last executing test programs: 2m31.403448223s ago: executing program 1 (id=208): openat(0xffffffffffffff9c, 0x0, 0x0, 0x139) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl(0xffffffffffffffff, 0x3b8e, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m29.261995356s ago: executing program 1 (id=209): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000000}) 2m28.428388726s ago: executing program 1 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001000000040000000800000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m22.388394295s ago: executing program 1 (id=229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d200000800"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c80000000102010600000000000000000200000034000180140001800800010001020304"], 0xc8}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket(0x1, 0x803, 0x0) getpeername$packet(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) listen(r4, 0x200204) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r9 = socket(0x18, 0x803, 0x2) getsockname$packet(r9, 0x0, &(0x7f00000003c0)) sendto$inet6(r9, &(0x7f0000000100)="439346a0b7a1ec8a5481978b590cfe020d44933d4cb85d3a83c56928a15f92a11835871c39210c079501a099b0eea8e543efdb1cfdb2fe5f07b38050e0618e818b6c6d23246f0e087256bb3fc3a29c5ff97e13b1239af1aa4639170eb23d6aab6aab69b90706bfc5e631c8edd405bf80592850b69793909842d8ba89f0c2589dd4c82827be14752d729430920d0bc5228dae055572a265d47595d010249a4855e9cde8121ded579698ec6d4ea9798467d2c1ab1ffe27d0d48faa666e3a97f4fe34bac7f5ad1f338e9e3f5e59dec4fe8bee3523807a074e1fff2083f279eee9852df9188403526338e061b7c2ba34d3dfceba0d79bb6bd363d044f69493058394916dde6a76d1965e41530c52db0210c036eb9ad850eb1ce56bbb409cd8a618e4ba1961e581defde55a915bc34abb72466f96f16b8d6c67e61368372911054427d8fdb9c1ab3661c9561a3fc4bf1e1d649ac4c4310d42956048d2af69bffd4ffa542334c1baa51afa91cc0ff0468a200f3ace3f3d76712c1a544879801227f1d9b4739d4688542470e4a556d6e513f50ed0248e94127a970e175aa8051c587297c642789a273ff9734a95947e5f0f8dc3fbc4c2abeb99cc830fc1ec4d1fab0295aaebb77c9410ecf67c641119b4169c9af3ec99ca46b066dddae402d39fc6acfaf3501af615af4d41e425e1b9599119d7721ccf28bb2e734a6069d86a30d1980a48998c0e72f340459b3b6121980d910318f008aa57e21ab76e62923affbabc0dacf415b6a3b582013d86030f214d2024485aaa5dde0e366999cd43df4a4261817fb37692adfb19f0ddad8dd970294fa7cbcd2a1061bb727dd3cd620e8c37b661f8e1657cd3f9cdeae1e05e0976bdff5c3ee760807a17e09ec0fbf4b050d82b3944c2eb795f8379c21bf4e2296fba0c35c98f909af886b32b2464f536387494817b3e48b20421830964d39a6ca8b9b86b15daf49b3519ea40ac61a447bcc9baf76f647ec9b2aa5fb2b4d7aec052df2b5bbefba14e1025a92fcf36ed01db0db370621b1458dfbbddd8710b770fde65e939a9f9a68d997a84c3d7b4360553a1e603a55b2eec1612c50c37ceb882e4b5386bccf4b88b3542c8d0ef01a99cb88d0cc5bddfe5b6c98a71b8f7ccbb71fffe46aa43d0758fbef2d48222c1797cfd0ad34d1d60dfaeb0414717cb518ffd131d222f3b8d2c31fd805fea34d44221def3bde015aa37a1e1f71ab4d1e0203d119cf7ec4c93b9b667f0df38a6217c36af8ea1b9769fcde15f77fd3a2f1bbe3e6cc21f9bd0352d78e6c6698c2a531df32fb3e2e43382513bd1594f09466429b55455d92f463f7055f59a81cbdc143d5969f7b30c8e4a9bae4150137c0dbc52ead1dcd8f5c6afa2f43bdfc4b3fb2e58c0e744b8dfcf5c4129a234968dd5250cd315d11c8494f0af27d376caf5331a11946851fdaf7c2293cecc93eece596c339515e164e1c768071986e295d4cd231cd82de64be35683704d9b22394435011b5eb25527ffb257aa2c6730684c9dfaa05b37abf939fb5dc68a3f0c33b8a7037ad20d17e24569ed899adc248ba880a3bcc0ceac286bc9c89b9e243ec5fa2596f6db2e70f7d6d01d548f83fbaf8816631a20f8cda9a3e161495d6beaf21cbfa9309d83cfb3ea1320fdabf096e1970772fa0981cd439f4e46c8db7400b7473ab82d8d1d7e5badb15d92b2f744d623d7a872b5ec0bb6d110abbb434fc28463ac3a1db4176854f2f3eecb16c621eed477016da2c3fd161db8b1280177b5a2e0a7de57c87af479826f5ff73ab05660bbf2ca5b4548a95297c2dca2b44856802fc9cd86ba4e20bc138a70bec8e7b7d49b30fdb3ef5fd0d9d3454532bac4e5954aac7be46eb7594209def7d281734552087a2303f76c66c58a1ac6b089e84508da58150a7fc120e4a232a1ea5f05c3cf0b6dde09ce73f31a88a198da9faca130c3763926a0760717f55f8153d1e0ed0eb5fccf33af683b36b5b6b6d41e1af5b4a655d2d4191f3e77ec7456f1084f406c14de38262ea8571dd14bf2cfaeec38adade997700e27a3fd7f2c7a77c55bd3eaeb1b7cd90c81db5f7057e9ff74a911f8a803f8e68351e3f80365c96223342efb2b852870cc43b922ca91c0d02a8dc45b1def363fd965e298e653e52a0fc7e141cd34c4d1877b5cd9ac04c09ac893005fa71f1b7fb09a21d899d73231984ec9225c430627f0b2022d4b5d251fff18fb33e15783e885cc37c59f82e83a6e9988989179043cccb36f391165202175b609d2272d87f718c888ea5a7acaed8400b23b3cf46aaa72d1bed061c4c56fb7f2f3922978a1731eafd8d5e2f1a9b160814276fde692115487c1eb6e78d0cfeff4193144b7182ee5048f3be80d60e23b4e834152a0f52e0bc4187773493ae0311483f91418580b33468b9c86bed48dabd278e02e51a5583eba500ec647c8199c0321ce10821157087c79b1308eac79837058990f0b1d18de51fb87d965af27cd0d264abbd5b5c6f49cf6a336eb8f6bc0c06f5b6390ea40c1a6a982e62d1bc19e0f7e287c856152ef05d70a8b0a9772910c6a23374f91d16cbb51f3e8449376805bd32cce9660ba3f5806f4203a283ce62107d0abe2c426ab82e2557d51abe9b2233b693f6fd1ccb6c02cf1a8715c5ad1cb16c4c4f189cc3fc21b20ac371d7f36da80e2040a7b24f8938dd15ad1828e576ec68ec2262b90d2ee88ab1b2723637546178d2279ca01c8adcacaca664a5142344622ac67ba0f9a4bca1a56afbde9ca81575d9a67aa75ef2ca9baaa14349ae5f5e48f67f222277e2760143e1e9973394d023b57677746ce46d2456e489b9afa8912d7cbdfb5c1bf44b22e67e663ca947824ffeee1e037371dc9e7fb2f56b7770d7a3b29f3fbe46f4cb9c7ee29ba3d58f96d1c44fb00f96764a428af61a4e01d72fa6a44f85f6dd3ca65486274090c1ca30512262f3615224fb35459b2a6b6aaaf56feb1f7072dfef87bd185e10a53c9aa7d25c0e1229e8b8e1bc9a8637cbab19365089d044158481399d8f6690b25eed12bbde3e0713a66619bb4f7df69b6cdfffddd260a316bd6fac0d92e80f182a753a2a8e6450fb05c0ab4282e036191fcfedea80627b596b438e6dc30ea87bf074b076d50335fd3d823352494209d42e97dbc935104111d46adfd0a7f7084eb8cd9870d07086541d656fd4205e7d0f9f57cc40022ea79cbce8f3141bd3e178a8e14bb578ee30e9bc54f7f9b3bc7c99e1817ba779fe40fecfc50953c31361088ccfa078e5482fe2f2afae83f86c3b6660fd0d99b6de9533fb4b7736a70777a41e43e410aed565068ea4c7c95d70fee8c7c753c141e434815671ed78db908da74c4d1fa11d367befcc9f49bb1bd144dcb143905e1b5ab22e344341002f6c3251aca30bbe18eff56305e201e24e38edc9d3159f4620d75b1ddf6b75584f98a55ea11a02ccc7487c570c4ddefe11357bcd7a4ae234d8bab6bba333f5f327ad9ec13b438671e17d7f46b57e12a8f4d8d45598b1e10cb5fdaff9f96f343e25bb2a0d31d6a60c09dcd280ab1d47f57dc01fedb5953674a343298382f5e02186a284b46400d09e679ecec42799859fba7089059bfd43667bf49f3a8e68f69d54bf9b19420707454de4a5afe18a60a3f5065d0f57db0896e8076a97d578b0f275e1f36f0b4110c3103e530218687fce1b20b1174cbf7150ceaa3170fad9d7be47b3ad98204a1742bf5ff7a80333006d3bd10bf51823e0d2305cf4c2e4882bc8adb7852a5c481554adcb6a48948e85dbf639ba4428dc59affd9ee6d29fbc3698199ec9af840376c1a92438bd42da90cae37a0410099689fdec47bb4c4693fae75c21dab868222d3e32fad49f7484e080795f6949ea61941042259303d7ff1ba21f858b2342bb6dbf4acd014660031a83ac1c4686dd31a4786cbcf38ff0572adadd8ce83a62efbfc4e8f43e3f543e487301cccba47441eb5100e2e83a17b5f748ae62fc897a5c642869a1e1ccbcc1cb4fef6e83b9b11dc04c658f068a0ac15b089b0d4505dce04be9076e6b77fd454ce140f2f192c6c78112e1b7db1feb0b7c8ba1fc996a088864ea4f0f83edc5f2c39b7ab44d9f299be18141005eb77d0c86c3709cd988b4b89cd61a504fe772831c2424d91de61769e1dc33330f65841bb53cd37dedc8980cecf885529575776775840908878176e7d4b8a5eda59f2f20537c5b6111505d2937a734683787db804f16c8a0fe9bfbf8703898e51918e2c5951ffcbbb115fce62fbd00379898e5d9e159dafd4f6e48d2018e96a5dae0a1e56b5a2c5", 0xbe0, 0x1000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m21.291766131s ago: executing program 1 (id=233): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000000}) 2m21.291056731s ago: executing program 1 (id=234): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) bind$packet(0xffffffffffffffff, 0x0, 0x0) getpid() fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 2m5.833410771s ago: executing program 32 (id=234): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) bind$packet(0xffffffffffffffff, 0x0, 0x0) getpid() fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 41.056213943s ago: executing program 4 (id=486): socket(0x400000000010, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0x9, 0x6, 0x40, 0x10000, 'syz1\x00', 0x5}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_procfs(r0, &(0x7f00000002c0)='stat\x00') preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 36.964014163s ago: executing program 4 (id=494): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x2000c005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='2', 0x49) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 35.84417162s ago: executing program 4 (id=500): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) truncate(0x0, 0x8) pwrite64(r1, &(0x7f0000000140)="10", 0x1, 0x40fff) pwritev2(r0, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\f`', 0x2}], 0x1, 0x5, 0x2, 0x0) 32.858911054s ago: executing program 4 (id=504): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f0000000bc0)="$eJzs3M1vVFUbAPDn3k6/aF9a3rx5FWJiE4MajUOhBBNW4NqoiSxcUtspaTp82NbENiwK7tWFMS5IDH+CiXvZuDJxgQvFv4AYiSG6ARZj7nyUkekMpczMhfL7JWfuOXNm7vM8c2HuucncBvDMmsoe0oj9EXE6iZioP59GxFC1NxKxUXvd3dsX57KWRKXy/p9JJBFx5/bFuca+kvp2rD4YiYjrbyXx309b466srS/Nlsul5fr40OrZC4dW1tbfWDw7e6Z0pnTu6MybR2eOzcx0sdabFz78+oWf33n58tXPpt/9au+PSZyI8fpccx3dMhVTm59JZrC+LUTEbLeD5WSgXk9znUkhx4QAAOgobVrD/T8mYiDuL94m4odfck0OAAAA6IrKQEQFAAAA2OUS1/8AAACwyzV+B3Dn9sW5Rsv3Fwn9detkREzW6m/c31ybKcRGdTtSvW93z19JNN/WmtTe9timskjf/VTKWvToPuRONi5FxPNbHf+kWv9k9S7u1vrTiJjuQvypB8ZPU/0nuhA/7/oBeDZdO1k7kbWe/9LN9U9scf4rbHHu2om8z3+N9d/dlvXf/foH2qz/3ttmjAP3Xrvebq55/ffB57/NZ/Gz7WMV9QhuXYo4UNiq/mSz/qRN/ae3GWNs7uaVdnNZ/Vm9jdbv+itXIw5WV3Ot9Tcknf4+0aGFxXJpuva4xf7XjnWO33z8s5bFb1wL9EN2/PfEzo7/hW3GmHzuj/3t5h5ef/r7UHKq2huqP/PJ7Orq8uGIoeTt1uePdM6l8ZrGPrL6X32p8///rerPvhM26p9D9q/nUn2bjS8/EHPs4JFvd15/b2X1z+/w+H+xzRjffH/lo3ZzedcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNMhjYjxSNLiZj9Ni8WIsYj4X+xJy+dXVl9fOP/xuflsLmIyBtOFxXJpOiImauMkGx+u9u+PjzwwnomIfRHx5cRodVycO1+ez7t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo1FxHgkaTEi0oj4eyJNi8W8swIAAAC6bjLvBAAAAICec/0PAAAAu1/L9X/hX6ORfuYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArrTvxWs3kojYOD5abZmh+txgrpkBvZbu+J2VSlcTAfpuIO8EgNwUmvqVinM6PEtc4wPJQ+ZH2s4Mdz0XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5cr+y/diOJiI3jo9WWGarPDeaaGdBrad4JALkZ6DSZ9C8PoP8KeScA5MY1PlBb6t+r1LTOj7R95/AjRGm/FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeDuPVlqTFiEir/TQtFiP+ExGTMZgsLJZL0xGxNyJ+nRgczsaH804aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArltZW1+aLZdLyzo77dw7FfEEpKHzZHVGo+chhntZRd7fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5GFlbX1ptlwuLa/knQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQt5W19aXZcrm03MNO3jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCffwIAAP//ZLcP0g==") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000040)) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 29.903146927s ago: executing program 4 (id=507): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) 16.422893307s ago: executing program 4 (id=538): syz_open_dev$usbmon(&(0x7f00000001c0), 0xcef, 0x20200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setitimer(0x2, &(0x7f0000000340)={{}, {0x0, 0x2710}}, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 16.115721795s ago: executing program 33 (id=538): syz_open_dev$usbmon(&(0x7f00000001c0), 0xcef, 0x20200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setitimer(0x2, &(0x7f0000000340)={{}, {0x0, 0x2710}}, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 15.89366564s ago: executing program 3 (id=541): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setregid(0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) close(0x3) 14.903969734s ago: executing program 5 (id=544): openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x48000, 0x41) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.903638625s ago: executing program 3 (id=545): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x56, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000050000000000000000ce5da71a2d9b2e1bb912f61272ced530c9dc26de474842a158d200dc33c45859aeca73851c806217c053840e889c1809df0316bd771e939dd351d9987724ec32b63e24c5f2cb9f810cb5a85b5fba0690e43e357cea70dedf845478045ec996e096f5e13c8c26f5807a96a08f35c06d99a5e10e8f06c238c697780b54fc407af7e2fb5e7d5ccf6e9187b9e8faca93ebee8be7327e510b161c8b1b5168a24571e0cb3f7329a9cd71335d35edf7082d6811"], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000240)={0x6, 'erspan0\x00', {}, 0xffff}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x160bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x96, 0x0, 0x0, 0x3}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x40) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000500)="6ef7a25df380e03569c8f7159a9d740dcd59dc2ea973a16a282d6f769674a1b51ad976743f6d8d7bd2035bc5f0e9bd671106f0d36a7187f1cad1820ffcd4e71a2087ff1829409f7e27450982f38eb712bf22285427200ea1a2f57162368c48bbe1217d", 0x63}, {0x0}, {&(0x7f0000000600)="05b80191941ae14797624cee87e6ec89e44ede753bfb2a59ce1773dcc8c07dff5e4abc2a6db3ca79272d364cc69a6bde0ab57a1cd760836692091707e58677392b0685362a78", 0x46}, {&(0x7f00000006c0)="8353f08c26c385027b7a45d475366cf901314d7734747404bb1f684e8e5c1ef1f0e42ff676e1bd8e554fa89875b262eee1f10cd1d02ab165fcb56960e3b88a3191311743aaaadf5cdf0bf748dff857e5bb0eaf52b2bdf193c4a9229f35931f97833a4273400b65b72baab499eb17e626fa8b6cbd011e615e6899c3d1bbda69989b745d1745fdecaf02", 0x89}], 0x5}, 0x884) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004a008d2a00000000000000000a"], 0x1c}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 14.839676307s ago: executing program 0 (id=546): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xffffff5a, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000340)) mount(0x0, 0x0, 0x0, 0x8, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r6, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x3a, '\x00', @st={0x4, [{0x3, @svalue=0xdff9}, {0x2, @uvalue=0x7}, {0x1, @uvalue=0x5}, {0x3, @uvalue=0x7}]}, 0xffff16c8}, {0x38, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x2, @uvalue=0x8000000000000001}, {0x1, @svalue=0xfff}, {0x1, @uvalue=0x6}]}, 0x17d}, {0x34, '\x00', @st={0x4, [{0x1, @uvalue=0x7}, {0x2, @svalue=0xc48}, {0x2, @uvalue=0x2}, {0x3, @svalue=0x3}]}}]}) socket$inet_udp(0x2, 0x2, 0x0) 14.788219428s ago: executing program 5 (id=547): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 12.558939443s ago: executing program 5 (id=548): openat(0xffffffffffffff9c, 0x0, 0x0, 0x139) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl(0xffffffffffffffff, 0x3b8e, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.943265187s ago: executing program 0 (id=549): socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000480)={[{@errors_remount}, {@usrquota}, {@bh}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0xae2}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {}]}, 0x3, 0x474, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000200), 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 10.553325472s ago: executing program 0 (id=551): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 6.158515709s ago: executing program 5 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}}, 0x0) 5.284170891s ago: executing program 5 (id=554): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000600)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@datasum}, {@discard_sync}, {@treelog}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@commit={'commit', 0x3d, 0xa913}}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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") syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2, 0xb79d, 0x3136564e, 0x2, 0x7, [{0x8001, 0x3}, {0xfffffff8, 0x9}, {0x5, 0x8}, {0xfffff660, 0x2}, {0xfff, 0xd3f2}, {0x100, 0x1}, {0x1, 0x3}, {0x7ff, 0x28}], 0x6, 0x80, 0x6, 0x0, 0x5}}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x149a7e, 0x82) ioctl$COMEDI_DEVINFO(r3, 0x80b06401, 0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x100000, 0xf1ff}]) 5.099579186s ago: executing program 3 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001000)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r0) 5.082203696s ago: executing program 0 (id=556): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x9, {{0xa, 0x4e23, 0x10001, @mcast2, 0x6}}}, 0x88) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='#'], 0x28}}, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x101) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.879603091s ago: executing program 2 (id=558): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xffffff5a, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000340)) mount(0x0, 0x0, 0x0, 0x8, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r6, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x3a, '\x00', @st={0x4, [{0x3, @svalue=0xdff9}, {0x2, @uvalue=0x7}, {0x1, @uvalue=0x5}, {0x3, @uvalue=0x7}]}, 0xffff16c8}, {0x38, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x2, @uvalue=0x8000000000000001}, {0x1, @svalue=0xfff}, {0x1, @uvalue=0x6}]}, 0x17d}, {0x34, '\x00', @st={0x4, [{0x1, @uvalue=0x7}, {0x2, @svalue=0xc48}, {0x2, @uvalue=0x2}, {0x3, @svalue=0x3}]}}]}) socket$inet_udp(0x2, 0x2, 0x0) 4.869618291s ago: executing program 3 (id=559): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, 0x0, 0xe900) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$eJzs3c1vVFUbAPDnTj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sQxd3pv6bR3+kU7t3J/v2TouefM5Zzb6dNz5vScOwFU1mD6Ty1if0RMJxH9yfxiWWdkhYMLz3vw50dn00cS9fprvyeRZHn585Psa192ck9E/PhDEvs6VtY7M3ft4vjU1OTV7Hh49tL08MzctcMXLo2fnzw/eXn0hdETx48dPzFyZFPXdb0g7/TNd9/v/2TszW+++isZ+faXsSROxsvZE5dex1YZjMHG9yRZWdR3YqsrK0lH9nOy9CVOOoue2dW+RrFu+euXvjpPRH90xMMXrz8+fqXUxgHbqp5E1IGKSsQ/VFQ+Dsjf2y9/H1wrZVQCtMP9UwsTACvjv3NhbjB6GnMDux8ksXRaJ4mIzc3MNdsTEXfvjN08d2fsZmzTPBxQbP5GRDxZFP9JI/4HoicGGvFfa4r/dFxwJvua5r+6yfqXTxWLf2ifhfjvWTX+o0X8v7Uk/t/eZP2DD5Pv9DbFf+9mLwkAAAAAAAAq6/apiHi+6O//tcX1P1Gw/qcvIk5uQf2Dy45X/v2/dm8LqgEK3D8V8VLh+t9avvp3oCNL/aexHqArOXdhavJIRPw3Ig5F1670eGSVOg5/uu/LVmWD2fq//JHWfzdbC5i1417nruZzJsZnxx/1uoGI+zcinipc/5ss9v9JQf+f/j6YXmcd+569daZV2drxD2yX+tcRBwv7/4d3rUhWvz/HcGM8MJyPClZ6+sPPvmtV/2bjv/AWE8CGpP3/7tXjfyBZer+emY3XcXSus96qbLPj/+7k9cYtZ7qzvA/GZ2evjkR0J6c70tym/NGNtxkeR3k85PGSxv+hZ1af/ysa//dGxPyy/zv5o3lPce7/f/f92qo9xv9QnjT+JzbU/288MXpr4PtW9a+v/z/W6OsPZTnm/2DBF3mYdjfnF4RjZ1FRu9sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+DWkTsiaQ2tJiu1YaGIvoi4n+xuzZ1ZWb2uXNX3rs8kZY1Pv+/ln/Sb//CcZJ//v/AkuPRZcdHI2JvRHze0ds4Hjp7ZWqi7IsHAAAAAAAAAAAAAAAAAACAHaKvxf7/1G8dZbcO2HadZTcAKE1B/P9URjuA9tP/Q3WJf6gu8Q/VJf6husQ/VJf4h+oS/1Bd4h8AAAAAAB4rew/c/jmJiPkXexuPVHdW1lVqy4DtViu7AUBp3OIHqsvSH6gu7/GBZI3ynpYnrXXmaqbPPsLJAAAAAAAAAAAAAFA5B/fb/w9VZf8/VJf9/1Bd+f7/AyW3A2g/7/GBWGMnf+H+/zXPAgAAAAAAAAAAAAC20szctYvjU1OTVyXe2BnNaGeiXq9fT38Kdkp7/uWJfCn8TmnPskS+1299Z5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2TwAAAP//+Ekkyg==") quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, 0x0, &(0x7f0000000000)={0x8, 0x9, 0x0, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4040854}, 0xc800) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000003c0)=0x8, 0x3000000000000, 0x4) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.548350444s ago: executing program 2 (id=560): capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r0 = getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setpriority(0x0, r0, 0x5) 3.547961834s ago: executing program 0 (id=561): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2000400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfd, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0xa1081a, &(0x7f0000000640)=ANY=[], 0x21, 0x14fd, &(0x7f00000021c0)="$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") socket$inet6(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 3.429492467s ago: executing program 2 (id=562): socket(0xa, 0x3, 0xff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x12a) r1 = io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.136454538s ago: executing program 2 (id=563): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.08027586s ago: executing program 3 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x3, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) 1.945735563s ago: executing program 5 (id=565): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.944983453s ago: executing program 2 (id=566): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x500, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20044004, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1410, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 536.337807ms ago: executing program 3 (id=567): syz_emit_ethernet(0x80, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "7bec00", 0x4a, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf25030be07d"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x6600, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x5, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) 453.549109ms ago: executing program 0 (id=568): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000080)=""/46, 0x2e, 0x0) 0s ago: executing program 2 (id=569): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xffffff5a, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000340)) mount(0x0, 0x0, 0x0, 0x8, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r6, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x3a, '\x00', @st={0x4, [{0x3, @svalue=0xdff9}, {0x2, @uvalue=0x7}, {0x1, @uvalue=0x5}, {0x3, @uvalue=0x7}]}, 0xffff16c8}, {0x38, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x2, @uvalue=0x8000000000000001}, {0x1, @svalue=0xfff}, {0x1, @uvalue=0x6}]}, 0x17d}, {0x34, '\x00', @st={0x4, [{0x1, @uvalue=0x7}, {0x2, @svalue=0xc48}, {0x2, @uvalue=0x2}, {0x3, @svalue=0x3}]}}]}) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): 70.702746][ T4184] device veth0_macvtap entered promiscuous mode [ 70.714302][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.723697][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.739302][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.752278][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.763952][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.782231][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.794973][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.802980][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.814540][ T4185] device veth1_macvtap entered promiscuous mode [ 70.830084][ T4184] device veth1_macvtap entered promiscuous mode [ 70.852021][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.860248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.868782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.877717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.885195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.893506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.902276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.914212][ T4196] device veth1_vlan entered promiscuous mode [ 70.932745][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.944054][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.971976][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.980900][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.990259][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.001313][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.011732][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.020392][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.042807][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.053730][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.065157][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.091016][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.102338][ T4196] device veth0_macvtap entered promiscuous mode [ 71.112404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.122302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.131362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.140397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.150950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.160462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.169934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.179543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.189345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.202252][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.213598][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.229165][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.242468][ T4186] device veth0_vlan entered promiscuous mode [ 71.267292][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.276782][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.285525][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.295158][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.311111][ T4196] device veth1_macvtap entered promiscuous mode [ 71.319782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.329926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.340764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.349082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.357756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.365555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.377132][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.389075][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.395405][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.403314][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.404820][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.421517][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.435584][ T4186] device veth1_vlan entered promiscuous mode [ 71.474828][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.487293][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.498042][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.508783][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.520963][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.533177][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.543924][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.554936][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.567112][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.578736][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.591856][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.600856][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.610101][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.618990][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.636286][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.657994][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.669118][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.677796][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.686671][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.695324][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.704401][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.713503][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.726005][ T4192] device veth0_vlan entered promiscuous mode [ 71.756492][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.764961][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.823061][ T4192] device veth1_vlan entered promiscuous mode [ 71.866396][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 71.881107][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.890341][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.906134][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 71.910562][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.920175][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 71.920266][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.940620][ T4186] device veth0_macvtap entered promiscuous mode [ 71.952608][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 71.955420][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.959232][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 71.976931][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.985006][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.994046][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.003348][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.011415][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.033586][ T4192] device veth0_macvtap entered promiscuous mode [ 72.051752][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.060709][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.070536][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.084075][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.099591][ T4192] device veth1_macvtap entered promiscuous mode [ 72.111374][ T4186] device veth1_macvtap entered promiscuous mode [ 72.152159][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.163998][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.175486][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.187597][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.197615][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.208611][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.220770][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.230455][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.243861][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.263317][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.274243][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.292778][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.306328][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.317926][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.327988][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.339125][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.349641][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.360720][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.372205][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.404011][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.414224][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.421383][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.430594][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.443815][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.453936][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.454975][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.473940][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.483837][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.494660][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.505256][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.519307][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.530919][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.541703][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.551727][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.561114][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.569991][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.590929][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.600851][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.612184][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.624062][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.636295][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.647020][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.657983][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.669144][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.679893][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.690007][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.701145][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.713219][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.731569][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.751315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.759782][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.763293][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.778094][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.784485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.796637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.804685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.843317][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.855578][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.870137][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.879718][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.025544][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.047613][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.098816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.113344][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.152340][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.163768][ T4273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 73.180225][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.200862][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.209327][ T4273] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6'. [ 73.209372][ T4273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 73.209444][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 73.227765][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.274024][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.274542][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.290739][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 73.300906][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.329507][ T4279] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.352817][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.843345][ T4304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.947071][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 73.960284][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 73.974688][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 74.026630][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 74.041699][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 75.148993][ T4323] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 75.163248][ T4323] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 75.343372][ T4329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 75.370329][ T4329] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17'. [ 75.393683][ T4329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'. [ 75.443493][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 75.481525][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 78.314317][ T4396] __nla_validate_parse: 6 callbacks suppressed [ 78.314334][ T4396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 78.344120][ T4396] netlink: 128 bytes leftover after parsing attributes in process `syz.0.45'. [ 78.365214][ T4396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.45'. [ 78.392942][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 78.422890][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 78.778516][ T4403] loop3: detected capacity change from 0 to 32768 [ 79.895480][ T4408] ODEBUG: Out of memory. ODEBUG disabled [ 80.909792][ T4403] JBD2: Ignoring recovery information on journal [ 80.918114][ T4403] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 80.926665][ T4403] JBD2: bad block at offset 32 [ 81.106052][ T4403] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 81.235762][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 81.275792][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 81.295762][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 81.315757][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 81.345772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 81.365753][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 81.385755][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 81.405752][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 82.085774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 82.105752][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 82.420515][ T4418] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 82.441712][ T4418] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 82.451614][ T4418] OCFS2: File system is now read-only. [ 82.457760][ T4418] (syz.3.36,4418,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 82.466221][ T4418] (syz.3.36,4418,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 82.475749][ T4418] (syz.3.36,4418,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 82.483835][ T4418] (syz.3.36,4418,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 82.492566][ T4418] (syz.3.36,4418,1):ocfs2_write_cluster:1156 ERROR: status = -30 [ 82.500389][ T4418] (syz.3.36,4418,1):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30 [ 82.508902][ T4418] (syz.3.36,4418,1):ocfs2_write_begin_nolock:1823 ERROR: status = -30 [ 82.517785][ T4418] (syz.3.36,4418,1):ocfs2_write_begin:1910 ERROR: status = -30 [ 83.103139][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 83.191486][ T4436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 83.246315][ T4437] netlink: 128 bytes leftover after parsing attributes in process `syz.0.47'. [ 83.292397][ T4437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'. [ 83.368768][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 83.420451][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 83.622810][ T4442] gfs2: not a GFS2 filesystem [ 83.703665][ T4442] hpfs: Bad magic ... probably not HPFS [ 83.928029][ T4429] Need at least one configuration in g1. [ 83.934232][ T4429] udc dummy_udc.0: failed to start g1: -22 [ 84.072536][ T4456] Zero length message leads to an empty skb [ 85.585726][ C1] sched: RT throttling activated [ 86.306458][ T4469] FAULT_INJECTION: forcing a failure. [ 86.306458][ T4469] name failslab, interval 1, probability 0, space 0, times 1 [ 86.476250][ T4469] CPU: 0 PID: 4469 Comm: syz.3.56 Not tainted syzkaller #0 [ 86.483634][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.493768][ T4469] Call Trace: [ 86.497168][ T4469] [ 86.500132][ T4469] dump_stack_lvl+0x188/0x250 [ 86.504870][ T4469] ? show_regs_print_info+0x20/0x20 [ 86.510118][ T4469] ? load_image+0x410/0x410 [ 86.514754][ T4469] ? __might_sleep+0xf0/0xf0 [ 86.519378][ T4469] ? __lock_acquire+0x7d40/0x7d40 [ 86.524436][ T4469] ? rcu_is_watching+0x11/0xa0 [ 86.529232][ T4469] should_fail+0x383/0x4b0 [ 86.533685][ T4469] should_failslab+0x5/0x20 [ 86.538217][ T4469] slab_pre_alloc_hook+0x51/0xc0 [ 86.543182][ T4469] ? __pmd_alloc+0x116/0x750 [ 86.547796][ T4469] kmem_cache_alloc+0x3d/0x280 [ 86.552596][ T4469] __pmd_alloc+0x116/0x750 [ 86.557067][ T4469] ? __pud_alloc+0x140/0x140 [ 86.561677][ T4469] ? count_memcg_event_mm+0x324/0x370 [ 86.567076][ T4469] ? remove_device_exclusive_entry+0xac0/0xac0 [ 86.573257][ T4469] ? __lock_acquire+0x13b3/0x7d40 [ 86.578327][ T4469] handle_mm_fault+0xbd3/0x4440 [ 86.583222][ T4469] ? get_page+0xe0/0xe0 [ 86.587497][ T4469] ? vmacache_find+0x4e3/0x590 [ 86.592284][ T4469] ? vmacache_update+0xa0/0x100 [ 86.597163][ T4469] ? find_vma+0x1df/0x230 [ 86.601528][ T4469] do_user_addr_fault+0x494/0xc90 [ 86.606593][ T4469] exc_page_fault+0x60/0x100 [ 86.611217][ T4469] asm_exc_page_fault+0x22/0x30 [ 86.616106][ T4469] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 86.622467][ T4469] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 90 90 [ 86.642197][ T4469] RSP: 0018:ffffc900039dfbe0 EFLAGS: 00050202 [ 86.648306][ T4469] RAX: ffffffff83e93a01 RBX: 0000000000000004 RCX: 0000000000000004 [ 86.656307][ T4469] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffffc900039dfc90 [ 86.664395][ T4469] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 86.672920][ T4469] R10: dffffc0000000000 R11: fffff5200073bf92 R12: 00007ffffffff000 [ 86.680921][ T4469] R13: 0000000000000004 R14: ffffc900039dfc90 R15: 0000000000000000 [ 86.688923][ T4469] ? _copy_from_user+0x71/0x170 [ 86.693814][ T4469] _copy_from_user+0xfa/0x170 [ 86.698535][ T4469] ip_getsockopt+0x14a/0x1660 [ 86.703267][ T4469] ? ip_setsockopt+0x31e0/0x31e0 [ 86.708244][ T4469] ? __might_sleep+0xf0/0xf0 [ 86.712863][ T4469] ? rcu_lock_release+0x9/0x20 [ 86.717661][ T4469] ? __lock_acquire+0x7d40/0x7d40 [ 86.722734][ T4469] ? aa_sk_perm+0x7dc/0x910 [ 86.727271][ T4469] ? aa_af_perm+0x340/0x340 [ 86.731812][ T4469] ? __fget_files+0x402/0x470 [ 86.736521][ T4469] ? aa_sock_opt_perm+0x74/0x100 [ 86.741520][ T4469] ? sock_recv_errqueue+0x580/0x580 [ 86.746754][ T4469] __sys_getsockopt+0x1b0/0x230 [ 86.751665][ T4469] __x64_sys_getsockopt+0xb1/0xc0 [ 86.756729][ T4469] do_syscall_64+0x4c/0xa0 [ 86.761357][ T4469] ? clear_bhb_loop+0x30/0x80 [ 86.766078][ T4469] ? clear_bhb_loop+0x30/0x80 [ 86.770793][ T4469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.776726][ T4469] RIP: 0033:0x7f02e87201d9 [ 86.781187][ T4469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.800843][ T4469] RSP: 002b:00007f02e6978028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 86.809315][ T4469] RAX: ffffffffffffffda RBX: 00007f02e89a7fa0 RCX: 00007f02e87201d9 [ 86.817319][ T4469] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000004 [ 86.825313][ T4469] RBP: 00007f02e87b7888 R08: 0000000000000000 R09: 0000000000000000 [ 86.833313][ T4469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.841316][ T4469] R13: 00007f02e89a8038 R14: 00007f02e89a7fa0 R15: 00007fff60755168 [ 86.849352][ T4469] [ 87.547049][ T4482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 87.589778][ T4482] netlink: 128 bytes leftover after parsing attributes in process `syz.1.59'. [ 87.608825][ T21] cfg80211: failed to load regulatory.db [ 87.805843][ T4482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'. [ 87.814701][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 87.930517][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 88.218890][ T4494] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 88.585173][ T4495] hub 5-0:1.0: USB hub found [ 88.599659][ T4495] hub 5-0:1.0: 1 port detected [ 89.255649][ T26] audit: type=1326 audit(1791535185.348:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.4.64" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcecc1681d9 code=0x0 [ 89.440074][ T4501] loop4: detected capacity change from 0 to 1024 [ 90.595432][ T4501] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 90.603013][ T4501] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 90.612565][ T4501] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 90.619977][ T4501] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.880673][ T4501] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 91.489043][ T4514] Need at least one configuration in g1. [ 91.494852][ T4514] udc dummy_udc.0: failed to start g1: -22 [ 93.899450][ T4534] FAULT_INJECTION: forcing a failure. [ 93.899450][ T4534] name failslab, interval 1, probability 0, space 0, times 0 [ 93.958366][ T4534] CPU: 1 PID: 4534 Comm: syz.4.72 Not tainted syzkaller #0 [ 93.965629][ T4534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.975713][ T4534] Call Trace: [ 93.979024][ T4534] [ 93.981975][ T4534] dump_stack_lvl+0x188/0x250 [ 93.986693][ T4534] ? show_regs_print_info+0x20/0x20 [ 93.991922][ T4534] ? load_image+0x410/0x410 [ 93.996455][ T4534] ? __might_sleep+0xf0/0xf0 [ 94.001075][ T4534] ? __lock_acquire+0x7d40/0x7d40 [ 94.006136][ T4534] should_fail+0x383/0x4b0 [ 94.010591][ T4534] should_failslab+0x5/0x20 [ 94.015120][ T4534] slab_pre_alloc_hook+0x51/0xc0 [ 94.020086][ T4534] ? ptlock_alloc+0x1c/0x60 [ 94.024616][ T4534] kmem_cache_alloc+0x3d/0x280 [ 94.029412][ T4534] ptlock_alloc+0x1c/0x60 [ 94.033772][ T4534] pte_alloc_one+0xc0/0x310 [ 94.038301][ T4534] ? rcu_lock_release+0x20/0x20 [ 94.043182][ T4534] ? count_memcg_event_mm+0x324/0x370 [ 94.048580][ T4534] ? remove_device_exclusive_entry+0xac0/0xac0 [ 94.054759][ T4534] ? __lock_acquire+0x13b3/0x7d40 [ 94.059824][ T4534] __pte_alloc+0x21/0x150 [ 94.064182][ T4534] handle_mm_fault+0x39d9/0x4440 [ 94.069247][ T4534] ? get_page+0xe0/0xe0 [ 94.073446][ T4534] ? vmacache_find+0x4f0/0x590 [ 94.078255][ T4534] ? vmacache_update+0xa0/0x100 [ 94.083236][ T4534] ? find_vma+0x1df/0x230 [ 94.087848][ T4534] do_user_addr_fault+0x494/0xc90 [ 94.092935][ T4534] exc_page_fault+0x60/0x100 [ 94.097576][ T4534] asm_exc_page_fault+0x22/0x30 [ 94.102464][ T4534] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 94.108859][ T4534] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 90 90 [ 94.128501][ T4534] RSP: 0018:ffffc90003337be0 EFLAGS: 00050202 [ 94.134609][ T4534] RAX: ffffffff83e93a01 RBX: 0000000000000004 RCX: 0000000000000004 [ 94.142611][ T4534] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffffc90003337c90 [ 94.150608][ T4534] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 94.158607][ T4534] R10: dffffc0000000000 R11: fffff52000666f92 R12: 00007ffffffff000 [ 94.166607][ T4534] R13: 0000000000000004 R14: ffffc90003337c90 R15: 0000000000000000 [ 94.174612][ T4534] ? _copy_from_user+0x71/0x170 [ 94.179508][ T4534] _copy_from_user+0xfa/0x170 [ 94.184213][ T4534] ip_getsockopt+0x14a/0x1660 [ 94.188934][ T4534] ? ip_setsockopt+0x31e0/0x31e0 [ 94.193919][ T4534] ? __might_sleep+0xf0/0xf0 [ 94.198546][ T4534] ? rcu_lock_release+0x9/0x20 [ 94.203346][ T4534] ? __lock_acquire+0x7d40/0x7d40 [ 94.208403][ T4534] ? aa_sk_perm+0x7dc/0x910 [ 94.212951][ T4534] ? aa_af_perm+0x340/0x340 [ 94.217494][ T4534] ? __fget_files+0x402/0x470 [ 94.222210][ T4534] ? aa_sock_opt_perm+0x74/0x100 [ 94.227181][ T4534] ? sock_recv_errqueue+0x580/0x580 [ 94.232421][ T4534] __sys_getsockopt+0x1b0/0x230 [ 94.237308][ T4534] __x64_sys_getsockopt+0xb1/0xc0 [ 94.242372][ T4534] do_syscall_64+0x4c/0xa0 [ 94.246910][ T4534] ? clear_bhb_loop+0x30/0x80 [ 94.251626][ T4534] ? clear_bhb_loop+0x30/0x80 [ 94.256336][ T4534] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.262259][ T4534] RIP: 0033:0x7fcecc1681d9 [ 94.266702][ T4534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.286437][ T4534] RSP: 002b:00007fceca3c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 94.294891][ T4534] RAX: ffffffffffffffda RBX: 00007fcecc3effa0 RCX: 00007fcecc1681d9 [ 94.302890][ T4534] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000004 [ 94.310895][ T4534] RBP: 00007fcecc1ff888 R08: 0000000000000000 R09: 0000000000000000 [ 94.318900][ T4534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.326925][ T4534] R13: 00007fcecc3f0038 R14: 00007fcecc3effa0 R15: 00007ffcd6077308 [ 94.334946][ T4534] [ 94.424750][ T4523] loop3: detected capacity change from 0 to 40427 [ 96.243067][ T4549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 96.252994][ T4549] netlink: 128 bytes leftover after parsing attributes in process `syz.3.76'. [ 96.288805][ T4548] ip_tables: iptables: counters copy to user failed while replacing table [ 96.374856][ T4549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.76'. [ 96.383795][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 96.392664][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 97.827573][ T4563] Need at least one configuration in g1. [ 97.833534][ T4563] udc dummy_udc.0: failed to start g1: -22 [ 98.548744][ T26] audit: type=1326 audit(1791535194.648:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4573 comm="syz.3.84" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02e87201d9 code=0x0 [ 99.073886][ T4583] loop3: detected capacity change from 0 to 1024 [ 99.320105][ T4587] ip_tables: iptables: counters copy to user failed while replacing table [ 99.760641][ T4587] loop4: detected capacity change from 0 to 1024 [ 101.381962][ T4599] ip_tables: iptables: counters copy to user failed while replacing table [ 101.789124][ T26] audit: type=1326 audit(1791535197.888:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.2.102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2be3e41d9 code=0x0 [ 102.049487][ T4609] loop2: detected capacity change from 0 to 1024 [ 103.864218][ T4609] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 103.871942][ T4609] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 103.881511][ T4609] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 103.888974][ T4609] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.987306][ T4609] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 105.989067][ T4638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.077062][ T4638] netlink: 128 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.097001][ T4638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.124506][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.170925][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.248371][ T4648] hub 5-0:1.0: USB hub found [ 106.253984][ T4648] hub 5-0:1.0: 1 port detected [ 108.112001][ T4657] ip_tables: iptables: counters copy to user failed while replacing table [ 108.136238][ T26] audit: type=1326 audit(1791535204.228:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.107" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3800ca1d9 code=0x0 [ 108.306698][ T4667] loop0: detected capacity change from 0 to 1024 [ 108.363354][ T4667] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 108.370959][ T4667] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 108.380595][ T4667] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 108.388005][ T4667] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.510719][ T4667] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 109.303436][ T4680] ip_tables: iptables: counters copy to user failed while replacing table [ 110.153171][ T4680] loop0: detected capacity change from 0 to 1024 [ 110.476715][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 110.546372][ T4690] netlink: 128 bytes leftover after parsing attributes in process `syz.2.115'. [ 110.759739][ T4690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.115'. [ 110.986012][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 111.237930][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 111.393202][ T4697] hub 5-0:1.0: USB hub found [ 111.408681][ T4697] hub 5-0:1.0: 1 port detected [ 111.429205][ T4700] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.117' sets config #0 [ 111.460378][ T4701] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.117' sets config #1 [ 111.518702][ T4703] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 111.525532][ T4703] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.564936][ T4703] vhci_hcd vhci_hcd.0: Device attached [ 111.610523][ T4706] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 111.617140][ T4706] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.633927][ T4703] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 111.640498][ T4703] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.659459][ T4706] vhci_hcd vhci_hcd.0: Device attached [ 111.679576][ T26] audit: type=1326 audit(1791535207.778:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.3.120" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02e87201d9 code=0x0 [ 111.732131][ T4706] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(8) [ 111.732782][ T4703] vhci_hcd vhci_hcd.0: Device attached [ 111.738696][ T4706] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.774375][ T4706] vhci_hcd vhci_hcd.0: Device attached [ 111.852977][ T4720] loop3: detected capacity change from 0 to 1024 [ 111.876530][ T4253] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 111.904076][ T4720] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 111.911692][ T4720] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 111.921618][ T4720] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 111.929034][ T4720] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.099382][ T4720] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 112.578739][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 112.819014][ T4706] kvm: pic: non byte write [ 113.806996][ T4716] vhci_hcd: connection closed [ 113.808238][ T4711] vhci_hcd: connection closed [ 113.813355][ T4707] vhci_hcd: connection closed [ 113.818666][ T4704] vhci_hcd: connection reset by peer [ 113.843953][ T4513] vhci_hcd: stop threads [ 114.072138][ T4513] vhci_hcd: release socket [ 114.247615][ T4753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 115.150252][ T4756] netlink: 128 bytes leftover after parsing attributes in process `syz.4.128'. [ 115.235510][ T4756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.128'. [ 115.318501][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 115.347038][ T4513] vhci_hcd: disconnect device [ 115.352226][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 115.381429][ T4513] vhci_hcd: stop threads [ 115.409999][ T4513] vhci_hcd: release socket [ 115.415654][ T4513] vhci_hcd: disconnect device [ 115.421412][ T4513] vhci_hcd: stop threads [ 115.425688][ T4513] vhci_hcd: release socket [ 115.430807][ T4513] vhci_hcd: disconnect device [ 115.436311][ T4513] vhci_hcd: stop threads [ 115.441442][ T4513] vhci_hcd: release socket [ 115.451847][ T4513] vhci_hcd: disconnect device [ 115.458631][ T4758] hub 5-0:1.0: USB hub found [ 115.463522][ T4758] hub 5-0:1.0: 1 port detected [ 115.531438][ T4761] hub 5-0:1.0: USB hub found [ 115.562380][ T4761] hub 5-0:1.0: 1 port detected [ 115.569072][ T26] audit: type=1326 audit(1791535211.668:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.4.133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcecc1681d9 code=0x0 [ 116.499322][ T4775] ip_tables: iptables: counters copy to user failed while replacing table [ 116.520824][ T4775] loop1: detected capacity change from 0 to 1024 [ 117.610411][ T4253] vhci_hcd: vhci_device speed not set [ 117.678126][ T4789] ======================================================= [ 117.678126][ T4789] WARNING: The mand mount option has been deprecated and [ 117.678126][ T4789] and is ignored by this kernel. Remove the mand [ 117.678126][ T4789] option from the mount to silence this warning. [ 117.678126][ T4789] ======================================================= [ 118.766734][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 118.778897][ T4800] netlink: 128 bytes leftover after parsing attributes in process `syz.4.143'. [ 118.801153][ T4800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 118.816043][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 118.824865][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 118.853556][ T4802] hub 5-0:1.0: USB hub found [ 118.866519][ T4802] hub 5-0:1.0: 1 port detected [ 118.985940][ T4805] loop3: detected capacity change from 0 to 164 [ 119.187817][ T4807] FAULT_INJECTION: forcing a failure. [ 119.187817][ T4807] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 119.223274][ T4807] CPU: 1 PID: 4807 Comm: syz.4.146 Not tainted syzkaller #0 [ 119.230624][ T4807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.240725][ T4807] Call Trace: [ 119.244037][ T4807] [ 119.247000][ T4807] dump_stack_lvl+0x188/0x250 [ 119.251728][ T4807] ? show_regs_print_info+0x20/0x20 [ 119.256960][ T4807] ? load_image+0x410/0x410 [ 119.261510][ T4807] ? __lock_acquire+0x7d40/0x7d40 [ 119.266579][ T4807] should_fail+0x383/0x4b0 [ 119.271072][ T4807] prepare_alloc_pages+0x1e3/0x5b0 [ 119.276234][ T4807] __alloc_pages+0x11b/0x480 [ 119.280876][ T4807] ? zone_statistics+0x170/0x170 [ 119.285856][ T4807] ? count_memcg_event_mm+0x324/0x370 [ 119.291259][ T4807] ? remove_device_exclusive_entry+0xac0/0xac0 [ 119.297467][ T4807] alloc_pages_vma+0x2bc/0x790 [ 119.302277][ T4807] handle_mm_fault+0x1c94/0x4440 [ 119.307260][ T4807] ? get_page+0xe0/0xe0 [ 119.311462][ T4807] ? follow_page_mask+0xa51/0x12b0 [ 119.316626][ T4807] __get_user_pages+0x952/0x11e0 [ 119.321634][ T4807] ? populate_vma_page_range+0x290/0x290 [ 119.327303][ T4807] ? read_lock_is_recursive+0x10/0x10 [ 119.332726][ T4807] populate_vma_page_range+0x213/0x290 [ 119.338228][ T4807] __mm_populate+0x275/0x3b0 [ 119.342868][ T4807] ? check_vma_flags+0x470/0x470 [ 119.347859][ T4807] ? up_write+0x1b6/0x410 [ 119.352230][ T4807] do_mlock+0x49c/0x550 [ 119.356433][ T4807] __x64_sys_mlock+0x5c/0x70 [ 119.361081][ T4807] do_syscall_64+0x4c/0xa0 [ 119.365528][ T4807] ? clear_bhb_loop+0x30/0x80 [ 119.370239][ T4807] ? clear_bhb_loop+0x30/0x80 [ 119.374960][ T4807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.380887][ T4807] RIP: 0033:0x7fcecc1681d9 [ 119.385330][ T4807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.404972][ T4807] RSP: 002b:00007fceca3c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 119.413433][ T4807] RAX: ffffffffffffffda RBX: 00007fcecc3effa0 RCX: 00007fcecc1681d9 [ 119.421442][ T4807] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 119.429448][ T4807] RBP: 00007fcecc1ff888 R08: 0000000000000000 R09: 0000000000000000 [ 119.437447][ T4807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.445448][ T4807] R13: 00007fcecc3f0038 R14: 00007fcecc3effa0 R15: 00007ffcd6077308 [ 119.453465][ T4807] [ 119.699529][ T4798] loop2: detected capacity change from 0 to 32768 [ 119.725264][ T4798] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.142 (4798) [ 119.780999][ T4813] hub 5-0:1.0: USB hub found [ 119.796914][ T4813] hub 5-0:1.0: 1 port detected [ 120.022031][ T4798] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 120.127832][ T4798] BTRFS info (device loop2): setting nodatacow, compression disabled [ 120.151223][ T4798] BTRFS info (device loop2): setting datasum, datacow enabled [ 120.180772][ T4823] loop3: detected capacity change from 0 to 1024 [ 120.209526][ T4798] BTRFS info (device loop2): force clearing of disk cache [ 120.247329][ T4798] BTRFS info (device loop2): turning on sync discard [ 120.254326][ T4798] BTRFS warning (device loop2): excessive commit interval 43283 [ 120.262113][ T4798] BTRFS info (device loop2): enabling ssd optimizations [ 120.269982][ T4798] BTRFS info (device loop2): using spread ssd allocation scheme [ 120.278188][ T4798] BTRFS info (device loop2): not using ssd optimizations [ 120.285254][ T4798] BTRFS info (device loop2): not using spread ssd allocation scheme [ 120.293693][ T4798] BTRFS info (device loop2): using free space tree [ 120.304382][ T4798] BTRFS info (device loop2): has skinny extents [ 120.711994][ T4823] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 120.971715][ T4829] syz.1.147 (4829) used greatest stack depth: 17216 bytes left [ 121.011177][ T4823] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 121.066526][ T4823] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 121.116510][ T4823] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.158615][ T4843] loop1: detected capacity change from 0 to 512 [ 121.332624][ T4843] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.406484][ T4798] BTRFS info (device loop2): clearing free space tree [ 121.438582][ T4823] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 121.568575][ T4798] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.638969][ T4843] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.772183][ T4798] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.093293][ T4843] EXT4-fs (loop1): 1 truncate cleaned up [ 122.119216][ T4798] BTRFS info (device loop2): creating free space tree [ 122.120541][ T4843] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.138907][ T4798] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.153313][ T4798] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.771001][ T4861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 122.876248][ T4861] netlink: 128 bytes leftover after parsing attributes in process `syz.3.156'. [ 123.144983][ T4861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.156'. [ 123.158386][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 123.171165][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 123.519864][ T4869] loop3: detected capacity change from 0 to 512 [ 124.055828][ T4879] hub 5-0:1.0: USB hub found [ 124.061735][ T4879] hub 5-0:1.0: 1 port detected [ 124.107945][ T4869] EXT4-fs (loop3): Ignoring removed oldalloc option [ 124.236563][ T4869] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 124.554544][ T4869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 124.597146][ T4869] EXT4-fs (loop3): orphan cleanup on readonly fs [ 124.615303][ T4869] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.160: bad orphan inode 267 [ 124.632597][ T4869] EXT4-fs (loop3): Remounting filesystem read-only [ 124.642150][ T4869] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 124.737999][ T4228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.981337][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 126.285394][ T4228] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.305459][ T4887] loop2: detected capacity change from 0 to 2048 [ 126.311936][ T4228] usb 2-1: config 0 has no interface number 0 [ 126.386297][ T4887] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,nombcache,sb=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 126.416478][ T4887] ext4 filesystem being mounted at /29/proc supports timestamps until 2038-01-19 (0x7fffffff) [ 126.566075][ T4228] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 126.575177][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.583776][ T4228] usb 2-1: Product: syz [ 126.595496][ T4228] usb 2-1: config 0 descriptor?? [ 126.603278][ T4899] netlink: 'syz.1.167': attribute type 3 has an invalid length. [ 126.621915][ T4228] usb 2-1: can't set config #0, error -71 [ 126.650119][ T4228] usb 2-1: USB disconnect, device number 2 [ 126.696085][ T4900] loop0: detected capacity change from 0 to 1024 [ 126.803930][ T4900] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 126.818045][ T4904] loop2: detected capacity change from 0 to 16 [ 128.226063][ T4900] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 128.267321][ T4904] erofs: (device loop2): mounted with root inode @ nid 36. [ 128.280490][ T4900] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 128.304014][ T26] audit: type=1800 audit(1791535224.398:8): pid=4904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.168" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 128.326937][ T4900] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.375505][ T4900] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 130.048951][ T4921] hub 5-0:1.0: USB hub found [ 130.053787][ T4921] hub 5-0:1.0: 1 port detected [ 130.516795][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 130.598736][ T4931] netlink: 128 bytes leftover after parsing attributes in process `syz.1.170'. [ 130.622916][ T4931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'. [ 132.479341][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 132.557395][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 132.869601][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877316][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.381120][ T4946] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.706157][ T4950] loop3: detected capacity change from 0 to 1024 [ 133.724689][ T4950] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 133.773680][ T4950] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 133.803368][ T4950] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 133.880926][ T4955] loop4: detected capacity change from 0 to 8 [ 134.102241][ T4950] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.693185][ T4950] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 136.002272][ T4971] loop1: detected capacity change from 0 to 16 [ 136.070323][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'. [ 136.080441][ T4976] netlink: 128 bytes leftover after parsing attributes in process `syz.4.191'. [ 136.092854][ T4976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.191'. [ 136.103981][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 136.113120][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 136.123428][ T4971] erofs: (device loop1): mounted with root inode @ nid 36. [ 136.756143][ T4981] attempt to access beyond end of device [ 136.756143][ T4981] loop1: rw=0, want=34359738368, limit=16 [ 139.527611][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 139.799409][ T5011] hub 5-0:1.0: USB hub found [ 139.804874][ T5011] hub 5-0:1.0: 1 port detected [ 140.608571][ T5007] netlink: 128 bytes leftover after parsing attributes in process `syz.4.203'. [ 140.617828][ T5007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.203'. [ 140.626768][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 140.635559][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 140.645523][ T5013] loop3: detected capacity change from 0 to 64 [ 144.132521][ T5013] attempt to access beyond end of device [ 144.132521][ T5013] loop3: rw=0, want=414, limit=64 [ 144.420180][ T5013] Trying to free block not in datazone [ 145.867135][ T26] audit: type=1326 audit(1791535241.968:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.198" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3800ca1d9 code=0x0 [ 146.479706][ T5051] loop0: detected capacity change from 0 to 1024 [ 146.555346][ T5051] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 146.562976][ T5051] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 146.572908][ T5051] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 146.580579][ T5051] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.667698][ T5051] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 147.048902][ T5058] hub 5-0:1.0: USB hub found [ 147.054450][ T5058] hub 5-0:1.0: 1 port detected [ 147.621848][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 147.637365][ T5059] netlink: 128 bytes leftover after parsing attributes in process `syz.3.216'. [ 147.651327][ T5059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 147.661793][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 147.806748][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 149.329608][ T5078] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.219' sets config #0 [ 149.339264][ T5078] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.219' sets config #1 [ 150.346888][ T5084] FAULT_INJECTION: forcing a failure. [ 150.346888][ T5084] name fail_futex, interval 1, probability 0, space 0, times 1 [ 150.393309][ T5086] syz.3.224 uses obsolete (PF_INET,SOCK_PACKET) [ 150.408429][ T5084] CPU: 0 PID: 5084 Comm: syz.0.223 Not tainted syzkaller #0 [ 150.415786][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.425868][ T5084] Call Trace: [ 150.429165][ T5084] [ 150.432142][ T5084] dump_stack_lvl+0x188/0x250 [ 150.436857][ T5084] ? show_regs_print_info+0x20/0x20 [ 150.442093][ T5084] ? load_image+0x410/0x410 [ 150.446667][ T5084] should_fail+0x383/0x4b0 [ 150.451121][ T5084] get_futex_key+0x1a1/0x12d0 [ 150.455830][ T5084] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 150.461838][ T5084] ? futex_wait_restart+0x250/0x250 [ 150.467060][ T5084] ? lock_chain_count+0x20/0x20 [ 150.471949][ T5084] futex_wait_setup+0x4b/0x520 [ 150.476733][ T5084] ? lockdep_hardirqs_on+0x94/0x140 [ 150.481963][ T5084] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 150.487896][ T5084] futex_wait+0x22f/0x680 [ 150.492256][ T5084] ? __lock_acquire+0x13b3/0x7d40 [ 150.497341][ T5084] ? do_futex+0x12b0/0x12b0 [ 150.501888][ T5084] ? verify_lock_unused+0x140/0x140 [ 150.507141][ T5084] ? verify_lock_unused+0x140/0x140 [ 150.512378][ T5084] do_futex+0xdc2/0x12b0 [ 150.516645][ T5084] ? lock_chain_count+0x20/0x20 [ 150.521536][ T5084] ? futex_exit_release+0x1c0/0x1c0 [ 150.526760][ T5084] ? __context_tracking_exit+0x4c/0x80 [ 150.532261][ T5084] __se_sys_futex+0x389/0x420 [ 150.536964][ T5084] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 150.542974][ T5084] ? __x64_sys_futex+0xf0/0xf0 [ 150.547766][ T5084] ? __x64_sys_futex+0x1d/0xf0 [ 150.552559][ T5084] do_syscall_64+0x4c/0xa0 [ 150.557006][ T5084] ? clear_bhb_loop+0x30/0x80 [ 150.561710][ T5084] ? clear_bhb_loop+0x30/0x80 [ 150.566410][ T5084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.572357][ T5084] RIP: 0033:0x7fc3800ca1d9 [ 150.576794][ T5084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.596434][ T5084] RSP: 002b:00007fc37e3220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 150.604884][ T5084] RAX: ffffffffffffffda RBX: 00007fc380351fa8 RCX: 00007fc3800ca1d9 [ 150.612891][ T5084] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc380351fa8 [ 150.620894][ T5084] RBP: 00007fc380351fa0 R08: 0000000000000000 R09: 0000000000000000 [ 150.628950][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.636958][ T5084] R13: 00007fc380352038 R14: 00007ffc4065fd80 R15: 00007ffc4065fe68 [ 150.644985][ T5084] [ 150.820410][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 150.861405][ T26] audit: type=1326 audit(1791535246.948:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.3.230" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02e87201d9 code=0x0 [ 150.901357][ T5100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'. [ 150.977541][ T5100] netlink: 128 bytes leftover after parsing attributes in process `syz.1.229'. [ 150.997867][ T5100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 151.448545][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 151.473046][ T5105] loop3: detected capacity change from 0 to 1024 [ 151.494429][ T5105] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 151.502078][ T5105] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 151.511907][ T5105] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 151.519445][ T5105] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.601169][ T5105] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 151.606163][ T4230] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 151.655350][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 151.791899][ T4230] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 151.801771][ T4230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.812726][ T4230] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 151.821889][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.847024][ T5076] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.871321][ T5076] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.908508][ T4230] pl2303 5-1:1.0: pl2303 converter detected [ 151.929193][ T4230] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 153.059894][ T5076] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 153.127519][ T5076] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 153.187044][ T5076] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 153.269255][ T5076] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 153.313669][ T5076] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 153.625569][ T5128] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.236' sets config #0 [ 153.638548][ T5128] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.236' sets config #1 [ 153.767908][ T5076] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 153.906856][ T5076] pl2303 ttyUSB0: error sending break = -32 [ 154.358923][ T4878] usb 5-1: USB disconnect, device number 2 [ 154.436309][ T4878] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 154.474453][ T4878] pl2303 5-1:1.0: device disconnected [ 154.693028][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 154.702997][ T5145] netlink: 128 bytes leftover after parsing attributes in process `syz.0.243'. [ 154.719537][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.243'. [ 154.730935][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 154.750576][ T5146] kvm: emulating exchange as write [ 154.759290][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 154.859785][ T26] audit: type=1326 audit(1791535250.958:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.0.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3800ca1d9 code=0x0 [ 155.013223][ T5151] loop0: detected capacity change from 0 to 1024 [ 155.064654][ T5151] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 155.072560][ T5151] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 155.082920][ T5151] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 155.090553][ T5151] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.628156][ T5151] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 157.129662][ T5164] capability: warning: `syz.3.249' uses 32-bit capabilities (legacy support in use) [ 158.128836][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 158.369958][ T5184] netlink: 128 bytes leftover after parsing attributes in process `syz.3.254'. [ 158.594654][ T5184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.254'. [ 158.721176][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 158.771300][ T26] audit: type=1326 audit(1791535254.868:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3800ca1d9 code=0x0 [ 158.798312][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 158.982094][ T5193] loop0: detected capacity change from 0 to 1024 [ 160.034828][ T5193] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 160.042483][ T5193] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 160.052273][ T5193] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 160.059743][ T5193] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.189410][ T5193] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 160.745804][ T2287] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 162.681259][ T2287] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 162.707708][ T5218] FAULT_INJECTION: forcing a failure. [ 162.707708][ T5218] name fail_futex, interval 1, probability 0, space 0, times 0 [ 162.745741][ T2287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.748281][ T5218] CPU: 0 PID: 5218 Comm: syz.0.263 Not tainted syzkaller #0 [ 162.753803][ T2287] usb 4-1: Product: syz [ 162.761090][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.761106][ T5218] Call Trace: [ 162.761115][ T5218] [ 162.761124][ T5218] dump_stack_lvl+0x188/0x250 [ 162.761152][ T5218] ? do_user_addr_fault+0x67e/0xc90 [ 162.761177][ T5218] ? show_regs_print_info+0x20/0x20 [ 162.761198][ T5218] ? load_image+0x410/0x410 [ 162.801254][ T5218] ? __up_read+0x2b4/0x6b0 [ 162.805709][ T5218] ? up_read+0x20/0x20 [ 162.809820][ T5218] should_fail+0x383/0x4b0 [ 162.814302][ T5218] get_futex_key+0x1a1/0x12d0 [ 162.816061][ T2287] usb 4-1: Manufacturer: syz [ 162.819022][ T5218] ? __lock_acquire+0x13b3/0x7d40 [ 162.819054][ T5218] ? futex_wait_restart+0x250/0x250 [ 162.823667][ T2287] usb 4-1: SerialNumber: syz [ 162.828705][ T5218] futex_wake+0x101/0x540 [ 162.828743][ T5218] ? futex_wait+0x680/0x680 [ 162.828766][ T5218] ? verify_lock_unused+0x140/0x140 [ 162.828789][ T5218] ? ip_getsockopt+0xce1/0x1660 [ 162.828812][ T5218] ? verify_lock_unused+0x140/0x140 [ 162.828841][ T5218] do_futex+0xd83/0x12b0 [ 162.828871][ T5218] ? rcu_lock_release+0x9/0x20 [ 162.828901][ T5218] ? futex_exit_release+0x1c0/0x1c0 [ 162.828928][ T5218] ? __context_tracking_exit+0x4c/0x80 [ 162.828956][ T5218] __se_sys_futex+0x389/0x420 [ 162.828981][ T5218] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.829010][ T5218] ? __x64_sys_futex+0xf0/0xf0 [ 162.829041][ T5218] ? __x64_sys_futex+0x1d/0xf0 [ 162.829067][ T5218] do_syscall_64+0x4c/0xa0 [ 162.829087][ T5218] ? clear_bhb_loop+0x30/0x80 [ 162.829110][ T5218] ? clear_bhb_loop+0x30/0x80 [ 162.829135][ T5218] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.829160][ T5218] RIP: 0033:0x7fc3800ca1d9 [ 162.829184][ T5218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.829202][ T5218] RSP: 002b:00007fc37e3220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 162.829227][ T5218] RAX: ffffffffffffffda RBX: 00007fc380351fa8 RCX: 00007fc3800ca1d9 [ 162.829243][ T5218] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc380351fac [ 162.829258][ T5218] RBP: 00007fc380351fa0 R08: 002721f24dafca0c R09: 0000000000000000 [ 162.829273][ T5218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.829287][ T5218] R13: 00007fc380352038 R14: 00007ffc4065fd80 R15: 00007ffc4065fe68 [ 162.829316][ T5218] [ 163.008834][ T2287] usb 4-1: config 0 descriptor?? [ 163.063398][ T2287] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 163.106548][ T2287] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.152375][ T2287] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 163.173104][ T2287] usb 4-1: media controller created [ 163.211494][ T2287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.260225][ T5198] dvb-usb: bulk message failed: -22 (7/0) [ 164.694589][ T2287] DVB: Unable to find symbol mt352_attach() [ 164.765577][ T26] audit: type=1326 audit(1791535260.858:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5229 comm="syz.0.268" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3800ca1d9 code=0x0 [ 164.914823][ T5232] loop0: detected capacity change from 0 to 1024 [ 164.934002][ T5232] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 164.941572][ T5232] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 164.951278][ T5232] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 164.958682][ T5232] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.056026][ T5232] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 165.160444][ T2287] DVB: Unable to find symbol nxt6000_attach() [ 165.636482][ T2287] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 165.689301][ T2287] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 165.737997][ T2287] dvb-usb: schedule remote query interval to 1000 msecs. [ 165.745182][ T2287] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 165.765348][ T2287] dvb-usb: bulk message failed: -22 (7/0) [ 165.778994][ T2287] dvb-usb: bulk message failed: -22 (7/0) [ 165.808630][ T2287] usb 4-1: USB disconnect, device number 2 [ 165.931810][ T2287] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 166.056586][ T5236] loop3: detected capacity change from 0 to 8192 [ 167.883505][ T5255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.703266][ T26] audit: type=1326 audit(1791535265.798:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5273 comm="syz.2.281" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2be3e41d9 code=0x0 [ 169.880216][ T5279] loop2: detected capacity change from 0 to 1024 [ 169.901462][ T5279] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 169.909147][ T5279] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 169.918769][ T5279] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 169.926202][ T5279] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.043591][ T5279] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 170.115738][ T1323] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 171.092453][ T5296] loop3: detected capacity change from 0 to 512 [ 171.396757][ T5296] EXT4-fs (loop3): Test dummy encryption mode enabled [ 171.612786][ T1323] usb 5-1: config 0 has no interfaces? [ 171.629437][ T5267] chnl_net:caif_netlink_parms(): no params data found [ 171.657333][ T5296] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.285: inode #1: comm syz.3.285: iget: illegal inode # [ 171.718824][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.726338][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.735138][ T5267] device bridge_slave_0 entered promiscuous mode [ 171.745436][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.753004][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.761265][ T5267] device bridge_slave_1 entered promiscuous mode [ 171.781604][ T5296] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.285: error while reading EA inode 1 err=-117 [ 171.791511][ T5267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.796454][ T4878] Bluetooth: hci5: command 0x0409 tx timeout [ 171.811337][ T1323] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 171.820637][ T1323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.828842][ T1323] usb 5-1: Product: syz [ 171.833071][ T1323] usb 5-1: Manufacturer: syz [ 171.839440][ T1323] usb 5-1: SerialNumber: syz [ 171.846570][ T1323] usb 5-1: config 0 descriptor?? [ 171.852348][ T5296] EXT4-fs (loop3): 1 orphan inode deleted [ 171.858620][ T5296] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000009,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 171.907519][ T5267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.916312][ T1323] usb 5-1: can't set config #0, error -71 [ 171.946904][ T1323] usb 5-1: USB disconnect, device number 3 [ 172.756880][ T5267] team0: Port device team_slave_0 added [ 172.805921][ T4190] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 172.839885][ T5267] team0: Port device team_slave_1 added [ 172.949568][ T5267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.990777][ T5267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.095908][ T4190] usb 4-1: Using ep0 maxpacket: 16 [ 173.113881][ T5267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.183943][ T5267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.235767][ T5267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.273977][ T5267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.408534][ T5267] device hsr_slave_0 entered promiscuous mode [ 173.417240][ T4190] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 173.433842][ T4190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.453714][ T4190] usb 4-1: Product: syz [ 173.469675][ T4190] usb 4-1: Manufacturer: syz [ 173.488061][ T4190] usb 4-1: SerialNumber: syz [ 173.519135][ T5267] device hsr_slave_1 entered promiscuous mode [ 173.529257][ T5267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.559980][ T5267] Cannot create hsr debugfs directory [ 173.930887][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 174.265376][ T4190] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 174.319747][ T4190] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 174.381220][ T4190] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 175.234153][ T4190] usb 4-1: media controller created [ 175.250774][ T4190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.356550][ T4190] zl10353_read_register: readreg error (reg=127, ret==-71) [ 175.740684][ T4190] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 175.944957][ T4190] usb 4-1: USB disconnect, device number 3 [ 176.201873][ T2287] Bluetooth: hci5: command 0x040f tx timeout [ 176.407461][ T5267] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.456200][ T5267] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.496678][ T5267] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.514415][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 176.694455][ T5267] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.717004][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.837602][ T5355] hub 5-0:1.0: USB hub found [ 176.843782][ T5355] hub 5-0:1.0: 1 port detected [ 177.744734][ T5267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.791983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.818407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.841451][ T5267] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.893189][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.916798][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.941675][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.948880][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.962759][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.991855][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.010891][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.050402][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.057554][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.125086][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.146478][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.184368][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.204447][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.247666][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.266079][ T1107] Bluetooth: hci5: command 0x0419 tx timeout [ 178.305823][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.355168][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.377655][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 178.426043][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.604801][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.709394][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.794979][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.371777][ T26] audit: type=1326 audit(1791535275.428:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5370 comm="syz.3.306" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02e87201d9 code=0x0 [ 180.266519][ T5375] loop3: detected capacity change from 0 to 1024 [ 180.343676][ T5375] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 180.351413][ T5375] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 180.361125][ T5375] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 180.368520][ T5375] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.504298][ T5375] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 180.866205][ T13] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 180.873950][ T13] usb 1-1: can't read configurations, error -71 [ 182.568944][ T5405] hub 5-0:1.0: USB hub found [ 182.574514][ T5405] hub 5-0:1.0: 1 port detected [ 183.515796][ T26] audit: type=1326 audit(1791535279.558:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz.4.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcecc1681d9 code=0x0 [ 183.604528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.622903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.656274][ T5267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.669991][ T5414] hub 5-0:1.0: USB hub found [ 183.674916][ T5414] hub 5-0:1.0: 1 port detected [ 185.503500][ T5428] loop4: detected capacity change from 0 to 128 [ 186.683760][ T4240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.851005][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.875028][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.926141][ T5448] loop4: detected capacity change from 0 to 256 [ 187.078147][ T5451] hub 5-0:1.0: USB hub found [ 187.084014][ T5451] hub 5-0:1.0: 1 port detected [ 187.848811][ T5448] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 188.018486][ T5448] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 188.030394][ T4240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.067462][ T5267] device veth0_vlan entered promiscuous mode [ 188.097129][ T5448] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 188.104916][ T5448] UDF-fs: Scanning with blocksize 512 failed [ 188.122887][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.159159][ T5448] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 188.285438][ T5450] crypto_alloc_aead failed rc=-2 [ 188.296777][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.306089][ T5448] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 188.350233][ T26] audit: type=1326 audit(1791535284.448:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5466 comm="syz.3.331" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02e87201d9 code=0x0 [ 188.379689][ T5468] hub 5-0:1.0: USB hub found [ 188.384545][ T5468] hub 5-0:1.0: 1 port detected [ 189.160224][ T4240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.234777][ T5471] loop3: detected capacity change from 0 to 1024 [ 190.615207][ T5471] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 190.622718][ T5471] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 190.632254][ T5471] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 190.639654][ T5471] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.761819][ T5471] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 191.003045][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.017479][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.173124][ T5267] device veth1_vlan entered promiscuous mode [ 191.226128][ T4878] Bluetooth: hci0: command 0x0406 tx timeout [ 191.336851][ T4228] Bluetooth: hci2: command 0x0406 tx timeout [ 191.342949][ T4228] Bluetooth: hci3: command 0x0406 tx timeout [ 191.370175][ T4228] Bluetooth: hci1: command 0x0406 tx timeout [ 192.242963][ T5487] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 192.260077][ T4240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.010022][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.040115][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.078005][ T5267] device veth0_macvtap entered promiscuous mode [ 193.154999][ T5267] device veth1_macvtap entered promiscuous mode [ 193.245391][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.261311][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.272136][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.285824][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.306158][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.416900][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.452150][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.155651][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.272371][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.278755][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.401892][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.534415][ T5506] hub 5-0:1.0: USB hub found [ 194.539962][ T5506] hub 5-0:1.0: 1 port detected [ 194.793183][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.310897][ T5267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.371751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.397017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.440394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.699471][ T5514] hub 5-0:1.0: USB hub found [ 195.704379][ T5514] hub 5-0:1.0: 1 port detected [ 196.482252][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.523265][ T26] audit: type=1326 audit(1791535292.618:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.4.344" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcecc1681d9 code=0x0 [ 196.563072][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.618631][ T5518] loop2: detected capacity change from 0 to 128 [ 196.688540][ T5522] loop4: detected capacity change from 0 to 1024 [ 197.336742][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.763414][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.242410][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.515590][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.535536][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.546141][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.556144][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.566633][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.653874][ T5267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.665912][ T5267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.674655][ T5267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.683626][ T5267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.693301][ T5267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.846496][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.865631][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.415790][ T5548] hub 5-0:1.0: USB hub found [ 201.420626][ T26] audit: type=1326 audit(1791535297.298:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.347" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2be3e41d9 code=0x7ffc0000 [ 201.445093][ T5548] hub 5-0:1.0: 1 port detected [ 201.457002][ T4880] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 201.516587][ T26] audit: type=1326 audit(1791535297.298:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.347" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2be3e5a47 code=0x7ffc0000 [ 201.985844][ T4880] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.135733][ T4880] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 202.150918][ T26] audit: type=1326 audit(1791535297.298:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.2.347" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff2be3a4a0e code=0x7ffc0000 [ 202.236212][ T4880] usb 1-1: config 1 interface 0 has no altsetting 0 [ 202.283097][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.394993][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.502720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.533200][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.651087][ T5566] hub 5-0:1.0: USB hub found [ 202.657907][ T5566] hub 5-0:1.0: 1 port detected [ 203.557569][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.597532][ T4880] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.625299][ T4880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.648407][ T5573] loop3: detected capacity change from 0 to 1024 [ 203.718884][ T5573] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 203.758940][ T5573] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 203.850115][ T4880] usb 1-1: SerialNumber: syz [ 203.865490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.886009][ T26] audit: type=1326 audit(1791535299.988:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5571 comm="syz.2.356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2be3e41d9 code=0x0 [ 204.028493][ T5580] loop2: detected capacity change from 0 to 1024 [ 204.084872][ T5580] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 204.093081][ T5580] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 204.102687][ T5580] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 204.110302][ T5580] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.225836][ T4880] usb 1-1: can't set config #1, error -71 [ 204.241027][ T5580] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 204.583993][ T4880] usb 1-1: USB disconnect, device number 4 [ 206.484787][ T5616] hub 5-0:1.0: USB hub found [ 206.491005][ T5616] hub 5-0:1.0: 1 port detected [ 208.436936][ T4240] device hsr_slave_0 left promiscuous mode [ 208.456633][ T4240] device hsr_slave_1 left promiscuous mode [ 208.479534][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.504377][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.535449][ T5608] loop4: detected capacity change from 0 to 32768 [ 208.544281][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.560327][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.583103][ T4240] device bridge_slave_1 left promiscuous mode [ 208.627321][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.655641][ T5608] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 208.655641][ T5608] [ 208.658454][ T26] audit: type=1326 audit(1791535304.758:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5642 comm="syz.5.372" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1296e51d9 code=0x0 [ 208.711683][ T5608] ERROR: (device loop4): remounting filesystem as read-only [ 208.779794][ T4240] device bridge_slave_0 left promiscuous mode [ 208.831449][ T5645] loop5: detected capacity change from 0 to 1024 [ 209.166345][ T5645] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 209.174408][ T5645] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 209.184925][ T5645] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 209.192512][ T5645] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.237294][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.773841][ T4240] device veth1_macvtap left promiscuous mode [ 209.852642][ T5645] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 209.879149][ T4240] device veth0_macvtap left promiscuous mode [ 209.963323][ T4240] device veth1_vlan left promiscuous mode [ 210.030032][ T4240] device veth0_vlan left promiscuous mode [ 210.193724][ T5625] loop0: detected capacity change from 0 to 32768 [ 210.763618][ T5650] loop2: detected capacity change from 0 to 32768 [ 210.786868][ T5667] FAULT_INJECTION: forcing a failure. [ 210.786868][ T5667] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.818187][ T5667] CPU: 0 PID: 5667 Comm: syz.5.380 Not tainted syzkaller #0 [ 210.825553][ T5667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.835643][ T5667] Call Trace: [ 210.838950][ T5667] [ 210.841908][ T5667] dump_stack_lvl+0x188/0x250 [ 210.846635][ T5667] ? show_regs_print_info+0x20/0x20 [ 210.851868][ T5667] ? load_image+0x410/0x410 [ 210.856412][ T5667] ? __lock_acquire+0x7d40/0x7d40 [ 210.861477][ T5667] ? __kasan_kmalloc+0xc6/0xe0 [ 210.866281][ T5667] ? rds_cong_from_addr+0x51/0x360 [ 210.871432][ T5667] ? rds_cong_get_maps+0x24/0xa0 [ 210.876400][ T5667] ? __rds_conn_create+0x91d/0x1ea0 [ 210.881639][ T5667] should_fail+0x383/0x4b0 [ 210.886097][ T5667] prepare_alloc_pages+0x1e3/0x5b0 [ 210.891264][ T5667] __alloc_pages+0x11b/0x480 [ 210.895896][ T5667] ? zone_statistics+0x170/0x170 [ 210.900886][ T5667] ? alloc_pages+0x452/0x560 [ 210.905526][ T5667] get_zeroed_page+0x13/0x30 [ 210.910156][ T5667] rds_cong_from_addr+0xd5/0x360 [ 210.915144][ T5667] ? rds_cong_get_maps+0x1b/0xa0 [ 210.920129][ T5667] rds_cong_get_maps+0x24/0xa0 [ 210.924922][ T5667] __rds_conn_create+0x91d/0x1ea0 [ 210.929991][ T5667] ? rds_conn_create+0x50/0x50 [ 210.934814][ T5667] rds_conn_create_outgoing+0x3f/0x50 [ 210.940231][ T5667] rds_sendmsg+0xf56/0x1d70 [ 210.944778][ T5667] ? aa_sk_perm+0x7dc/0x910 [ 210.949312][ T5667] ? rds_send_sndbuf_remove+0x230/0x230 [ 210.954889][ T5667] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 210.961340][ T5667] ? aa_sock_msg_perm+0x94/0x150 [ 210.966316][ T5667] ? apparmor_socket_sendmsg+0x88/0x230 [ 210.971900][ T5667] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 210.977215][ T5667] ? security_socket_sendmsg+0x7c/0xa0 [ 210.982721][ T5667] ? rds_send_sndbuf_remove+0x230/0x230 [ 210.988393][ T5667] ____sys_sendmsg+0x5be/0x8f0 [ 210.993198][ T5667] ? __sys_sendmsg_sock+0x30/0x30 [ 210.998265][ T5667] ? import_iovec+0x6f/0xa0 [ 211.002809][ T5667] ___sys_sendmsg+0x236/0x2e0 [ 211.007546][ T5667] ? __sys_sendmsg+0x290/0x290 [ 211.012358][ T5667] ? rds_bind+0x38d/0x870 [ 211.016742][ T5667] __se_sys_sendmsg+0x1b7/0x2a0 [ 211.021632][ T5667] ? __x64_sys_sendmsg+0x80/0x80 [ 211.026592][ T5667] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 211.032627][ T5667] ? lockdep_hardirqs_on+0x94/0x140 [ 211.037866][ T5667] do_syscall_64+0x4c/0xa0 [ 211.042319][ T5667] ? clear_bhb_loop+0x30/0x80 [ 211.047024][ T5667] ? clear_bhb_loop+0x30/0x80 [ 211.051739][ T5667] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.057668][ T5667] RIP: 0033:0x7fa1296e51d9 [ 211.062117][ T5667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.081969][ T5667] RSP: 002b:00007fa12793d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.090442][ T5667] RAX: ffffffffffffffda RBX: 00007fa12996cfa0 RCX: 00007fa1296e51d9 [ 211.098450][ T5667] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 211.106458][ T5667] RBP: 00007fa12977c888 R08: 0000000000000000 R09: 0000000000000000 [ 211.114456][ T5667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.122458][ T5667] R13: 00007fa12996d038 R14: 00007fa12996cfa0 R15: 00007ffe9e546fe8 [ 211.130499][ T5667] [ 211.180299][ T5650] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.373 (5650) [ 211.407326][ T5679] loop4: detected capacity change from 0 to 1764 [ 211.550393][ T5679] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 211.968383][ T5650] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 211.995385][ T5650] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 212.045502][ T5650] BTRFS info (device loop2): use zstd compression, level 3 [ 212.075251][ T5650] BTRFS info (device loop2): using free space tree [ 212.145729][ T5650] BTRFS info (device loop2): has skinny extents [ 213.086702][ T5650] BTRFS error (device loop2): open_ctree failed: -12 [ 213.212266][ T5710] loop4: detected capacity change from 0 to 8 [ 214.053942][ T26] audit: type=1326 audit(1791535310.148:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5711 comm="syz.3.386" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02e87201d9 code=0x0 [ 215.101926][ T5718] loop3: detected capacity change from 0 to 1024 [ 215.169742][ T4240] team0 (unregistering): Port device team_slave_1 removed [ 215.241086][ T5718] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 215.248724][ T5718] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 215.258961][ T5718] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 215.266525][ T5718] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.379530][ T4240] team0 (unregistering): Port device team_slave_0 removed [ 215.470862][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.647025][ T5718] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 215.776920][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.255775][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.291019][ T5730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.258565][ T4240] bond0 (unregistering): Released all slaves [ 217.336250][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.392'. [ 218.273575][ T4228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.284039][ T4228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.465898][ T4228] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.475479][ T5749] netlink: 83 bytes leftover after parsing attributes in process `syz.3.396'. [ 218.485280][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.506439][ T4228] usb 5-1: SerialNumber: syz [ 218.759478][ T26] audit: type=1326 audit(1791535314.828:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.3.400" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02e87201d9 code=0x0 [ 218.920480][ T5764] loop3: detected capacity change from 0 to 1024 [ 218.977570][ T5764] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 218.985079][ T5764] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 218.994683][ T5764] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 219.002169][ T5764] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.158874][ T5764] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 219.667542][ T5769] loop2: detected capacity change from 0 to 1024 [ 219.720048][ T4228] usb 5-1: 0:2 : does not exist [ 219.817248][ T5769] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 219.904743][ T5781] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.404'. [ 220.813147][ T4228] usb 5-1: USB disconnect, device number 4 [ 220.837215][ T5786] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 220.843793][ T5786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.930034][ T5786] vhci_hcd vhci_hcd.0: Device attached [ 220.951961][ T5793] loop2: detected capacity change from 0 to 512 [ 220.987489][ T5790] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 220.994087][ T5790] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.069888][ T5790] vhci_hcd vhci_hcd.0: Device attached [ 221.218510][ T5242] udevd[5242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.250244][ T4540] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 221.586664][ T5786] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 221.593245][ T5786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.791074][ T5786] vhci_hcd vhci_hcd.0: Device attached [ 221.799886][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 221.929687][ T5790] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(7) [ 221.936284][ T5790] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.993637][ T5790] vhci_hcd vhci_hcd.0: Device attached [ 223.110013][ T5790] kvm: pic: non byte write [ 223.178800][ T7] Bluetooth: hci4: command 0x1003 tx timeout [ 223.185059][ T146] Bluetooth: hci4: sending frame failed (-49) [ 223.600877][ T5802] vhci_hcd: connection closed [ 223.601069][ T5795] vhci_hcd: connection closed [ 223.605836][ T5801] vhci_hcd: connection closed [ 223.606240][ T5787] vhci_hcd: connection reset by peer [ 224.158942][ T5848] hub 5-0:1.0: USB hub found [ 224.164793][ T4227] vhci_hcd: stop threads [ 224.170169][ T5848] hub 5-0:1.0: 1 port detected [ 224.595033][ T4227] vhci_hcd: release socket [ 224.638597][ T4227] vhci_hcd: disconnect device [ 224.716250][ T4227] vhci_hcd: stop threads [ 224.720582][ T4227] vhci_hcd: release socket [ 224.775830][ T4227] vhci_hcd: disconnect device [ 224.781874][ T4227] vhci_hcd: stop threads [ 224.795698][ T4227] vhci_hcd: release socket [ 224.811695][ T5860] netlink: 'syz.5.416': attribute type 1 has an invalid length. [ 224.820144][ T4227] vhci_hcd: disconnect device [ 224.825388][ T4227] vhci_hcd: stop threads [ 224.850926][ T5860] netlink: 'syz.5.416': attribute type 2 has an invalid length. [ 224.858901][ T4227] vhci_hcd: release socket [ 224.863463][ T4227] vhci_hcd: disconnect device [ 225.235750][ T4230] Bluetooth: hci4: command 0x1001 tx timeout [ 225.241930][ T146] Bluetooth: hci4: sending frame failed (-49) [ 226.087431][ T5879] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 226.087431][ T5879] [ 226.101657][ T5879] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 226.115899][ T5879] CIFS: Attempting to mount \\127.0.0.1\share [ 226.146803][ T5879] CIFS: VFS: Error connecting to socket. Aborting operation. [ 226.156489][ T5879] CIFS: VFS: cifs_mount failed w/return code = -111 [ 226.507114][ T5882] loop5: detected capacity change from 0 to 512 [ 226.661542][ T5882] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 226.713542][ T5882] EXT4-fs (loop5): 1 truncate cleaned up [ 226.759745][ T5882] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 227.996090][ T4540] vhci_hcd: vhci_device speed not set [ 228.024311][ T4190] Bluetooth: hci4: command 0x1009 tx timeout [ 229.021795][ T5903] device syz_tun entered promiscuous mode [ 230.482379][ T5918] loop3: detected capacity change from 0 to 128 [ 231.277187][ T5918] attempt to access beyond end of device [ 231.277187][ T5918] loop3: rw=2049, want=250, limit=128 [ 234.041245][ T5963] loop5: detected capacity change from 0 to 512 [ 234.208609][ T5963] EXT4-fs (loop5): Ignoring removed bh option [ 234.231277][ T5963] EXT4-fs (loop5): quotafile must be on filesystem root [ 234.365849][ T5963] loop5: detected capacity change from 0 to 512 [ 234.516403][ T5963] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.440: iget: bad i_size value: 38620345925642 [ 234.530609][ T5963] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.440: couldn't read orphan inode 15 (err -117) [ 234.546681][ T5963] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.212629][ T4227] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 236.093829][ T4227] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 352 with error 28 [ 236.113288][ T5983] netlink: 104 bytes leftover after parsing attributes in process `syz.0.444'. [ 236.181805][ T4227] EXT4-fs (loop5): This should not happen!! Data will be lost [ 236.181805][ T4227] [ 236.211482][ T4227] EXT4-fs (loop5): Total free blocks count 0 [ 236.226422][ T4227] EXT4-fs (loop5): Free/Dirty block details [ 236.239594][ T4227] EXT4-fs (loop5): free_blocks=0 [ 236.244636][ T4227] EXT4-fs (loop5): dirty_blocks=352 [ 236.276257][ T4227] EXT4-fs (loop5): Block reservation details [ 236.325901][ T4227] EXT4-fs (loop5): i_reserved_data_blocks=352 [ 236.937849][ T6012] loop0: detected capacity change from 0 to 256 [ 237.664973][ T6013] loop5: detected capacity change from 0 to 1024 [ 237.685443][ T6012] FAT-fs (loop0): Directory bread(block 64) failed [ 237.718615][ T6012] FAT-fs (loop0): Directory bread(block 65) failed [ 237.745085][ T6012] FAT-fs (loop0): Directory bread(block 66) failed [ 237.790763][ T6012] FAT-fs (loop0): Directory bread(block 67) failed [ 237.843801][ T6012] FAT-fs (loop0): Directory bread(block 68) failed [ 237.865484][ T6012] FAT-fs (loop0): Directory bread(block 69) failed [ 237.889076][ T6012] FAT-fs (loop0): Directory bread(block 70) failed [ 237.904696][ T6012] FAT-fs (loop0): Directory bread(block 71) failed [ 237.908336][ T6013] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 237.956959][ T6012] FAT-fs (loop0): Directory bread(block 72) failed [ 237.963941][ T6012] FAT-fs (loop0): Directory bread(block 73) failed [ 238.342348][ T6035] attempt to access beyond end of device [ 238.342348][ T6035] loop0: rw=524288, want=1772, limit=256 [ 238.365569][ T6035] attempt to access beyond end of device [ 238.365569][ T6035] loop0: rw=0, want=1772, limit=256 [ 238.495751][ T26] audit: type=1800 audit(1791535334.588:26): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.451" name="file1" dev="loop0" ino=1048663 res=0 errno=0 [ 238.812440][ T6043] loop3: detected capacity change from 0 to 8 [ 241.710035][ T6061] loop3: detected capacity change from 0 to 2048 [ 242.571955][ T6061] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 242.726433][ T6061] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 242.757184][ T6061] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 244.862313][ T6100] 8021q: VLANs not supported on xfrm0 [ 245.751684][ T6125] 8021q: VLANs not supported on gre0 [ 245.794880][ T6125] process 'syz.0.471' launched '/dev/fd/-1/./file2' with NULL argv: empty string added [ 248.996003][ T6148] hub 5-0:1.0: USB hub found [ 249.002668][ T6148] hub 5-0:1.0: 1 port detected [ 251.956829][ T6179] loop2: detected capacity change from 0 to 128 [ 252.199654][ T6179] attempt to access beyond end of device [ 252.199654][ T6179] loop2: rw=2049, want=250, limit=128 [ 252.524560][ T6183] attempt to access beyond end of device [ 252.524560][ T6183] loop2: rw=2049, want=140, limit=128 [ 253.580455][ T6183] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 255.499108][ T6216] hub 5-0:1.0: USB hub found [ 255.506558][ T6216] hub 5-0:1.0: 1 port detected [ 256.196199][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.202543][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.757125][ T6227] FAULT_INJECTION: forcing a failure. [ 256.757125][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 256.859011][ T6227] CPU: 1 PID: 6227 Comm: syz.4.494 Not tainted syzkaller #0 [ 256.866411][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.876510][ T6227] Call Trace: [ 256.879825][ T6227] [ 256.882824][ T6227] dump_stack_lvl+0x188/0x250 [ 256.887549][ T6227] ? show_regs_print_info+0x20/0x20 [ 256.892785][ T6227] ? load_image+0x410/0x410 [ 256.897336][ T6227] ? __might_sleep+0xf0/0xf0 [ 256.901962][ T6227] ? __lock_acquire+0x7d40/0x7d40 [ 256.907028][ T6227] should_fail+0x383/0x4b0 [ 256.911487][ T6227] should_failslab+0x5/0x20 [ 256.916017][ T6227] slab_pre_alloc_hook+0x51/0xc0 [ 256.920992][ T6227] ? vm_area_dup+0x1e/0xb0 [ 256.925440][ T6227] kmem_cache_alloc+0x3d/0x280 [ 256.930241][ T6227] vm_area_dup+0x1e/0xb0 [ 256.934554][ T6227] __split_vma+0xb1/0x410 [ 256.938924][ T6227] ? split_vma+0x6b/0xd0 [ 256.943213][ T6227] userfaultfd_ioctl+0x2f93/0x41b0 [ 256.948378][ T6227] ? userfaultfd_poll+0x1c0/0x1c0 [ 256.953446][ T6227] ? kfree+0xef/0x2a0 [ 256.957463][ T6227] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 256.963174][ T6227] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 256.968727][ T6227] ? bpf_lsm_file_ioctl+0x5/0x10 [ 256.973701][ T6227] ? security_file_ioctl+0x7c/0xa0 [ 256.978842][ T6227] ? userfaultfd_poll+0x1c0/0x1c0 [ 256.983903][ T6227] __se_sys_ioctl+0xfa/0x170 [ 256.988525][ T6227] do_syscall_64+0x4c/0xa0 [ 256.992980][ T6227] ? clear_bhb_loop+0x30/0x80 [ 256.997701][ T6227] ? clear_bhb_loop+0x30/0x80 [ 257.002412][ T6227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.008340][ T6227] RIP: 0033:0x7fcecc1681d9 [ 257.012789][ T6227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.032442][ T6227] RSP: 002b:00007fceca3c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.040895][ T6227] RAX: ffffffffffffffda RBX: 00007fcecc3effa0 RCX: 00007fcecc1681d9 [ 257.048906][ T6227] RDX: 0000200000000040 RSI: 00000000c020aa00 RDI: 0000000000000004 [ 257.056944][ T6227] RBP: 00007fcecc1ff888 R08: 0000000000000000 R09: 0000000000000000 [ 257.064946][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.073039][ T6227] R13: 00007fcecc3f0038 R14: 00007fcecc3effa0 R15: 00007ffcd6077308 [ 257.081067][ T6227] [ 258.808399][ T6250] loop2: detected capacity change from 0 to 512 [ 258.837676][ T6251] loop4: detected capacity change from 0 to 128 [ 258.936776][ T6250] EXT4-fs (loop2): Ignoring removed bh option [ 259.094275][ T6250] EXT4-fs (loop2): quotafile must be on filesystem root [ 259.385964][ T6245] loop2: detected capacity change from 0 to 512 [ 259.461706][ T6245] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.497: iget: bad i_size value: 38620345925642 [ 259.475967][ T6245] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.497: couldn't read orphan inode 15 (err -117) [ 259.491229][ T6245] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.817533][ T6251] attempt to access beyond end of device [ 259.817533][ T6251] loop4: rw=2049, want=250, limit=128 [ 259.873084][ T6257] attempt to access beyond end of device [ 259.873084][ T6257] loop4: rw=2049, want=140, limit=128 [ 259.986016][ T4376] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:7: bg 0: block 5: invalid block bitmap [ 260.004760][ T6257] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 260.020088][ T4376] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 416 with error 28 [ 260.045724][ T4376] EXT4-fs (loop2): This should not happen!! Data will be lost [ 260.045724][ T4376] [ 260.055422][ T4376] EXT4-fs (loop2): Total free blocks count 0 [ 260.071701][ T4376] EXT4-fs (loop2): Free/Dirty block details [ 260.081829][ T4376] EXT4-fs (loop2): free_blocks=0 [ 260.086912][ T4376] EXT4-fs (loop2): dirty_blocks=416 [ 260.102362][ T4376] EXT4-fs (loop2): Block reservation details [ 260.112488][ T4376] EXT4-fs (loop2): i_reserved_data_blocks=416 [ 260.327460][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.336462][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.882267][ T6269] loop4: detected capacity change from 0 to 4096 [ 262.114372][ T6269] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.242538][ T6274] hub 5-0:1.0: USB hub found [ 262.248256][ T6274] hub 5-0:1.0: 1 port detected [ 263.224386][ T6269] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 263.548567][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.604248][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.970245][ T6284] loop2: detected capacity change from 0 to 512 [ 264.155982][ T6238] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.164905][ T6238] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.173941][ T6238] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.183330][ T6238] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.354600][ T6240] 8021q: VLANs not supported on gre0 [ 265.740796][ T6304] syz.3.514 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 266.419100][ T6307] FAULT_INJECTION: forcing a failure. [ 266.419100][ T6307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.487995][ T6307] CPU: 0 PID: 6307 Comm: syz.5.516 Not tainted syzkaller #0 [ 266.495343][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.505422][ T6307] Call Trace: [ 266.508729][ T6307] [ 266.511701][ T6307] dump_stack_lvl+0x188/0x250 [ 266.516413][ T6307] ? show_regs_print_info+0x20/0x20 [ 266.521758][ T6307] ? load_image+0x410/0x410 [ 266.526298][ T6307] ? verify_lock_unused+0x140/0x140 [ 266.531505][ T6307] ? __kernel_text_address+0x9a/0x100 [ 266.536906][ T6307] should_fail+0x383/0x4b0 [ 266.541368][ T6307] prepare_alloc_pages+0x1e3/0x5b0 [ 266.546503][ T6307] __alloc_pages+0x11b/0x480 [ 266.551110][ T6307] ? zone_statistics+0x170/0x170 [ 266.556052][ T6307] ? mark_lock+0x94/0x320 [ 266.560409][ T6307] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 266.566398][ T6307] ? __lock_acquire+0x7d40/0x7d40 [ 266.571430][ T6307] ? alloc_pages+0x452/0x560 [ 266.576028][ T6307] new_slab+0xc0/0x4b0 [ 266.580109][ T6307] ___slab_alloc+0x807/0xdd0 [ 266.584722][ T6307] ? xfrm_policy_alloc+0x75/0x2b0 [ 266.589938][ T6307] kmem_cache_alloc_trace+0xf9/0x290 [ 266.595242][ T6307] ? xfrm_policy_alloc+0x75/0x2b0 [ 266.600277][ T6307] xfrm_policy_alloc+0x75/0x2b0 [ 266.605138][ T6307] xfrm_policy_construct+0x36/0x1dd0 [ 266.610447][ T6307] ? aa_get_newest_label+0xf5/0x5a0 [ 266.615692][ T6307] xfrm_add_policy+0x487/0x8b0 [ 266.620470][ T6307] ? xfrm_dump_sa_done+0xc0/0xc0 [ 266.625546][ T6307] ? apparmor_capable+0x12c/0x190 [ 266.630584][ T6307] ? __nla_parse+0x3c/0x50 [ 266.635017][ T6307] xfrm_user_rcv_msg+0x7fc/0xaa0 [ 266.639963][ T6307] ? xfrm_netlink_rcv+0x90/0x90 [ 266.644854][ T6307] ? __mutex_lock_common+0x435/0x2400 [ 266.650275][ T6307] netlink_rcv_skb+0x1e9/0x430 [ 266.655079][ T6307] ? xfrm_netlink_rcv+0x66/0x90 [ 266.659960][ T6307] ? xfrm_netlink_rcv+0x90/0x90 [ 266.664837][ T6307] ? netlink_ack+0xb10/0xb10 [ 266.669461][ T6307] ? __lock_acquire+0x7d40/0x7d40 [ 266.674500][ T6307] xfrm_netlink_rcv+0x75/0x90 [ 266.679176][ T6307] netlink_unicast+0x78f/0x940 [ 266.683958][ T6307] netlink_sendmsg+0x8ba/0xbe0 [ 266.688728][ T6307] ? netlink_getsockopt+0x570/0x570 [ 266.693935][ T6307] ? aa_sock_msg_perm+0x94/0x150 [ 266.698891][ T6307] ? apparmor_socket_sendmsg+0x88/0x230 [ 266.704456][ T6307] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 266.709741][ T6307] ? security_socket_sendmsg+0x7c/0xa0 [ 266.715204][ T6307] ? netlink_getsockopt+0x570/0x570 [ 266.720418][ T6307] ____sys_sendmsg+0x5be/0x8f0 [ 266.725235][ T6307] ? __sys_sendmsg_sock+0x30/0x30 [ 266.730276][ T6307] ? import_iovec+0x6f/0xa0 [ 266.734784][ T6307] ___sys_sendmsg+0x236/0x2e0 [ 266.739470][ T6307] ? __sys_sendmsg+0x290/0x290 [ 266.744262][ T6307] __se_sys_sendmsg+0x1b7/0x2a0 [ 266.749120][ T6307] ? __x64_sys_sendmsg+0x80/0x80 [ 266.754086][ T6307] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 266.760119][ T6307] ? lockdep_hardirqs_on+0x94/0x140 [ 266.765339][ T6307] do_syscall_64+0x4c/0xa0 [ 266.769755][ T6307] ? clear_bhb_loop+0x30/0x80 [ 266.774434][ T6307] ? clear_bhb_loop+0x30/0x80 [ 266.779114][ T6307] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.785012][ T6307] RIP: 0033:0x7fa1296e51d9 [ 266.789433][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.809039][ T6307] RSP: 002b:00007fa12793d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.817462][ T6307] RAX: ffffffffffffffda RBX: 00007fa12996cfa0 RCX: 00007fa1296e51d9 [ 266.825451][ T6307] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 266.833439][ T6307] RBP: 00007fa12977c888 R08: 0000000000000000 R09: 0000000000000000 [ 266.841412][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.849382][ T6307] R13: 00007fa12996d038 R14: 00007fa12996cfa0 R15: 00007ffe9e546fe8 [ 266.857366][ T6307] [ 267.268724][ T6322] hub 5-0:1.0: USB hub found [ 267.274258][ T6322] hub 5-0:1.0: 1 port detected [ 268.185006][ T4513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.463869][ T4513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.259129][ T6350] 8021q: VLANs not supported on gre0 [ 270.608000][ T4513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.808900][ T6364] loop0: detected capacity change from 0 to 1024 [ 272.973168][ T4513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.161399][ T6374] loop3: detected capacity change from 0 to 256 [ 273.427322][ T6374] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 256) [ 273.450105][ T6379] hub 5-0:1.0: USB hub found [ 273.455013][ T6379] hub 5-0:1.0: 1 port detected [ 273.475165][ T6374] exFAT-fs (loop3): failed to load alloc-bitmap [ 273.505906][ T6374] exFAT-fs (loop3): failed to recognize exfat type [ 274.611554][ T6398] hub 5-0:1.0: USB hub found [ 274.616444][ T6398] hub 5-0:1.0: 1 port detected [ 276.756302][ T6411] kernel profiling enabled (shift: 4) [ 276.770479][ T4513] device hsr_slave_0 left promiscuous mode [ 276.860505][ T4513] device hsr_slave_1 left promiscuous mode [ 276.900518][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.921166][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.964029][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.983097][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.011173][ T4513] device bridge_slave_1 left promiscuous mode [ 277.031283][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.056380][ T4513] device bridge_slave_0 left promiscuous mode [ 277.069375][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.111567][ T4513] device veth1_macvtap left promiscuous mode [ 277.123428][ T4513] device veth0_macvtap left promiscuous mode [ 277.143717][ T4513] device veth1_vlan left promiscuous mode [ 277.160667][ T4513] device veth0_vlan left promiscuous mode [ 278.333215][ T6436] loop3: detected capacity change from 0 to 512 [ 278.476031][ T6424] loop2: detected capacity change from 0 to 32768 [ 278.523982][ T6436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 278.561043][ T6424] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.540 (6424) [ 278.617516][ T6436] System zones: 1-12 [ 278.716269][ T6436] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.545: missing EA_INODE flag [ 278.884115][ T6436] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.545: error while reading EA inode 12 err=-117 [ 279.054975][ T6436] EXT4-fs (loop3): 1 orphan inode deleted [ 279.124630][ T6436] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 279.233420][ T6424] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 280.621717][ T6424] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 280.638989][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 280.779829][ T4513] team0 (unregistering): Port device team_slave_1 removed [ 280.797362][ T6424] BTRFS info (device loop2): use zstd compression, level 3 [ 280.820411][ T4513] team0 (unregistering): Port device team_slave_0 removed [ 280.897940][ T6424] BTRFS info (device loop2): using free space tree [ 280.915429][ T6424] BTRFS info (device loop2): has skinny extents [ 281.297782][ T4513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.469082][ T6469] loop0: detected capacity change from 0 to 512 [ 281.524931][ T6469] EXT4-fs (loop0): Ignoring removed bh option [ 281.991725][ T4174] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (4174) [ 282.004098][ T6424] BTRFS error (device loop2): open_ctree failed: -12 [ 282.091358][ T6469] EXT4-fs (loop0): quotafile must be on filesystem root [ 282.283689][ T4513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.665798][ T2287] Bluetooth: hci1: command 0x041b tx timeout [ 286.292211][ T4878] Bluetooth: hci1: command 0x040f tx timeout [ 287.613032][ T4513] bond0 (unregistering): Released all slaves [ 288.363176][ T26] audit: type=1326 audit(1791535384.458:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.559" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02e87201d9 code=0x0 [ 288.436161][ T4878] Bluetooth: hci1: command 0x0419 tx timeout [ 289.268967][ T6512] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 289.395416][ T6511] loop3: detected capacity change from 0 to 1024 [ 289.502975][ T6511] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 289.537129][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 289.578812][ T6511] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 289.661559][ T6511] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 289.675338][ T6519] capability: warning: `syz.2.560' uses deprecated v2 capabilities in a way that may be insecure [ 289.712040][ T6522] loop0: detected capacity change from 0 to 1024 [ 289.718746][ T6511] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.783038][ T6511] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 289.996571][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.015232][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.032574][ T6522] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,init_itable=0x0000000000000009,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 290.058632][ T6437] device bridge_slave_0 entered promiscuous mode [ 290.141166][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.148782][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.166076][ T6437] device bridge_slave_1 entered promiscuous mode [ 290.297026][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.324465][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.077334][ T6522] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 291.204315][ T6437] team0: Port device team_slave_0 added [ 291.273482][ T6437] team0: Port device team_slave_1 added [ 292.648548][ T6522] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 292.921504][ T6555] syz.2.566 sent an empty control message without MSG_MORE. [ 294.237670][ T6559] ================================================================== [ 294.246266][ T6559] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 294.253513][ T6559] Read of size 8 at addr ffff88802a2e7618 by task syz.2.569/6559 [ 294.261263][ T6559] [ 294.263613][ T6559] CPU: 1 PID: 6559 Comm: syz.2.569 Not tainted syzkaller #0 [ 294.270931][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.281024][ T6559] Call Trace: [ 294.284338][ T6559] [ 294.287297][ T6559] dump_stack_lvl+0x188/0x250 [ 294.292047][ T6559] ? show_regs_print_info+0x20/0x20 [ 294.297299][ T6559] ? _printk+0xda/0x130 [ 294.301501][ T6559] ? dvb_device_open+0xc5/0x360 [ 294.306404][ T6559] ? load_image+0x410/0x410 [ 294.310946][ T6559] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 294.316455][ T6559] print_address_description+0x60/0x2d0 [ 294.322043][ T6559] ? dvb_device_open+0xc5/0x360 [ 294.326932][ T6559] kasan_report+0xdf/0x130 [ 294.331395][ T6559] ? dvb_device_open+0xc5/0x360 [ 294.336297][ T6559] dvb_device_open+0xc5/0x360 [ 294.341019][ T6559] chrdev_open+0x585/0x5f0 [ 294.345492][ T6559] ? cd_forget+0x160/0x160 [ 294.349953][ T6559] ? fsnotify_perm+0x3a7/0x560 [ 294.354757][ T6559] ? cd_forget+0x160/0x160 [ 294.359229][ T6559] do_dentry_open+0x7f7/0xf90 [ 294.363949][ T6559] ? vfs_open+0x2b/0x80 [ 294.368150][ T6559] path_openat+0x2718/0x2fb0 [ 294.372805][ T6559] ? __kasan_slab_alloc+0xa9/0xc0 [ 294.377873][ T6559] ? do_filp_open+0x400/0x400 [ 294.382607][ T6559] do_filp_open+0x1df/0x400 [ 294.387162][ T6559] ? vfs_tmpfile+0x300/0x300 [ 294.391811][ T6559] ? _raw_spin_unlock+0x24/0x40 [ 294.396700][ T6559] ? alloc_fd+0x59e/0x650 [ 294.401115][ T6559] do_sys_openat2+0x14b/0x500 [ 294.405828][ T6559] ? __lock_acquire+0x7d40/0x7d40 [ 294.410900][ T6559] ? do_sys_open+0xe0/0xe0 [ 294.415361][ T6559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 294.421390][ T6559] ? lock_chain_count+0x20/0x20 [ 294.426300][ T6559] __x64_sys_openat+0x135/0x160 [ 294.431200][ T6559] do_syscall_64+0x4c/0xa0 [ 294.435645][ T6559] ? clear_bhb_loop+0x30/0x80 [ 294.440355][ T6559] ? clear_bhb_loop+0x30/0x80 [ 294.445074][ T6559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.451003][ T6559] RIP: 0033:0x7ff2be3a4a0e [ 294.455454][ T6559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.475101][ T6559] RSP: 002b:00007ff2bc61ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.483564][ T6559] RAX: ffffffffffffffda RBX: 00007ff2bc61b6c0 RCX: 00007ff2be3a4a0e [ 294.491572][ T6559] RDX: 0000000000040402 RSI: 00007ff2bc61ac00 RDI: ffffffffffffff9c [ 294.499580][ T6559] RBP: 00007ff2bc61ac00 R08: 0000000000000000 R09: 0000000000000000 [ 294.507585][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 294.515589][ T6559] R13: 00007ff2be66c128 R14: 00007ff2be66c090 R15: 00007ffdcb5894d8 [ 294.524236][ T6559] [ 294.527288][ T6559] [ 294.529630][ T6559] Allocated by task 1: [ 294.533739][ T6559] __kasan_kmalloc+0xaf/0xe0 [ 294.538367][ T6559] dvb_register_device+0x300/0x1dc0 [ 294.543587][ T6559] dvb_register_frontend+0x629/0x900 [ 294.548904][ T6559] vidtv_bridge_probe+0x9c1/0xf30 [ 294.553951][ T6559] platform_probe+0x137/0x1c0 [ 294.558651][ T6559] really_probe+0x276/0xc70 [ 294.563182][ T6559] __driver_probe_device+0x1f5/0x390 [ 294.568492][ T6559] driver_probe_device+0x4f/0x420 [ 294.573550][ T6559] __driver_attach+0x45d/0x660 [ 294.578344][ T6559] bus_for_each_dev+0x182/0x1f0 [ 294.583217][ T6559] bus_add_driver+0x324/0x5d0 [ 294.587915][ T6559] driver_register+0x32d/0x430 [ 294.592811][ T6559] vidtv_bridge_init+0x45/0x80 [ 294.597601][ T6559] do_one_initcall+0x272/0x730 [ 294.602389][ T6559] do_initcall_level+0x13d/0x1f0 [ 294.607356][ T6559] do_initcalls+0x4b/0x90 [ 294.611711][ T6559] kernel_init_freeable+0x3d5/0x560 [ 294.616930][ T6559] kernel_init+0x19/0x1b0 [ 294.621289][ T6559] ret_from_fork+0x1f/0x30 [ 294.625750][ T6559] [ 294.628350][ T6559] Freed by task 6512: [ 294.632362][ T6559] kasan_set_track+0x4b/0x70 [ 294.636985][ T6559] kasan_set_free_info+0x1f/0x40 [ 294.641972][ T6559] ____kasan_slab_free+0xd5/0x110 [ 294.647036][ T6559] slab_free_freelist_hook+0xec/0x170 [ 294.652438][ T6559] kfree+0xef/0x2a0 [ 294.656273][ T6559] dvb_device_open+0x2d2/0x360 [ 294.661068][ T6559] chrdev_open+0x585/0x5f0 [ 294.665517][ T6559] do_dentry_open+0x7f7/0xf90 [ 294.670235][ T6559] path_openat+0x2718/0x2fb0 [ 294.674863][ T6559] do_filp_open+0x1df/0x400 [ 294.679400][ T6559] do_sys_openat2+0x14b/0x500 [ 294.684115][ T6559] __x64_sys_openat+0x135/0x160 [ 294.688995][ T6559] do_syscall_64+0x4c/0xa0 [ 294.693448][ T6559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.699377][ T6559] [ 294.701724][ T6559] The buggy address belongs to the object at ffff88802a2e7600 [ 294.701724][ T6559] which belongs to the cache kmalloc-256 of size 256 [ 294.715916][ T6559] The buggy address is located 24 bytes inside of [ 294.715916][ T6559] 256-byte region [ffff88802a2e7600, ffff88802a2e7700) [ 294.729144][ T6559] The buggy address belongs to the page: [ 294.734815][ T6559] page:ffffea0000a8b980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a2e6 [ 294.745023][ T6559] head:ffffea0000a8b980 order:1 compound_mapcount:0 [ 294.751640][ T6559] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 294.759671][ T6559] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017841b40 [ 294.768281][ T6559] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 294.776881][ T6559] page dumped because: kasan: bad access detected [ 294.783323][ T6559] page_owner tracks the page as allocated [ 294.789052][ T6559] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 21644419478, free_ts 0 [ 294.807061][ T6559] get_page_from_freelist+0x24f6/0x2670 [ 294.812658][ T6559] __alloc_pages+0x1ee/0x480 [ 294.817274][ T6559] alloc_page_interleave+0x24/0x1e0 [ 294.822501][ T6559] new_slab+0xc0/0x4b0 [ 294.826603][ T6559] ___slab_alloc+0x807/0xdd0 [ 294.831222][ T6559] __kmalloc_node+0x142/0x3a0 [ 294.835927][ T6559] kvmalloc_node+0x84/0x130 [ 294.840494][ T6559] v4l2_ctrl_new+0x70f/0x1310 [ 294.845193][ T6559] v4l2_ctrl_new_std+0x247/0x300 [ 294.850154][ T6559] handler_new_ref+0x14f/0x8d0 [ 294.854939][ T6559] v4l2_ctrl_add_handler+0x197/0x280 [ 294.860330][ T6559] vivid_create_controls+0x2411/0x3380 [ 294.865826][ T6559] vivid_probe+0x39ff/0x6240 [ 294.870465][ T6559] platform_probe+0x137/0x1c0 [ 294.875164][ T6559] really_probe+0x276/0xc70 [ 294.879696][ T6559] __driver_probe_device+0x1f5/0x390 [ 294.885085][ T6559] page_owner free stack trace missing [ 294.890462][ T6559] [ 294.892795][ T6559] Memory state around the buggy address: [ 294.898440][ T6559] ffff88802a2e7500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.906522][ T6559] ffff88802a2e7580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.914600][ T6559] >ffff88802a2e7600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.922692][ T6559] ^ [ 294.927567][ T6559] ffff88802a2e7680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.935652][ T6559] ffff88802a2e7700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.943724][ T6559] ================================================================== [ 294.951819][ T6559] Disabling lock debugging due to kernel taint [ 294.966982][ T6559] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.974336][ T6559] CPU: 1 PID: 6559 Comm: syz.2.569 Tainted: G B syzkaller #0 [ 294.983031][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.993204][ T6559] Call Trace: [ 294.996680][ T6559] [ 294.999645][ T6559] dump_stack_lvl+0x188/0x250 [ 295.004359][ T6559] ? show_regs_print_info+0x20/0x20 [ 295.010030][ T6559] ? load_image+0x410/0x410 [ 295.014572][ T6559] panic+0x2f8/0x850 [ 295.018493][ T6559] ? bpf_jit_dump+0xd0/0xd0 [ 295.023025][ T6559] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 295.028688][ T6559] ? check_panic_on_warn+0x6c/0xa0 [ 295.033827][ T6559] ? dvb_device_open+0xc5/0x360 [ 295.038699][ T6559] check_panic_on_warn+0x80/0xa0 [ 295.043664][ T6559] ? dvb_device_open+0xc5/0x360 [ 295.048535][ T6559] end_report+0x6d/0xf0 [ 295.052709][ T6559] kasan_report+0x102/0x130 [ 295.057842][ T6559] ? dvb_device_open+0xc5/0x360 [ 295.062729][ T6559] dvb_device_open+0xc5/0x360 [ 295.067438][ T6559] chrdev_open+0x585/0x5f0 [ 295.071888][ T6559] ? cd_forget+0x160/0x160 [ 295.076335][ T6559] ? fsnotify_perm+0x3a7/0x560 [ 295.081125][ T6559] ? cd_forget+0x160/0x160 [ 295.085593][ T6559] do_dentry_open+0x7f7/0xf90 [ 295.090299][ T6559] ? vfs_open+0x2b/0x80 [ 295.094484][ T6559] path_openat+0x2718/0x2fb0 [ 295.099109][ T6559] ? __kasan_slab_alloc+0xa9/0xc0 [ 295.104170][ T6559] ? do_filp_open+0x400/0x400 [ 295.108879][ T6559] do_filp_open+0x1df/0x400 [ 295.113413][ T6559] ? vfs_tmpfile+0x300/0x300 [ 295.118034][ T6559] ? _raw_spin_unlock+0x24/0x40 [ 295.122917][ T6559] ? alloc_fd+0x59e/0x650 [ 295.127273][ T6559] do_sys_openat2+0x14b/0x500 [ 295.131972][ T6559] ? __lock_acquire+0x7d40/0x7d40 [ 295.137022][ T6559] ? do_sys_open+0xe0/0xe0 [ 295.141466][ T6559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 295.147475][ T6559] ? lock_chain_count+0x20/0x20 [ 295.152441][ T6559] __x64_sys_openat+0x135/0x160 [ 295.157319][ T6559] do_syscall_64+0x4c/0xa0 [ 295.161758][ T6559] ? clear_bhb_loop+0x30/0x80 [ 295.166459][ T6559] ? clear_bhb_loop+0x30/0x80 [ 295.171157][ T6559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.177076][ T6559] RIP: 0033:0x7ff2be3a4a0e [ 295.181508][ T6559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.201137][ T6559] RSP: 002b:00007ff2bc61ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 295.209578][ T6559] RAX: ffffffffffffffda RBX: 00007ff2bc61b6c0 RCX: 00007ff2be3a4a0e [ 295.217576][ T6559] RDX: 0000000000040402 RSI: 00007ff2bc61ac00 RDI: ffffffffffffff9c [ 295.225564][ T6559] RBP: 00007ff2bc61ac00 R08: 0000000000000000 R09: 0000000000000000 [ 295.233562][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 295.241555][ T6559] R13: 00007ff2be66c128 R14: 00007ff2be66c090 R15: 00007ffdcb5894d8 [ 295.249556][ T6559] [ 295.252894][ T6559] Kernel Offset: disabled [ 295.257255][ T6559] Rebooting in 86400 seconds..