc2390cd}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x44f390bc39b5fbbd, 0x1}, {0xb3ffe6e0e4e70638, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x40005) 686.231407ms ago: executing program 5 (id=185): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 556.217582ms ago: executing program 4 (id=186): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f00000001c0)='S', 0x1, 0x9690) io_setup(0x1, &(0x7f0000002500)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x14d142, 0x0) io_submit(r1, 0x3, &(0x7f0000000640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f0000000240)="a3", 0x1, 0xe3}, 0x0, 0x0]) 358.666483ms ago: executing program 5 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="050427"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 307.56562ms ago: executing program 5 (id=188): unshare(0x24020400) r0 = socket(0x10, 0x3, 0x0) fcntl$notify(r0, 0x402, 0x0) 255.318793ms ago: executing program 5 (id=189): r0 = socket$inet6(0xa, 0x5, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x3b, 0x4ec, 0xffff7fff, 0xe8, 0x588a, 0x6}, &(0x7f00000000c0)=0x9c) 204.360056ms ago: executing program 4 (id=190): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200040, 0x0) pwritev2(r0, 0x0, 0x0, 0x8659, 0x5d1, 0x3) 139.846357ms ago: executing program 5 (id=191): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000001"], 0x48) r0 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x800, 0x400000, 0x3c1}, &(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 38.569168ms ago: executing program 0 (id=192): unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 0s ago: executing program 4 (id=193): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x28, 0x80080000, 0xc, 0x7, 0x0, 0x9f91ea7a15befb90}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.186' (ED25519) to the list of known hosts. [ 98.435736][ T5613] cgroup: Unknown subsys name 'net' [ 98.566725][ T5613] cgroup: Unknown subsys name 'cpuset' [ 98.574993][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.590253][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.776576][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.793615][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.801306][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.809567][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.822827][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.830240][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.835111][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.837786][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.850052][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.852595][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.858406][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.866785][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.872872][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.881825][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.886847][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.899334][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.901345][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.914651][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.915534][ T5645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.922548][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.928938][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.936405][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.947003][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.951411][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.957439][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.964673][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.972297][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.984722][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.986208][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.007150][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.392405][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.399677][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.407223][ T5630] bridge_slave_0: entered allmulticast mode [ 103.414184][ T5630] bridge_slave_0: entered promiscuous mode [ 103.452625][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.459855][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.467291][ T5630] bridge_slave_1: entered allmulticast mode [ 103.474166][ T5630] bridge_slave_1: entered promiscuous mode [ 103.506947][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.514085][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.521332][ T5628] bridge_slave_0: entered allmulticast mode [ 103.528325][ T5628] bridge_slave_0: entered promiscuous mode [ 103.562313][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.569489][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.576810][ T5628] bridge_slave_1: entered allmulticast mode [ 103.583555][ T5628] bridge_slave_1: entered promiscuous mode [ 103.605705][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.612795][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.619979][ T5626] bridge_slave_0: entered allmulticast mode [ 103.626867][ T5626] bridge_slave_0: entered promiscuous mode [ 103.651334][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.671931][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.679212][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.686560][ T5626] bridge_slave_1: entered allmulticast mode [ 103.693384][ T5626] bridge_slave_1: entered promiscuous mode [ 103.722142][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.760796][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.784582][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.791789][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.799026][ T5634] bridge_slave_0: entered allmulticast mode [ 103.805976][ T5634] bridge_slave_0: entered promiscuous mode [ 103.815018][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.824200][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.831315][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.838694][ T5637] bridge_slave_0: entered allmulticast mode [ 103.845538][ T5637] bridge_slave_0: entered promiscuous mode [ 103.854434][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.870998][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.878216][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.885532][ T5638] bridge_slave_0: entered allmulticast mode [ 103.892269][ T5638] bridge_slave_0: entered promiscuous mode [ 103.899747][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.906975][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.914421][ T5634] bridge_slave_1: entered allmulticast mode [ 103.921300][ T5634] bridge_slave_1: entered promiscuous mode [ 103.929742][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.938952][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.946221][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.953343][ T5637] bridge_slave_1: entered allmulticast mode [ 103.960239][ T5637] bridge_slave_1: entered promiscuous mode [ 103.975188][ T5630] team0: Port device team_slave_0 added [ 103.980959][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.988068][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.995273][ T5636] Bluetooth: hci4: command tx timeout [ 103.995311][ T5636] Bluetooth: hci0: command tx timeout [ 104.004054][ T5629] Bluetooth: hci2: command tx timeout [ 104.006790][ T5638] bridge_slave_1: entered allmulticast mode [ 104.018646][ T5638] bridge_slave_1: entered promiscuous mode [ 104.062744][ T5630] team0: Port device team_slave_1 added [ 104.074015][ T5629] Bluetooth: hci1: command tx timeout [ 104.079475][ T5629] Bluetooth: hci3: command tx timeout [ 104.085207][ T5636] Bluetooth: hci5: command tx timeout [ 104.090708][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.115734][ T5628] team0: Port device team_slave_0 added [ 104.123798][ T5628] team0: Port device team_slave_1 added [ 104.140094][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.151175][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.161734][ T5626] team0: Port device team_slave_0 added [ 104.169577][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.196355][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.214519][ T5626] team0: Port device team_slave_1 added [ 104.221902][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.239400][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.246749][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.273021][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.312920][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.320297][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.346412][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.357787][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.364935][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.390949][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.416681][ T5634] team0: Port device team_slave_0 added [ 104.436915][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.444039][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.469956][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.488780][ T5638] team0: Port device team_slave_0 added [ 104.496046][ T5634] team0: Port device team_slave_1 added [ 104.502136][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.509275][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.535521][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.548290][ T5637] team0: Port device team_slave_0 added [ 104.557127][ T5638] team0: Port device team_slave_1 added [ 104.570017][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.577009][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.603071][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.615581][ T5637] team0: Port device team_slave_1 added [ 104.683297][ T5630] hsr_slave_0: entered promiscuous mode [ 104.689692][ T5630] hsr_slave_1: entered promiscuous mode [ 104.703243][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.710312][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.736475][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.760401][ T5628] hsr_slave_0: entered promiscuous mode [ 104.766827][ T5628] hsr_slave_1: entered promiscuous mode [ 104.772771][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 104.778670][ T5628] Cannot create hsr debugfs directory [ 104.786173][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.793163][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.819721][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.831508][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.838584][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.864640][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.881258][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.888241][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.914758][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.939787][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.946801][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.972889][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.002932][ T5626] hsr_slave_0: entered promiscuous mode [ 105.009204][ T5626] hsr_slave_1: entered promiscuous mode [ 105.015268][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 105.021194][ T5626] Cannot create hsr debugfs directory [ 105.027252][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.034371][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.060323][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.167361][ T5634] hsr_slave_0: entered promiscuous mode [ 105.173580][ T5634] hsr_slave_1: entered promiscuous mode [ 105.179727][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 105.185687][ T5634] Cannot create hsr debugfs directory [ 105.256438][ T5637] hsr_slave_0: entered promiscuous mode [ 105.262627][ T5637] hsr_slave_1: entered promiscuous mode [ 105.268931][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 105.274817][ T5637] Cannot create hsr debugfs directory [ 105.292614][ T5638] hsr_slave_0: entered promiscuous mode [ 105.299162][ T5638] hsr_slave_1: entered promiscuous mode [ 105.305351][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 105.311073][ T5638] Cannot create hsr debugfs directory [ 105.639889][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.649262][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.657324][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.666501][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.674521][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.683853][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.697061][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.706808][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.742452][ T5626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.751526][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.762403][ T5626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.772747][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.780430][ T5626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.789505][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.797331][ T5626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.806286][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.866181][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.875473][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.886638][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.896594][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.904469][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.913315][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.921425][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.930323][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.992931][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.002301][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.011325][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.020831][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.028704][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.038261][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.051452][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.060397][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.074345][ T5636] Bluetooth: hci2: command tx timeout [ 106.080041][ T5629] Bluetooth: hci0: command tx timeout [ 106.084561][ T5631] Bluetooth: hci4: command tx timeout [ 106.119672][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.147810][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.156957][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.164396][ T5631] Bluetooth: hci5: command tx timeout [ 106.164856][ T5636] Bluetooth: hci3: command tx timeout [ 106.169801][ T5631] Bluetooth: hci1: command tx timeout [ 106.188495][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.198188][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.206482][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.216075][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.224774][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.235462][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.250124][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.277984][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.285108][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.312921][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.320091][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.365950][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.380766][ T5638] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.390980][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.398847][ T5638] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.408608][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.422614][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.435234][ T5638] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.445324][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.453877][ T5638] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.463876][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.519153][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.537774][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.553812][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.560920][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.570246][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.577403][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.591851][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.599016][ T3319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.628411][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.635556][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.671067][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.741889][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.787134][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.818753][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.825868][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.838703][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.879068][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.886231][ T3319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.912230][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.919394][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.945631][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.952738][ T3319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.987402][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.077946][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.097956][ T5637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.110528][ T5637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.133347][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.140505][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.168437][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.175564][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.418932][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.536760][ T5630] veth0_vlan: entered promiscuous mode [ 107.583346][ T5630] veth1_vlan: entered promiscuous mode [ 107.671389][ T5630] veth0_macvtap: entered promiscuous mode [ 107.711905][ T5630] veth1_macvtap: entered promiscuous mode [ 107.771783][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.812347][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.843363][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.869170][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.908885][ T260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.931506][ T260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.966965][ T260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.992253][ T260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.149508][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.159121][ T5631] Bluetooth: hci4: command tx timeout [ 108.164380][ T5629] Bluetooth: hci0: command tx timeout [ 108.169987][ T5636] Bluetooth: hci2: command tx timeout [ 108.192871][ T5628] veth0_vlan: entered promiscuous mode [ 108.203998][ T260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.230074][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.237038][ T5636] Bluetooth: hci1: command tx timeout [ 108.245251][ T5629] Bluetooth: hci5: command tx timeout [ 108.250765][ T5636] Bluetooth: hci3: command tx timeout [ 108.260154][ T260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.276672][ T5628] veth1_vlan: entered promiscuous mode [ 108.329902][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.344214][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.347414][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.393469][ T5634] veth0_vlan: entered promiscuous mode [ 108.411830][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.420366][ T5634] veth1_vlan: entered promiscuous mode [ 108.478255][ T5628] veth0_macvtap: entered promiscuous mode [ 108.508987][ T5628] veth1_macvtap: entered promiscuous mode [ 108.529179][ T5637] veth0_vlan: entered promiscuous mode [ 108.839921][ T5626] veth0_vlan: entered promiscuous mode [ 108.903140][ T5637] veth1_vlan: entered promiscuous mode [ 108.916765][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.969581][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.996165][ T5634] veth0_macvtap: entered promiscuous mode [ 109.004431][ T5626] veth1_vlan: entered promiscuous mode [ 109.022442][ T5634] veth1_macvtap: entered promiscuous mode [ 109.045294][ T5637] veth0_macvtap: entered promiscuous mode [ 109.054398][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.067449][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.096811][ T5637] veth1_macvtap: entered promiscuous mode [ 109.115747][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.133133][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.168459][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.220962][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.262847][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.271014][ T5865] loop3: detected capacity change from 0 to 512 [ 109.279696][ T5626] veth0_macvtap: entered promiscuous mode [ 109.300820][ T5865] FAULT_INJECTION: forcing a failure. [ 109.300820][ T5865] name failslab, interval 1, probability 0, space 0, times 1 [ 109.302953][ T5626] veth1_macvtap: entered promiscuous mode [ 109.313426][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 109.313455][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.313469][ T5865] Call Trace: [ 109.313479][ T5865] [ 109.313488][ T5865] dump_stack_lvl+0xe8/0x150 [ 109.313522][ T5865] should_fail_ex+0x40c/0x560 [ 109.313555][ T5865] should_failslab+0xa8/0x100 [ 109.313584][ T5865] __kmalloc_node_noprof+0xf0/0x7b0 [ 109.313624][ T5865] ? alloc_slab_obj_exts+0xbf/0x250 [ 109.313660][ T5865] alloc_slab_obj_exts+0xbf/0x250 [ 109.313694][ T5865] __memcg_slab_post_alloc_hook+0x5dd/0xed0 [ 109.313744][ T5865] ? __send_signal_locked+0x22a/0xeb0 [ 109.313774][ T5865] kmem_cache_alloc_noprof+0x343/0x650 [ 109.313807][ T5865] ? __send_signal_locked+0x22a/0xeb0 [ 109.313834][ T5865] ? kmem_cache_alloc_noprof+0x156/0x650 [ 109.313871][ T5865] __send_signal_locked+0x22a/0xeb0 [ 109.313903][ T5865] force_sig_info_to_task+0x316/0x4b0 [ 109.313936][ T5865] force_sig_fault+0xf0/0x150 [ 109.313968][ T5865] ? __pfx_force_sig_fault+0x10/0x10 [ 109.314001][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.314032][ T5865] ? __bad_area_nosemaphore+0x31e/0x6a0 [ 109.314063][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.314094][ T5865] exc_page_fault+0x6a/0xc0 [ 109.314132][ T5865] asm_exc_page_fault+0x26/0x30 [ 109.314156][ T5865] RIP: 0033:0x7f503897ba79 [ 109.314176][ T5865] Code: 00 e9 eb ce 00 00 0f 1f 00 89 c8 c3 0f 1f 44 00 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 37 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 c5 f8 77 c3 0f 1f [ 109.314200][ T5865] RSP: 002b:00007f50397f5e58 EFLAGS: 00010283 [ 109.314222][ T5865] RAX: 0000000000000000 RBX: 00007f50397f5ee0 RCX: 0000000000000000 [ 109.314237][ T5865] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000000 [ 109.314253][ T5865] RBP: 0000200000000180 R08: 00002000000000c0 R09: 0000000000000000 [ 109.314269][ T5865] R10: 0000200000000180 R11: 0000000000000246 R12: 0000200000000680 [ 109.314286][ T5865] R13: 00007f50397f5ea0 R14: 0000000000000000 R15: 0000000000000000 [ 109.314317][ T5865] [ 109.580446][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.593489][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.606466][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.629652][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.655446][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.666216][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.686910][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.706763][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.717792][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.728119][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.743709][ T5638] veth0_vlan: entered promiscuous mode [ 109.769518][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.788997][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.817658][ T5867] loop3: detected capacity change from 0 to 32768 [ 109.818330][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.825917][ T5867] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8 (5867) [ 109.853629][ T5867] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 109.868856][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.871011][ T5867] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 109.884854][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.900412][ T5638] veth1_vlan: entered promiscuous mode [ 109.921796][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.929915][ T276] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x291009f2e92d2470 found 0x63239a1fb333f0ef level 0 [ 109.947358][ T5867] BTRFS error (device loop3): failed to read chunk root [ 109.963601][ T5867] BTRFS warning (device loop3): unable to release extent buffer 1052672 owner 3 gen 5 refs 3 flags 0xc [ 109.991503][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.011952][ T5867] BTRFS error (device loop3): open_ctree failed: -5 [ 110.036184][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.053086][ T276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.064435][ T276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.079346][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.187124][ T276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.202904][ T276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.213195][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.234105][ T5636] Bluetooth: hci4: command tx timeout [ 110.239531][ T5629] Bluetooth: hci2: command tx timeout [ 110.239562][ T5631] Bluetooth: hci0: command tx timeout [ 110.246036][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.267166][ T5638] veth0_macvtap: entered promiscuous mode [ 110.316560][ T5631] Bluetooth: hci3: command tx timeout [ 110.322079][ T5631] Bluetooth: hci5: command tx timeout [ 110.327581][ T5631] Bluetooth: hci1: command tx timeout [ 110.437031][ T5638] veth1_macvtap: entered promiscuous mode [ 110.514067][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.529273][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.537255][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.590196][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.643638][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.675424][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.696086][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.718096][ T5889] loop3: detected capacity change from 0 to 2048 [ 110.728142][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.755420][ T5764] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 110.767138][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.787889][ T5889] loop3: p1 < > p4 [ 110.796585][ T5882] loop0: detected capacity change from 0 to 32768 [ 110.805380][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.813419][ T5764] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.824317][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.832183][ T5889] loop3: partition table partially beyond EOD, truncated [ 110.837395][ T5643] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 110.840675][ T5882] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5882) [ 110.859063][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.871755][ T5889] loop3: p4 start 4096 is beyond EOD, truncated [ 110.884312][ T5643] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 110.885325][ T5891] loop2: detected capacity change from 0 to 4096 [ 110.910580][ T5882] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 110.921898][ T5882] BTRFS info (device loop0): using blake2b checksum algorithm [ 110.943327][ T5891] EXT4-fs: Ignoring removed orlov option [ 110.961540][ T5894] loop1: detected capacity change from 0 to 4096 [ 110.980955][ T5891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.018899][ T5891] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.023192][ T5894] EXT4-fs: Ignoring removed orlov option [ 111.086313][ T5891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.127013][ T5894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.167711][ T5882] BTRFS info (device loop0): enabling ssd optimizations [ 111.187330][ T5894] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.197549][ T5882] BTRFS info (device loop0): turning on async discard [ 111.217322][ T5894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.234588][ T5764] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 111.266955][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.293574][ T5882] BTRFS info (device loop0): enabling free space tree [ 111.301775][ T5882] BTRFS info (device loop0): use zstd compression, level 3 [ 111.347890][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.425255][ T5764] usb 4-1: device descriptor read/64, error -71 [ 111.945511][ T5764] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 112.134085][ T30] audit: type=1800 audit(1782131690.876:2): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 112.178719][ T5920] loop4: detected capacity change from 0 to 4096 [ 112.202348][ T5920] nilfs2: Unknown parameter 'norecoverq' [ 112.235384][ T5764] usb 4-1: device descriptor read/64, error -71 [ 112.348396][ T5628] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 112.353230][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.380846][ T5764] usb usb4-port1: attempt power cycle [ 112.436503][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.546860][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.667452][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.677776][ T5928] capability: warning: `syz.0.11' uses 32-bit capabilities (legacy support in use) [ 112.755364][ T5764] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 112.787075][ T5764] usb 4-1: device descriptor read/8, error -71 [ 113.044328][ T5764] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 113.072575][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 113.089617][ T5764] usb 4-1: device descriptor read/8, error -71 [ 113.154994][ T5943] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16'. [ 113.176889][ T5920] loop4: detected capacity change from 0 to 32768 [ 113.192130][ T5920] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5 (5920) [ 113.223480][ T5764] usb usb4-port1: unable to enumerate USB device [ 113.227768][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17'. [ 113.227799][ T5946] netlink: 64 bytes leftover after parsing attributes in process `syz.5.17'. [ 113.250901][ T5920] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.250944][ T5920] BTRFS info (device loop4): using blake2b checksum algorithm [ 113.336069][ T5920] BTRFS info (device loop4): enabling ssd optimizations [ 113.424216][ T5920] BTRFS info (device loop4): turning on async discard [ 113.461977][ T5920] BTRFS info (device loop4): enabling free space tree [ 113.497803][ T5920] BTRFS info (device loop4): use zstd compression, level 3 [ 113.574005][ T5764] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.581669][ T5749] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.646180][ T30] audit: type=1800 audit(1782131692.396:3): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file0" dev="loop4" ino=258 res=0 errno=0 [ 113.649989][ T5920] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 113.739489][ T5941] loop0: detected capacity change from 0 to 32768 [ 113.748469][ T5941] ======================================================= [ 113.748469][ T5941] WARNING: The mand mount option has been deprecated and [ 113.748469][ T5941] and is ignored by this kernel. Remove the mand [ 113.748469][ T5941] option from the mount to silence this warning. [ 113.748469][ T5941] ======================================================= [ 113.790471][ T5749] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 113.815914][ T5764] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 113.825284][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.846460][ T5764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.858981][ T5749] usb 3-1: config 0 descriptor?? [ 113.869297][ T5764] usb 6-1: config 0 descriptor?? [ 113.928485][ T5941] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.010577][ T5941] XFS (loop0): Ending clean mount [ 114.267424][ T5628] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.507899][ T5943] loop2: detected capacity change from 0 to 8 [ 114.538292][ T5946] loop5: detected capacity change from 0 to 8 [ 114.573194][ T5943] SQUASHFS error: xz decompression failed, data probably corrupt [ 114.589970][ T5946] SQUASHFS error: xz decompression failed, data probably corrupt [ 114.611220][ T5943] SQUASHFS error: Failed to read block 0x108: -5 [ 114.629845][ T5946] SQUASHFS error: Failed to read block 0x108: -5 [ 114.645986][ T5943] SQUASHFS error: Unable to read metadata cache entry [106] [ 114.666815][ T5946] SQUASHFS error: Unable to read metadata cache entry [106] [ 114.681092][ T5943] SQUASHFS error: Unable to read inode 0x11f [ 114.694847][ T5980] netlink: 72 bytes leftover after parsing attributes in process `syz.1.22'. [ 114.701005][ T5946] SQUASHFS error: Unable to read inode 0x11f [ 114.710768][ T5626] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.755531][ T5749] ath6kl: Failed to read usb control message: -71 [ 114.779465][ T5749] ath6kl: Unable to read the bmi data from the device: -71 [ 114.789262][ T5636] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 114.793851][ T5749] ath6kl: Unable to recv target info: -71 [ 114.824215][ T5749] ath6kl: Failed to init ath6kl core: -71 [ 114.826215][ T5972] loop3: detected capacity change from 0 to 32768 [ 115.230123][ T5749] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 115.246060][ T5749] usb 3-1: USB disconnect, device number 2 [ 115.257563][ T5972] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.272767][ T5764] ath6kl: Failed to read usb control message: -71 [ 115.281944][ T5764] ath6kl: Unable to read the bmi data from the device: -71 [ 115.290655][ T5764] ath6kl: Unable to recv target info: -71 [ 115.298467][ T5764] ath6kl: Failed to init ath6kl core: -71 [ 115.306870][ T5764] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 115.319472][ T5764] usb 6-1: USB disconnect, device number 2 [ 115.480494][ T5972] XFS (loop3): Ending clean mount [ 116.181739][ T5992] process 'syz.0.20' launched './file1' with NULL argv: empty string added [ 116.441528][ T5998] loop2: detected capacity change from 0 to 512 [ 116.596746][ T6005] loop0: detected capacity change from 0 to 4096 [ 116.611408][ T6005] nilfs2: Unknown parameter 'norecoverq' [ 116.705155][ T6011] loop4: detected capacity change from 0 to 512 [ 116.868536][ T5630] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.887271][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 116.914908][ T6015] netlink: 64 bytes leftover after parsing attributes in process `syz.4.30'. [ 116.934006][ T5764] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.020841][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 117.053748][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.077583][ T6018] loop5: detected capacity change from 0 to 4096 [ 117.087154][ T6018] EXT4-fs: Ignoring removed orlov option [ 117.114238][ T5764] usb 3-1: Using ep0 maxpacket: 16 [ 117.121971][ T5764] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.133450][ T6018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.144248][ T804] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.152284][ T5764] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.161568][ T6018] EXT4-fs (loop5): Test dummy encryption mode enabled [ 117.182608][ T5764] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.193631][ T6018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.210739][ T6005] loop0: detected capacity change from 0 to 32768 [ 117.211576][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.224040][ T5643] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.244119][ T6005] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.25 (6005) [ 117.288149][ T5764] usb 3-1: Product: syz [ 117.293512][ T6005] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 117.302711][ T5764] usb 3-1: Manufacturer: syz [ 117.303962][ T6005] BTRFS info (device loop0): using blake2b checksum algorithm [ 117.310698][ T5764] usb 3-1: SerialNumber: syz [ 117.345667][ T804] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.453971][ T5643] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 117.457301][ T5764] usb 3-1: 0:2 : does not exist [ 117.515798][ T804] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.532417][ T5643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.556431][ T804] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.697819][ T5643] usb 5-1: config 0 descriptor?? [ 117.792168][ T804] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 117.844369][ T6023] loop3: detected capacity change from 0 to 4096 [ 117.858532][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.876489][ T6005] BTRFS info (device loop0): enabling ssd optimizations [ 117.876794][ T6039] overlayfs: empty lowerdir [ 117.884556][ T6023] nilfs2: Unknown parameter 'norecoverq' [ 117.894224][ T804] usb 2-1: Product: syz [ 117.895503][ T6005] BTRFS info (device loop0): turning on async discard [ 117.898426][ T804] usb 2-1: Manufacturer: syz [ 117.920944][ T804] usb 2-1: SerialNumber: syz [ 117.942557][ T804] hub 2-1:1.0: bad descriptor, ignoring hub [ 117.952811][ T804] hub 2-1:1.0: probe with driver hub failed with error -5 [ 117.967268][ T6005] BTRFS info (device loop0): enabling free space tree [ 117.996086][ T6005] BTRFS info (device loop0): use zstd compression, level 3 [ 118.037014][ T6009] xt_CT: No such helper "netbios-ns" [ 118.128530][ T5764] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 118.187381][ T5999] loop1: detected capacity change from 0 to 512 [ 118.211371][ T5999] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.261266][ T6005] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 118.263663][ T30] audit: type=1800 audit(1782131696.996:4): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 118.290458][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.300773][ T5764] usb 3-1: USB disconnect, device number 3 [ 118.415382][ T5999] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 118.415504][ T5999] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 118.415559][ T5999] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.24: Failed to acquire dquot type 1 [ 118.415595][ T5999] loop1: lost filesystem error report for type 5 error -117 [ 118.421730][ T5999] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.24: bg 0: block 495: padding at end of block bitmap is not set [ 118.421777][ T5999] loop1: lost filesystem error report for type 5 error -117 [ 118.423935][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 118.423958][ C0] EXT4-fs (loop1): initial error at time 1782131697: ext4_acquire_dquot:7041 [ 118.423987][ C0] EXT4-fs (loop1): last error at time 1782131697: ext4_validate_block_bitmap:441 [ 118.425625][ T5999] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 118.425656][ T5999] loop1: lost filesystem error report for type 5 error -117 [ 118.429584][ T5999] EXT4-fs (loop1): 1 truncate cleaned up [ 118.430714][ T5999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.430825][ T5999] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.525048][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.723576][ T5999] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 118.724604][ T804] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 118.773759][ T5643] ath6kl: Failed to read usb control message: -71 [ 118.780864][ T5999] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 118.799003][ T5643] ath6kl: Unable to read the bmi data from the device: -71 [ 118.815706][ T5643] ath6kl: Unable to recv target info: -71 [ 118.825944][ T5999] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.24: Failed to acquire dquot type 1 [ 118.842007][ T5643] ath6kl: Failed to init ath6kl core: -71 [ 118.854847][ T5643] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 118.900567][ T5643] usb 5-1: USB disconnect, device number 2 [ 118.975271][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 119.027981][ T6023] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 8509d0d0-7a3c-47b9-bf3b-3668209ba85c [ 119.065151][ T6023] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.31 (6023) [ 119.116072][ T6023] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.135477][ T9] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 119.153832][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.165190][ T6023] BTRFS info (device loop3): using blake2b checksum algorithm [ 119.184953][ T9] usb 6-1: config 0 has no interface number 0 [ 119.197826][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 119.208540][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.222108][ T9] usb 6-1: Product: syz [ 119.226414][ T9] usb 6-1: Manufacturer: syz [ 119.250942][ T9] usb 6-1: SerialNumber: syz [ 119.285627][ T9] usb 6-1: config 0 descriptor?? [ 119.308662][ T9] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 119.345383][ T9] uvcvideo 6-1:0.31: No valid video chain found. [ 119.415143][ T29] usb 2-1: USB disconnect, device number 2 [ 119.431929][ T29] usblp0: removed [ 119.456342][ T6023] BTRFS info (device loop3): enabling ssd optimizations [ 119.478263][ T6023] BTRFS info (device loop3): turning on async discard [ 119.513649][ T6023] BTRFS info (device loop3): enabling free space tree [ 119.555054][ T6023] BTRFS info (device loop3): use zstd compression, level 3 [ 119.646053][ T6023] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 119.692274][ T30] audit: type=1800 audit(1782131698.386:5): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.31" name="file0" dev="loop3" ino=258 res=0 errno=0 [ 119.791893][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 119.808056][ T6068] netlink: 64 bytes leftover after parsing attributes in process `syz.2.36'. [ 119.846647][ T5749] usb 6-1: USB disconnect, device number 3 [ 119.988012][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.155541][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.200584][ T5749] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 120.226953][ T5749] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.272608][ T5628] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.290755][ T6080] set_capacity_and_notify: 2 callbacks suppressed [ 120.290771][ T6080] loop1: detected capacity change from 0 to 4096 [ 120.336982][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 120.354435][ T6080] EXT4-fs: Ignoring removed orlov option [ 120.364950][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.409924][ T6080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.427407][ T9] usb 3-1: config 0 descriptor?? [ 120.461890][ T6080] EXT4-fs (loop1): Test dummy encryption mode enabled [ 120.503296][ T6080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.173777][ T6090] FAULT_INJECTION: forcing a failure. [ 121.173777][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 121.530592][ T6068] loop2: detected capacity change from 0 to 8 [ 121.571520][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 121.571557][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.571573][ T6090] Call Trace: [ 121.571582][ T6090] [ 121.571592][ T6090] dump_stack_lvl+0xe8/0x150 [ 121.571626][ T6090] should_fail_ex+0x40c/0x560 [ 121.571651][ T6090] ? __d_alloc+0x37/0x6f0 [ 121.571669][ T6090] should_failslab+0xa8/0x100 [ 121.571690][ T6090] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 121.571722][ T6090] ? __asan_memset+0x22/0x50 [ 121.571751][ T6090] __d_alloc+0x37/0x6f0 [ 121.571768][ T6090] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.571792][ T6090] ? dquot_alloc_inode+0x216/0xa50 [ 121.571826][ T6090] d_alloc_pseudo+0x21/0xc0 [ 121.571845][ T6090] alloc_path_pseudo+0x107/0x220 [ 121.571878][ T6090] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 121.571904][ T6090] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.571930][ T6090] alloc_file_pseudo+0xa8/0x1e0 [ 121.571958][ T6090] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 121.571987][ T6090] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.572010][ T6090] __shmem_file_setup+0x2e9/0x370 [ 121.572035][ T6090] ? __pfx___shmem_file_setup+0x10/0x10 [ 121.572055][ T6090] ? do_raw_spin_lock+0x12b/0x2f0 [ 121.572083][ T6090] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.572105][ T6090] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.572128][ T6090] memfd_alloc_file+0x99/0x540 [ 121.572164][ T6090] ? __pfx_memfd_alloc_file+0x10/0x10 [ 121.572200][ T6090] ? alloc_fd+0x651/0x6c0 [ 121.572239][ T6090] __se_sys_memfd_create+0x31f/0x410 [ 121.572268][ T6090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.572287][ T6090] do_syscall_64+0x174/0x580 [ 121.572321][ T6090] ? trace_irq_disable+0x3b/0x140 [ 121.572356][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.572375][ T6090] RIP: 0033:0x7ff45439ce59 [ 121.572391][ T6090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.572405][ T6090] RSP: 002b:00007ff4525f5e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 121.572425][ T6090] RAX: ffffffffffffffda RBX: 000000000000017f RCX: 00007ff45439ce59 [ 121.572438][ T6090] RDX: 00007ff4525f5ee0 RSI: 0000000000000000 RDI: 00007ff45443304f [ 121.572450][ T6090] RBP: 0000200000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 121.572462][ T6090] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 121.572473][ T6090] R13: 00007ff4525f5ee0 R14: 00007ff4525f5ea0 R15: 0000200000000200 [ 121.572495][ T6090] [ 121.904114][ T6083] loop4: detected capacity change from 0 to 32768 [ 121.951326][ T6068] SQUASHFS error: xz decompression failed, data probably corrupt [ 121.974643][ T6083] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.029037][ T6068] SQUASHFS error: Failed to read block 0x108: -5 [ 122.080168][ T6068] SQUASHFS error: Unable to read metadata cache entry [106] [ 122.132681][ T6083] XFS (loop4): Ending clean mount [ 122.163096][ T6068] SQUASHFS error: Unable to read inode 0x11f [ 122.292716][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.311057][ T9] ath6kl: Failed to read usb control message: -71 [ 122.325393][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 122.339394][ T9] ath6kl: Unable to recv target info: -71 [ 122.340650][ T5626] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.346243][ T9] ath6kl: Failed to init ath6kl core: -71 [ 122.379927][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 122.403357][ T9] usb 3-1: USB disconnect, device number 4 [ 122.898984][ T6100] loop0: detected capacity change from 0 to 32768 [ 122.933312][ T6100] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.069613][ T6100] XFS (loop0): Ending clean mount [ 123.083260][ T5630] BTRFS info (device loop3): last unmount of filesystem 8509d0d0-7a3c-47b9-bf3b-3668209ba85c [ 123.129028][ T6100] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.312419][ T6125] loop0: detected capacity change from 0 to 128 [ 124.483768][ T6128] binder: Bad value for 'stats' [ 124.505830][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.523281][ T6128] : entered promiscuous mode [ 124.693959][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 124.814025][ T29] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 124.836489][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.849109][ T29] usb 4-1: Product: syz [ 124.853391][ T29] usb 4-1: Manufacturer: syz [ 124.863746][ T29] usb 4-1: SerialNumber: syz [ 125.297898][ T29] usb 4-1: config 0 descriptor?? [ 125.312198][ T29] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 125.457384][ T6116] loop2: detected capacity change from 0 to 65536 [ 125.480846][ T6116] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 125.598414][ T6116] XFS (loop2): Ending clean mount [ 125.642344][ T6116] XFS (loop2): Quotacheck needed: Please wait. [ 125.651172][ T6126] loop3: detected capacity change from 0 to 512 [ 125.689669][ T6116] XFS (loop2): Quotacheck: Done. [ 125.706427][ T6126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.757389][ T6146] Zero length message leads to an empty skb [ 125.827401][ T29] gspca_sonixj: reg_w1 err -110 [ 125.902083][ T29] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 126.149665][ T6126] EXT4-fs (loop3): orphan cleanup on readonly fs [ 126.172239][ T6126] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.45: invalid indirect mapped block 4294967295 (level 1) [ 126.219235][ T6126] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.230853][ T6126] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.45: invalid indirect mapped block 4294967295 (level 1) [ 126.240077][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 126.240100][ C1] EXT4-fs (loop3): initial error at time 1782131704: ext4_free_branches:1023: inode 11 [ 126.240136][ C1] EXT4-fs (loop3): last error at time 1782131704: ext4_free_branches:1023: inode 11 [ 126.426465][ T6126] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.438011][ T6126] EXT4-fs (loop3): 2 truncates cleaned up [ 126.474188][ T5634] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 126.482874][ T6126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.606752][ T6152] netlink: 40 bytes leftover after parsing attributes in process `syz.0.55'. [ 126.716442][ T6126] EXT4-fs error (device loop3): __ext4_iget:5533: inode #13: block 32768: comm syz.3.45: invalid block [ 126.797237][ T6165] comedi comedi2: comedi_test: 320 microvolt, 2 microsecond waveform attached [ 126.849349][ T6167] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.878013][ T6167] overlayfs: failed lookup in lower (newroot/12, name='file0', err=-40): overlapping layers [ 127.313099][ T6190] program syz.2.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.476424][ T6199] loop4: detected capacity change from 0 to 512 [ 127.501927][ T6199] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 127.516171][ T6202] loop0: detected capacity change from 0 to 512 [ 127.517523][ T6199] FAT-fs (loop4): Filesystem has been set read-only [ 127.561970][ T6202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.583729][ T6202] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.714859][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.731832][ T6212] loop2: detected capacity change from 0 to 256 [ 128.026840][ T6227] 9pnet_virtio: no channels available for device syz [ 128.055918][ T6227] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 128.082959][ T6227] netlink: 'syz.2.83': attribute type 2 has an invalid length. [ 128.187131][ T9] usb 4-1: USB disconnect, device number 6 [ 128.203714][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.235774][ T6240] loop1: detected capacity change from 0 to 512 [ 128.258535][ T6240] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.273083][ T6240] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.86: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 128.292721][ T6240] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 128.293106][ T6240] EXT4-fs error (device loop1): ext4_quota_enable:7235: comm syz.1.86: Bad quota inode: 4, type: 1 [ 128.303925][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 128.319685][ C1] EXT4-fs (loop1): last error at time 1782131707: ext4_ext_check_inode:521: inode 4 [ 128.335855][ T6240] loop1: lost filesystem error report for type 5 error -117 [ 128.344018][ T6240] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.367785][ T6240] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 128.377881][ T6240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.429708][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.809730][ T6265] loop2: detected capacity change from 0 to 512 [ 128.929510][ T6269] capability: warning: `syz.2.99' uses deprecated v2 capabilities in a way that may be insecure [ 128.973988][ T804] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.125442][ T804] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 129.133813][ T804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.147674][ T804] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 129.161202][ T804] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.170622][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.181058][ T804] usb 2-1: config 0 descriptor?? [ 129.193220][ T804] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 129.607072][ T6286] loop2: detected capacity change from 0 to 128 [ 129.616534][ T6286] FAT-fs (loop2): data area starts beyond volume (33 > 0) [ 129.623861][ T6286] FAT-fs (loop2): Can't find a valid FAT filesystem [ 129.649336][ T6286] loop2: detected capacity change from 0 to 512 [ 129.660988][ T6286] EXT4-fs (loop2): 1 truncate cleaned up [ 129.668328][ T6286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.680508][ T5636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 129.686893][ T5631] Bluetooth: hci6: command 0x1003 tx timeout [ 129.758590][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.832950][ T6293] syzkaller0: entered promiscuous mode [ 129.838946][ T6293] syzkaller0: entered allmulticast mode [ 129.933519][ T6297] syz_tun: entered allmulticast mode [ 130.086380][ T6175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.890333][ T6357] random: crng reseeded on system resumption [ 130.965121][ T6357] Restarting kernel threads ... [ 130.993833][ T6357] Done restarting kernel threads. [ 131.001428][ T6328] syzkaller0: entered promiscuous mode [ 131.012002][ T6328] syzkaller0: entered allmulticast mode [ 131.542489][ T6383] netlink: 'syz.5.139': attribute type 3 has an invalid length. [ 131.654589][ T30] audit: type=1326 audit(1782131710.396:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.143" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503899ce59 code=0x7ffc0000 [ 131.688507][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'. [ 131.705255][ T30] audit: type=1326 audit(1782131710.406:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.143" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503899ce59 code=0x7ffc0000 [ 131.776191][ T30] audit: type=1326 audit(1782131710.406:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.143" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503899ce59 code=0x7ffc0000 [ 131.828700][ T5764] usb 2-1: USB disconnect, device number 3 [ 131.855300][ T29] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 131.882970][ T29] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 131.900529][ T6406] loop0: detected capacity change from 0 to 512 [ 131.918125][ T29] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 131.927428][ T30] audit: type=1326 audit(1782131710.406:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.143" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f503899ce59 code=0x7ffc0000 [ 131.972058][ T29] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 131.974656][ T6406] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.999368][ T29] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 132.034883][ T29] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 132.055908][ T30] audit: type=1326 audit(1782131710.406:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.143" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503899ce59 code=0x7ffc0000 [ 132.088736][ T29] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 132.107719][ T29] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 132.109446][ T6406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 132.129773][ T29] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 132.145297][ T6406] System zones: 1-12 [ 132.163744][ T30] audit: type=1326 audit(1782131710.406:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.143" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503899ce59 code=0x7ffc0000 [ 132.188498][ T30] audit: type=1326 audit(1782131710.406:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.143" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503899ce59 code=0x7ffc0000 [ 132.221528][ T29] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 132.246671][ T30] audit: type=1326 audit(1782131710.406:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.143" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503899ce59 code=0x7ffc0000 [ 132.289391][ T6406] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.312464][ T30] audit: type=1326 audit(1782131710.406:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.143" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f503899ce59 code=0x7ffc0000 [ 132.339385][ T6406] EXT4-fs (loop0): 1 truncate cleaned up [ 132.341999][ T29] hid-generic 0103:0004:0000.0005: hidraw0: HID v0.05 Device [syz0] on syz1 [ 132.346176][ T6406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.414953][ T30] audit: type=1326 audit(1782131710.416:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.143" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503899ce59 code=0x7ffc0000 [ 132.560932][ T6422] fido_id[6422]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.750803][ T6433] netlink: 104 bytes leftover after parsing attributes in process `syz.2.154'. [ 132.840540][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.954967][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.961575][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.241772][ T6450] loop3: detected capacity change from 0 to 1024 [ 133.293180][ T6455] loop4: detected capacity change from 0 to 764 [ 133.293242][ T6449] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 133.300483][ T6450] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.160: Failed to acquire dquot type 0 [ 133.338193][ T6455] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 133.364126][ T6459] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.374253][ T6450] loop3: lost filesystem error report for type 5 error -117 [ 133.375084][ T6450] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 133.396936][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 133.396961][ C0] EXT4-fs (loop3): initial error at time 1782131712: ext4_acquire_dquot:7041 [ 133.396987][ C0] EXT4-fs (loop3): last error at time 1782131712: ext4_acquire_dquot:7041 [ 133.414681][ T6450] EXT4-fs (loop3): 1 truncate cleaned up [ 133.429495][ T6450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.556790][ T6464] loop0: detected capacity change from 0 to 256 [ 133.584631][ T6464] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.706326][ T6450] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.160: Failed to acquire dquot type 0 [ 133.878367][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.979035][ T6452] syzkaller0: entered promiscuous mode [ 133.985624][ T6476] loop0: detected capacity change from 0 to 4096 [ 133.997907][ T6452] syzkaller0: entered allmulticast mode [ 134.009402][ T6446] syzkaller0: entered promiscuous mode [ 134.024830][ T6446] syzkaller0: entered allmulticast mode [ 134.033463][ T6476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.189502][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.202708][ T6484] syzkaller0: entered promiscuous mode [ 134.241926][ T6484] syzkaller0: entered allmulticast mode [ 134.798883][ T6516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.933628][ T6516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.947297][ T6526] loop5: detected capacity change from 0 to 512 [ 135.051348][ T6528] loop4: detected capacity change from 0 to 128 [ 135.069845][ T6528] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 135.093123][ T6528] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.135491][ T6517] syzkaller0: entered promiscuous mode [ 135.141035][ T6517] syzkaller0: entered allmulticast mode [ 135.215191][ T6516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.324814][ T5626] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.551212][ T6541] ------------[ cut here ]------------ [ 135.556975][ T6541] !(flags & __GFP_NOWARN) [ 135.556992][ T6541] WARNING: mm/slub.c:6841 at __kvmalloc_node_noprof+0x7a6/0x890, CPU#1: syz.5.191/6541 [ 135.571499][ T6541] Modules linked in: [ 135.575967][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.5.191 Not tainted syzkaller #0 PREEMPT(full) [ 135.585507][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.596685][ T6541] RIP: 0010:__kvmalloc_node_noprof+0x7a6/0x890 [ 135.603147][ T6541] Code: ff 48 c7 c7 d0 b1 a8 8e 48 89 de e8 04 35 cc 02 e9 59 fc ff ff 48 c7 c7 10 b2 a8 8e 48 89 de e8 f0 34 cc 02 e9 8e fc ff ff 90 <0f> 0b 90 45 31 e4 e9 08 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 [ 135.623114][ T6541] RSP: 0018:ffffc9000758fa48 EFLAGS: 00010246 [ 135.629465][ T6541] RAX: 0000000000000001 RBX: ffffc9000758fbe0 RCX: 0000000080000001 [ 135.637640][ T6541] RDX: 0000000080000008 RSI: ffffffff8c2a8d60 RDI: ffffffff8c2a8d20 [ 135.645866][ T6541] RBP: 0000000080000008 R08: 00000000004028c0 R09: 00000000ffffffff [ 135.653852][ T6541] R10: 0000000000000006 R11: 0000000000000002 R12: 0000000000000000 [ 135.662958][ T6541] R13: 00000000004028c0 R14: 0000000010000001 R15: 00000000ffffffff [ 135.671888][ T6541] FS: 00007f85d005f6c0(0000) GS:ffff888125351000(0000) knlGS:0000000000000000 [ 135.681074][ T6541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.687969][ T6541] CR2: 0000200000002300 CR3: 00000000336e2000 CR4: 0000000000350ef0 [ 135.696263][ T6541] Call Trace: [ 135.699543][ T6541] [ 135.702478][ T6541] ? io_pin_pages+0x9f/0x1b0 [ 135.707342][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.713000][ T6541] io_pin_pages+0x9f/0x1b0 [ 135.717700][ T6541] io_sqe_buffer_register+0x21f/0x1360 [ 135.723321][ T6541] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 135.728747][ T6541] ? rcu_is_watching+0x15/0xb0 [ 135.733541][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.739293][ T6541] ? trace_kmalloc+0x2a/0xf0 [ 135.744694][ T6541] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 135.750613][ T6541] ? io_sqe_buffers_register+0x124/0x7e0 [ 135.756900][ T6541] ? __mutex_lock+0x30d/0x1550 [ 135.761716][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.767452][ T6541] ? iovec_from_user+0x1ba/0x250 [ 135.772451][ T6541] io_sqe_buffers_register+0x2eb/0x7e0 [ 135.778127][ T6541] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 135.784186][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.789865][ T6541] ? __fget_files+0x3a2/0x420 [ 135.794668][ T6541] ? __fget_files+0x2a/0x420 [ 135.799350][ T6541] __se_sys_io_uring_register+0x121b/0x1ab0 [ 135.805422][ T6541] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 135.811723][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.817441][ T6541] ? rcu_is_watching+0x15/0xb0 [ 135.822257][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.827959][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.833629][ T6541] ? rcu_is_watching+0x15/0xb0 [ 135.838827][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 135.844584][ T6541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.851486][ T6541] do_syscall_64+0x174/0x580 [ 135.856796][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.862702][ T6541] RIP: 0033:0x7f85cf19ce59 [ 135.867160][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.886820][ T6541] RSP: 002b:00007f85d005f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 135.895284][ T6541] RAX: ffffffffffffffda RBX: 00007f85cf415fa0 RCX: 00007f85cf19ce59 [ 135.903266][ T6541] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 135.911280][ T6541] RBP: 00007f85cf232e6f R08: 0000000000000000 R09: 0000000000000000 [ 135.919275][ T6541] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 135.927361][ T6541] R13: 00007f85cf416038 R14: 00007f85cf415fa0 R15: 00007fff1c075ba8 [ 135.935380][ T6541] [ 135.938422][ T6541] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.945702][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.5.191 Not tainted syzkaller #0 PREEMPT(full) [ 135.954888][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.965058][ T6541] Call Trace: [ 135.968327][ T6541] [ 135.971248][ T6541] vpanic+0x56c/0xa60 [ 135.975237][ T6541] ? __pfx__printk+0x10/0x10 [ 135.979832][ T6541] ? __pfx_vpanic+0x10/0x10 [ 135.984328][ T6541] ? is_bpf_text_address+0x292/0x2b0 [ 135.989614][ T6541] ? is_bpf_text_address+0x26/0x2b0 [ 135.994847][ T6541] panic+0xc5/0xd0 [ 135.998565][ T6541] ? __pfx_panic+0x10/0x10 [ 136.002984][ T6541] __warn+0x315/0x4c0 [ 136.006962][ T6541] ? __kvmalloc_node_noprof+0x7a6/0x890 [ 136.012761][ T6541] ? __kvmalloc_node_noprof+0x7a6/0x890 [ 136.018294][ T6541] __report_bug+0x331/0x530 [ 136.022809][ T6541] ? kasan_save_track+0x3e/0x80 [ 136.027668][ T6541] ? __kasan_kmalloc+0x93/0xb0 [ 136.032421][ T6541] ? __kmalloc_noprof+0x358/0x750 [ 136.037456][ T6541] ? __kvmalloc_node_noprof+0x7a6/0x890 [ 136.043078][ T6541] ? __pfx___report_bug+0x10/0x10 [ 136.048108][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.053740][ T6541] ? __asan_memset+0x22/0x50 [ 136.058347][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.064021][ T6541] ? __alloc_frozen_pages_noprof+0xac/0x380 [ 136.069907][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.075538][ T6541] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.081862][ T6541] ? __kvmalloc_node_noprof+0x7a6/0x890 [ 136.087402][ T6541] report_bug+0x16a/0x220 [ 136.091848][ T6541] ? __kvmalloc_node_noprof+0x7a6/0x890 [ 136.097382][ T6541] ? __kvmalloc_node_noprof+0x7a8/0x890 [ 136.102918][ T6541] handle_bug+0x9c/0x200 [ 136.107214][ T6541] exc_invalid_op+0x1a/0x50 [ 136.111710][ T6541] asm_exc_invalid_op+0x1a/0x20 [ 136.116552][ T6541] RIP: 0010:__kvmalloc_node_noprof+0x7a6/0x890 [ 136.122701][ T6541] Code: ff 48 c7 c7 d0 b1 a8 8e 48 89 de e8 04 35 cc 02 e9 59 fc ff ff 48 c7 c7 10 b2 a8 8e 48 89 de e8 f0 34 cc 02 e9 8e fc ff ff 90 <0f> 0b 90 45 31 e4 e9 08 fe ff ff 90 0f 0b 90 e9 55 ff ff ff 49 83 [ 136.142295][ T6541] RSP: 0018:ffffc9000758fa48 EFLAGS: 00010246 [ 136.148364][ T6541] RAX: 0000000000000001 RBX: ffffc9000758fbe0 RCX: 0000000080000001 [ 136.156328][ T6541] RDX: 0000000080000008 RSI: ffffffff8c2a8d60 RDI: ffffffff8c2a8d20 [ 136.164383][ T6541] RBP: 0000000080000008 R08: 00000000004028c0 R09: 00000000ffffffff [ 136.172349][ T6541] R10: 0000000000000006 R11: 0000000000000002 R12: 0000000000000000 [ 136.180309][ T6541] R13: 00000000004028c0 R14: 0000000010000001 R15: 00000000ffffffff [ 136.188286][ T6541] ? __kvmalloc_node_noprof+0x53d/0x890 [ 136.193854][ T6541] ? io_pin_pages+0x9f/0x1b0 [ 136.198474][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.204110][ T6541] io_pin_pages+0x9f/0x1b0 [ 136.208527][ T6541] io_sqe_buffer_register+0x21f/0x1360 [ 136.213982][ T6541] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 136.219359][ T6541] ? rcu_is_watching+0x15/0xb0 [ 136.224125][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.229758][ T6541] ? trace_kmalloc+0x2a/0xf0 [ 136.234359][ T6541] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 136.240249][ T6541] ? io_sqe_buffers_register+0x124/0x7e0 [ 136.245874][ T6541] ? __mutex_lock+0x30d/0x1550 [ 136.250650][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.256289][ T6541] ? iovec_from_user+0x1ba/0x250 [ 136.261282][ T6541] io_sqe_buffers_register+0x2eb/0x7e0 [ 136.266750][ T6541] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 136.272730][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.278366][ T6541] ? __fget_files+0x3a2/0x420 [ 136.283060][ T6541] ? __fget_files+0x2a/0x420 [ 136.287690][ T6541] __se_sys_io_uring_register+0x121b/0x1ab0 [ 136.293590][ T6541] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 136.299834][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.305470][ T6541] ? rcu_is_watching+0x15/0xb0 [ 136.310250][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.315891][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.321526][ T6541] ? rcu_is_watching+0x15/0xb0 [ 136.326287][ T6541] ? srso_alias_return_thunk+0x5/0xfbef5 [ 136.331921][ T6541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.337981][ T6541] do_syscall_64+0x174/0x580 [ 136.342587][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.348497][ T6541] RIP: 0033:0x7f85cf19ce59 [ 136.352906][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.372502][ T6541] RSP: 002b:00007f85d005f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 136.380915][ T6541] RAX: ffffffffffffffda RBX: 00007f85cf415fa0 RCX: 00007f85cf19ce59 [ 136.388877][ T6541] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 136.396844][ T6541] RBP: 00007f85cf232e6f R08: 0000000000000000 R09: 0000000000000000 [ 136.404844][ T6541] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 136.412804][ T6541] R13: 00007f85cf416038 R14: 00007f85cf415fa0 R15: 00007fff1c075ba8 [ 136.420781][ T6541] [ 136.424384][ T6541] Kernel Offset: disabled [ 136.428780][ T6541] Rebooting in 86400 seconds..