last executing test programs: 16m41.923484625s ago: executing program 3 (id=252): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8913, &(0x7f0000000280)="4c246c58ca84f272463a") r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000540000000e0002006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0xfc, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x3018018, &(0x7f0000000040)=ANY=[], 0xd0, 0x599, &(0x7f0000000b80)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002ceb1b449611f498005"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 16m39.140935466s ago: executing program 3 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x20000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000002c0)="cd47652df6e0a9", &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000040)="f3f9687fc2", &(0x7f0000000080)=""/1}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={r4, 0x400, 0x9, 0xfffffffd}, 0x10) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x8) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400a69a2255d2d5b51884c806c2cf00000077b21100000000d90394312b95d686dfc484270981c5af98facc7de441a43124ba82173b"], 0x14}, 0x1, 0x0, 0x0, 0x20000c0}, 0x24000840) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) copy_file_range(r7, &(0x7f00000008c0)=0x4, r5, 0x0, 0x8, 0x0) (async) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001e40)=ANY=[@ANYBLOB="b4120000000501040000000000000000010000025402010001000000080000000005040007000d0073797a30000000000000000000000000000000000000000000000000000000006981fc0853675d03d6be8e84cdd782c78c0d8784a3b961178ee2c5821eb6b4ef7c5fc52e7fb1954d55b2d249c597c86ccaf2e163fb13bb68a266cd2bbd874e04000001000100000009000000020002"], 0x12b4}}, 0x84) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x250, 0xc8, 0x8, 0x250, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x250, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0xfffffffc, 0x800, 'snmp_trap\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async, rerun: 64) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x9, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) (async, rerun: 64) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) (async) socket$pppl2tp(0x18, 0x1, 0x1) 16m38.391611349s ago: executing program 3 (id=264): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00001d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x20, 0x7, 0x5, "752d6d927f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES32, @ANYBLOB], 0x6f4}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000480)={r6, &(0x7f0000000280)=')\x00', 0x4000, &(0x7f0000000380)={@_ha_fsid={[0x5, 0x1]}, {0x8, 0x5, 0x1, 0x6}}, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x4}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20004000) 16m31.769042607s ago: executing program 3 (id=278): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m29.571408035s ago: executing program 3 (id=284): r0 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) semget$private(0x0, 0xc, 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) getdents64(r4, &(0x7f0000000240)=""/145, 0x91) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 16m27.513930731s ago: executing program 3 (id=286): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002000000408c0d02014000eef4030109026e00030104cd33b68c1a0111463001090400000001013000b80f05180a24010e0a0005000000090401000001023000090401010101023000090501090002b905030a2525000200000106000904020000010230000904020101010230000905820940000602d40a25251e000000010500"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESOCT=0x0], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000740)={0x1, 0x6, 0x2, &(0x7f0000000140)={0x10, "810556cf21393f0084c89ea7f77d040b00"}}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000006640)=ANY=[@ANYBLOB='quota,discard=0x000000000020aff9,iocharset=none,iocharset=cp949,errors=remount-ro,grpquota,nointegrity,errors=remount-ro,nodiscard,errors=remount-ro,\x00'], 0x24, 0x62a7, &(0x7f0000006700)="$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") r5 = userfaultfd(0x80801) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="0203fe925aa4a2ffe4079800000000000300060000000000020000020a09010200000000000000000200010000000000000009007fffffff03000500000000000200fffeac1414aa0000000000000000010008000000000002000a0009000000ffffffffffffffff"], 0x68}, 0x1, 0x7}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r8, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x7, 0x12, 0x1b, 0x9, "4b8b3ea40100dfed0b48e5094d1a00dd5a1f25cecfe0f4fcdf997dd52115fac256cf0000000000000400000000000000000000000000000000edff00", "eaabbd496e090000e3000000060025de30ad375f240500", [0x1000000000000911, 0xe]}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r9, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x0, {0x9, 0xf, "27380b162389392990285aec76580649d83591733c7db61d84a7703953574ae957cfbccbc059ad1d079ce351eb51898e0acfe38640e1d9db973770164bcdc23ab331bcec1cdf380c1f19447afdbfe2ca77343377378ae893aa4a38ed4f03adcba0eeb9c3351650fc1baf15127bea8bd7628356036dea6ab08b08832cad2265bade594050651a1d15ec01962ccc6a25998f412c97f0f52dc2b1e054408bd40f1a9809bfca05be837ce5817cc650d3ff39fb92ccdf976d9080d459d2adf0e7c8bd4b2da55626e16083499bdb394ef3a8bbb4c3ce0e11a9ec735611b94b2575565f64340b83752a0537d0c37b0309da0a29b4871fc38d2e68b03b3986d08d7e76d8", 0x9, 0x4, 0x0, 0xfe, 0xd0, 0x8, 0x5}}}, 0x128) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000f00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd70000000000a0100000008000800ac1e000108000700f5f2b75d0500010000000000080002"], 0x60}, 0x1, 0x2000000}, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 16m11.739118753s ago: executing program 32 (id=286): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002000000408c0d02014000eef4030109026e00030104cd33b68c1a0111463001090400000001013000b80f05180a24010e0a0005000000090401000001023000090401010101023000090501090002b905030a2525000200000106000904020000010230000904020101010230000905820940000602d40a25251e000000010500"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESOCT=0x0], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000740)={0x1, 0x6, 0x2, &(0x7f0000000140)={0x10, "810556cf21393f0084c89ea7f77d040b00"}}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000006640)=ANY=[@ANYBLOB='quota,discard=0x000000000020aff9,iocharset=none,iocharset=cp949,errors=remount-ro,grpquota,nointegrity,errors=remount-ro,nodiscard,errors=remount-ro,\x00'], 0x24, 0x62a7, &(0x7f0000006700)="$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") r5 = userfaultfd(0x80801) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="0203fe925aa4a2ffe4079800000000000300060000000000020000020a09010200000000000000000200010000000000000009007fffffff03000500000000000200fffeac1414aa0000000000000000010008000000000002000a0009000000ffffffffffffffff"], 0x68}, 0x1, 0x7}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r8, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x7, 0x12, 0x1b, 0x9, "4b8b3ea40100dfed0b48e5094d1a00dd5a1f25cecfe0f4fcdf997dd52115fac256cf0000000000000400000000000000000000000000000000edff00", "eaabbd496e090000e3000000060025de30ad375f240500", [0x1000000000000911, 0xe]}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r9, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x0, {0x9, 0xf, "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", 0x9, 0x4, 0x0, 0xfe, 0xd0, 0x8, 0x5}}}, 0x128) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000f00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd70000000000a0100000008000800ac1e000108000700f5f2b75d0500010000000000080002"], 0x60}, 0x1, 0x2000000}, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 12m5.17985376s ago: executing program 4 (id=1178): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, &(0x7f0000001300)) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_usb_connect(0x0, 0x2c, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x5f, 0xbd, 0x19, 0x40, 0x421, 0x475, 0xce27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x18, 0x4, 0x10, 0x8, "", [{{0x9, 0x4, 0x2f, 0x3, 0x0, 0x2, 0x2, 0xff, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0x2, 0x2}]}]}}]}}]}}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd1) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="2011030000930c2c0b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@delqdisc={0x24, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 12m3.257125039s ago: executing program 4 (id=1192): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000480)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 12m0.419655438s ago: executing program 4 (id=1197): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000480)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) mkdir(0x0, 0x0) 11m56.326447605s ago: executing program 4 (id=1203): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x26900000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESHEX], 0x2, 0x1c7, &(0x7f0000000200)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x200940, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x100010) wait4(0x0, 0x0, 0x2, 0x0) 11m54.09989746s ago: executing program 4 (id=1214): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x2b) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x37, 0xd, 0xe3, 0x40, 0x12d6, 0x444, 0x99c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x83, 0x40, 0x8d, "", [{{0x9, 0x4, 0x5c, 0x2, 0x0, 0x6f, 0x68, 0x84}}]}}]}}, 0x0) 11m50.742057194s ago: executing program 4 (id=1227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x1, 0x400, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 11m49.914050702s ago: executing program 33 (id=1227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x1, 0x400, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 9.948296502s ago: executing program 2 (id=4313): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000480)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 7.483530489s ago: executing program 2 (id=4329): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x35, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xbe, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x1, 0x2, {0x6, @vbi={0x7, 0x0, 0x4, 0x0, [0x0, 0x3], [0x200, 0xffff], 0x1}}, 0xffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x2e, 0x61, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x306e}, 0x28) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x30, {0x30, 0xc, "c263eace6fae0fb78e6196787d7a0c3b44383d33047d4acbe33f77aa6a03d22b99c65ba329aa85936c1f42db2b57"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000240)={'vlan1\x00', 0xac33, 0x1}) (async) syz_genetlink_get_family_id$nl80211(0x0, r2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x8000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000480)={{0x1, 0x8}, {0x80000, 0x7}, 0x5, 0x5}) 6.830808908s ago: executing program 1 (id=4335): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}}, 0x84) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r1, 0x0, 0x917) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a40005007c0000000000035c3b61c1d6ddb2c124c2110e00367f6f94007174cf6efb8000a007a290eb49e2f11d457fbace2ee5a7cef4094200001b14d6d930dfe1d9d322fe7c4a50b5b9bd6ee6f61e59eb4edbb57a00e97a6f6e7b7e2720637a1e7892811eb64252f19e00360db798262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5ad42ce81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b", 0xd8}], 0x1}, 0x4000) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 5.298559922s ago: executing program 2 (id=4340): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1, 0x147, &(0x7f0000000240)="$eJzs0L9LOnEcx/HXfe++EqX9IAMLMqGhIzHPE2tq0EgSsoPCpUmwiwLFSChHI9oaglYHS2gS/wXLWiyFsH+ixS1oLM6PIEZL++uxHPd8v3kPn/XVlgoPIENYy2aOjs1cztzzbBvx6M57rRa2ug3A0MBc7N+HgQPrqwCdM8DKjw5g/zBtLqWyaeu/EwZUAJER0TWI3WGrOUUL9Jo6D9SnRNN/acFem1GAyFj/3tcNsGDdm+jf+wCQL3qrleetZiPmW7yblXER885NSoPdbV7q0emy3SUjYT7dItKdv/kbvld/tdJuNeObRtxoBXV9OagFNC3UNl6asVDhCsqG/QTY/XHPBpdbSQDnEnDdnXUeJAeAeunTyIyulHpvXTiVPYCUL6aSrv/lpHP8H2QVEoiIiIiIiIiIiIiIiIiIiP7qOwAA//8GdGWV") r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0xa, 0x4e23, 0x9, @remote, 0x2}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000004c0)="fce3fa1ed567f78dfdb09de9622ded342a788f10c2c2ae64cacc69c295e509c60a5de2fa3f5874089b0c39d1efdd3b6f6c9b73738449f453b5a7d2ce2913ee9d1ef72d5f2e4730537d2dc0edb7b07f725b18a0a6210772150df01ec79aae8484bf2e1f7df43a4104d7e197be4c8840aece1060dbfd397d25ea619b9becdbcbd9c91fea9ab64db5b8a56b77503a5557feef589786982665783114e096a8c282a279b76e24d282704666a3666e53bc68f0630e261938c38a0d1c17c5d8df380cd8e9d6393641813306a8f5fb28dc34d109712e92ece686355bb079db10c1eee06e2cede8ce1f7b1113f6aa246f16a205d46d8a80", 0xf3}], 0x1, &(0x7f0000000600)=ANY=[], 0x190}, 0x30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) r5 = socket$kcm(0x29, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000440), 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r6, 0x6, 0x21, 0x0, &(0x7f0000000180)) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) (async) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff0900ffffaaaaaaaaaa3486dd6076db4000442f00fe800000000000000000000000000021ff020000000000000000000000000001042065580000020000000800000086dd080088df0000"], 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) (async) keyctl$clear(0x3, 0xfffffffffffffffd) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000041) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000041) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x42000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYRES8=r7], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000e100160a01030000000000000000020000040900020073797a32000000000900010073797a3000000000140003800864e638a03824aa4d0240000002f5fad26348911b01800000000201010100000000000000000000000300"], 0x7c}}, 0x884) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000e100160a01030000000000000000020000040900020073797a32000000000900010073797a3000000000140003800864e638a03824aa4d0240000002f5fad26348911b01800000000201010100000000000000000000000300"], 0x7c}}, 0x884) 4.388027979s ago: executing program 1 (id=4344): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$rtl8150(r0, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x0, 0x4, 0xd2, {0xd2, 0x8faf3a74cadd4298, "ae13d3f8a240bfe738bcd69f76433db724e8ba00821f2a3a744c415c724c51ff0a506afecf828a4b323e2e11963f068aeb0b72cb1a5c38dd80127fd29fde43987e435866410e39455e8bb7763985ae37270a2051278bc18695af2d939ff00f5cd962c9960d178e04d66d0b7df482295fb1503ececd0f8660177ab8703a1c85075ffced9bf7f4773022bd738c38502ccd6be3e4bd492e21714a89a4e1ab34439fbb13740d66718835f7e39641cb14bd50c0ee3f00694db8603eab636976d808e66538262ccae0d41479eeff1819c4936f"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0xf3, "d4445e94aca0e6e1448c79b84a978a3af4565e8a0344a2de4223ec7a7a0988fd41ddea562a3491adf5ae12b36eeb4b41c92d41a743bfcb7f6562fac1fdd8a975bb82f85cd681a59de0e18837a02d2f4842de9f46e980a5fce65bd5e2f87c2ac09506500e2044abdb27d14749219cf7e955494837c427127b8737410af9be869cf1558cca7d30b3b56389a421f7cc70ccea9b3786be2cc087cf03c21b30a111d4794b8157daacf76d3f2f2248834dfe39ad246fff9e95252e84cf75327703116841b371a410c1c971d1ab66eb61b10c9b6617e3ede438cc28490113b6a4eef7dfb55fbb09118540321ed37aa990c3d482500048"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000006c0), &(0x7f0000000700)={0x40, 0x5, 0x5, "d401709cc0"}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x13, 0x0, &(0x7f0000000340)="b4bf11a369d8625dd5ee1d8288a8599486dd47046c2ee101408b3257de22781e530b0de0953f0116a725b46025a6951587880f72ce91dd30ca9844d597c24d848870c30f32ced51d54fa6b80b80c84346553a2fd35d9367af322ea7eeba816e0f4aee1a10f0284", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x2a) 3.798520806s ago: executing program 0 (id=4349): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x68200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r3 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x2000094}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) fsconfig$FSCONFIG_SET_STRING(r3, 0x8, 0x0, 0x0, 0x300) 3.732045699s ago: executing program 0 (id=4350): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f0000000080)={0x3, 0x1, &(0x7f0000000040)}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61) pwrite64(r1, &(0x7f0000000300)="455ea3", 0x3, 0x47ecf) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x8, 0x100000001, 0x80000001}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0xc, 0x1000, 0x800}) close_range(r0, r4, 0x0) 3.611079118s ago: executing program 1 (id=4351): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc2800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x4, 0x2, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xe313, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf3}, 0x1c) 3.610752833s ago: executing program 0 (id=4352): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r0, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f00000002c0)=ANY=[@ANYBLOB="0406"], 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, 0x0, &(0x7f0000000300)) syz_io_uring_setup(0x3247, &(0x7f0000000180)={0x0, 0xf5b7, 0x0, 0x0, 0x252}, &(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) syz_ublk_add_dev(r3, r8, 0x0, r7, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040800) r9 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r9, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x3}}, @generic={0x27, "fefafdd639705f7e8306f4e2f2a8"}, @l2tp={0x2, 0x0, @multicast2, 0x1}, 0x7ff, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='veth0_macvtap\x00', 0xf423, 0x5, 0x6}) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x9, &(0x7f0000000200)=0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001200210325bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 3.495307209s ago: executing program 0 (id=4353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000001c0)={0x4c7a, 0x401, 0x0, 0x3, 0xb, "30a43a2178753cb5"}) r3 = syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000001000)='./file1\x00', 0x4000, &(0x7f0000000280), 0x12, 0xbbf, &(0x7f0000000440)="$eJzs3M9rHOUbAPBnJptt2ub73VRErBcjIi2I26SSYotgKxUvHgS9Cg3ppoRsf5BEatIcNvoPiHoWvAhqUTzYcy+KXr1oe1U8CEVioyCikdkfSdpk09TudmL7+cC7877z7u7zPDvszrywuwHctwazmzRib0ScSCJKzf1pRBTrvb6IWuN+S4vzY78vzo8lsbz8yi9JJBFxfXF+rPVcSXO7uznoi4hvn0/igbfWx52enZscrVYrU83xgZnT5w5Mz849NXF69FTlVOXM8KFnRg6OHBo6PNKxWv/44eil3x578afanx//dfHXdz9M4mj0N+fW1tEpgzG48pqsVYiI0U4Hy0lPs561dSaFWzwo7XJSAAC0la65hnsoStETqxdvpfjyu1yTAwAAADpiuSdiGQAAALjHJdb/AAAAcI9rfQ/g+uL8WKvl+42Eu+vasYgYaNS/1GyNmULU6tu+6I2IXdeTWPuz1qTxsDs2GBE/Xj38WdaiS79D3kxtISIe3uj4J/X6B+q/4l5ffxoRQx2IP3jT+L9U/9EOxM+7fgDuT5ePNU5k689/6cr1T2xw/itscO76N/I+/7Wu/5bWXf+t1t/T5vrv5S3GuPDR++fbzWX1P3vphU9bLYufbe+oqNtwbSHikcJG9Scr9Sdt6j+xxRilv89X2s3lXf/yBxH7YuP6W5LN/5/owPhEtTLUuN0wxsI3I5+0i593/dnx39Wm/tb/P7U7/ue2GOO148c/X7fz6mp38/rTn4vJq/VesbnnjdGZmanhiGLy0vr9BzfPpXWf1nNk9e9/fPP3/0b1Z58JtebrkK0FFprbbPzmTTGfu3jhi3b5tNZ/eR7/k22O/9r6vy6sP/5vbzHGE1+9s7/d3Nr1b9ay+K21MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pBHRH0laXumnabkcsTsiHoxdafXs9MyT42dfP3Mym4sYiN50fKJaGYqIUmOcZOPhen91fPCm8dMRsSci3ivtrI/LY2erJ/MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBW7I6I/krQcEWlELJXStFzOOysAAACg4wZuHBbzygMAAADonoG8EwAAAAC6zvofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALtvz6OUrSUTUjuyst0yxOdeba2ZAt6V5JwDkpifvBIDcFPJOAMjNba7xXS7APSi5xXxf25kdHc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO1r397LV5KIqB3ZWW+ZYnOuN9fMgG5L804AyE3PZpOFu5cHcPd5i8P9yxofSG4x37d6n9qNMzu6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA209/vSVpOSKKzX3lcsT/ImIgepPxiWplKCL+HxHfl3p3ZOPhlUf35ZY3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnTU9Ozc5Wq1WprJOGs3Oyh6d1U7SeMVq2yUfnTvsFGNbpLFNO3l/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIfp2bnJ0Wq1MjWddyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3qZn5yZHq9XKVBc7edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/gkAAP//FUoKgg==") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)={0x2, 0xc64b, 0x0, 0x7}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x1af281) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100053fa838330b44d936afcb18800"/33, @ANYRES32=0x0, @ANYBLOB="01b804000ccc0300200012800b0001006772657461700000100002800400120006000e0000000000"], 0x40}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r0, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x44, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.433277119s ago: executing program 1 (id=4354): syz_usb_connect(0x0, 0x29c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000841b7420da040d39bb2d0102030109028a020100000000090408f80af179fa020f24020205000d000cf67df8e6988f0724014004000009050c0340000e040809050201000208"], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x4b55}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019340)=""/102392, 0x18ff8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000980)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0xd4, 0x5, 0xbd, 0x20, 0x8e}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x7, [{0x2, &(0x7f00000004c0)=@string={0x2}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x427}}, {0x69, &(0x7f0000000600)=@string={0x69, 0x3, "c2f03459a8d5364298fc9bdf8bc1276437bead11538f279ea60b46e81c2c72533fc3ee341377e06050dd6f024c8bc9709d18b0f0678b9cb36fd92e0305123d804656bdeb278ae707ad008a42c0a0a2d4afd3bf6405d50f35bd286f388bcc8a1b1dee0cbb516997"}}, {0xf5, &(0x7f0000000700)=@string={0xf5, 0x3, "d15cbf9d80522e0ed7ea798beb16a4d5529dd3e4fedeccc234517794ed6a3a8125572b9de61da1ec2b85443ab46b280cf99edd7ad68d8bf5247ad05b626d5ac9b835c7a148b363679e3fc47a5d62a717ba75ec5cde13d271994b56eba7ef739d737369b50d7a570bb23a3eb3f6d6ed8eae2d45bc46d7a790ec17b5d7c5dae69ad73640b92cd8926c9f508d6461cbd46b38281305787d188ecec86beb20b60934829fff7aa90fd1440fea5ecff8a087e4b4e47a5d7b44066f3f8f24caacb78dcdd8c88a0625a5fc1b0168b717c52db9e17451557b2908f394b55ff15621a3fe1c8a3a17bcbad6cd5a739493d1f69f13fc9854b5"}}, {0x46, &(0x7f0000000800)=@string={0x46, 0x3, "d7d0743e8f02c71ae0f0e98670dd93f063bdafce28198fcf11dc4b2365b2259bd679d78544119661650231684c70b6ffd9c42b05f20703ca0d63e63676f7163ec3bd16f6"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x447}}, {0x77, &(0x7f00000008c0)=@string={0x77, 0x3, "ef7ad05cff2104e019622de2f6c29b82b68a849d901a904ec4ca0f1e4d982150ed84bc384e5e4a40fa9dd7a9f7cedca8479d36d2c6f4dbff24ee2b99ea7a8a7dfc75b001cf99b50f3f43ac6c8252297371f76178f19c1f79e5bfc750b1ac84c301abfb3bbe2ae3a43e47fa805fcb867fd3909ab3ce"}}]}) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 3.367868935s ago: executing program 2 (id=4355): r0 = socket$unix(0x1, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000480)) unshare(0x72020a00) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 3.367642168s ago: executing program 0 (id=4356): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff8d, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2, 0x7000000}) 1.466157906s ago: executing program 0 (id=4357): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syslog(0x2, &(0x7f00000000c0)=""/255, 0xff) r2 = socket(0x2d, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") r3 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000088) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) connect$qrtr(r2, &(0x7f0000000440)={0x2d, 0x3, 0x1}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getnexthop={0x28, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) socket$phonet(0x23, 0x2, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x0, 0x4, {0xa, 0x4e23, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x6}}}, 0x3a) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) syslog(0x2, &(0x7f00000000c0)=""/255, 0xff) (async) socket(0x2d, 0x2, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") (async) open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000088) (async) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) (async) connect$qrtr(r2, &(0x7f0000000440)={0x2d, 0x3, 0x1}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getnexthop={0x28, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) (async) socket$phonet(0x23, 0x2, 0x1) (async) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x0, 0x4, {0xa, 0x4e23, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x6}}}, 0x3a) (async) 428.173528ms ago: executing program 2 (id=4358): mknod(0x0, 0x20, 0x1) 0s ago: executing program 2 (id=4359): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x0, 0x4, 0xd2, {0xd2, 0x8faf3a74cadd4298, "ae13d3f8a240bfe738bcd69f76433db724e8ba00821f2a3a744c415c724c51ff0a506afecf828a4b323e2e11963f068aeb0b72cb1a5c38dd80127fd29fde43987e435866410e39455e8bb7763985ae37270a2051278bc18695af2d939ff00f5cd962c9960d178e04d66d0b7df482295fb1503ececd0f8660177ab8703a1c85075ffced9bf7f4773022bd738c38502ccd6be3e4bd492e21714a89a4e1ab34439fbb13740d66718835f7e39641cb14bd50c0ee3f00694db8603eab636976d808e66538262ccae0d41479eeff1819c4936f"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0xf3, "d4445e94aca0e6e1448c79b84a978a3af4565e8a0344a2de4223ec7a7a0988fd41ddea562a3491adf5ae12b36eeb4b41c92d41a743bfcb7f6562fac1fdd8a975bb82f85cd681a59de0e18837a02d2f4842de9f46e980a5fce65bd5e2f87c2ac09506500e2044abdb27d14749219cf7e955494837c427127b8737410af9be869cf1558cca7d30b3b56389a421f7cc70ccea9b3786be2cc087cf03c21b30a111d4794b8157daacf76d3f2f2248834dfe39ad246fff9e95252e84cf75327703116841b371a410c1c971d1ab66eb61b10c9b6617e3ede438cc28490113b6a4eef7dfb55fbb09118540321ed37aa990c3d482500048"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000006c0), &(0x7f0000000700)={0x40, 0x5, 0x5, "d401709cc0"}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x13, 0x0, &(0x7f0000000340)="b4bf11a369d8625dd5ee1d8288a8599486dd47046c2ee101408b3257de22781e530b0de0953f0116a725b46025a6951587880f72ce91dd30ca9844d597c24d848870c30f32ced51d54fa6b80b80c84346553a2fd35d9367af322ea7eeba816e0f4aee1a10f0284", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x2a) kernel console output (not intermixed with test programs): 01] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1047.161862][T17401] Call Trace: [ 1047.161871][T17401] [ 1047.161882][T17401] dump_stack_lvl+0xe8/0x150 [ 1047.161920][T17401] should_fail_ex+0x467/0x600 [ 1047.161958][T17401] _copy_from_user+0x2d/0xb0 [ 1047.161984][T17401] ___sys_sendmsg+0x1c6/0x360 [ 1047.162020][T17401] ? __lock_acquire+0x683/0x2ce0 [ 1047.162059][T17401] ? __pfx____sys_sendmsg+0x10/0x10 [ 1047.162133][T17401] ? __fget_files+0x2a/0x420 [ 1047.162164][T17401] ? __fget_files+0x3a8/0x420 [ 1047.162203][T17401] __x64_sys_sendmsg+0x1b7/0x290 [ 1047.162241][T17401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1047.162306][T17401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.162332][T17401] do_syscall_64+0x174/0x580 [ 1047.162369][T17401] ? clear_bhb_loop+0x40/0x90 [ 1047.162399][T17401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.162424][T17401] RIP: 0033:0x7f22d5a1ce59 [ 1047.162446][T17401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.162467][T17401] RSP: 002b:00007f22d3c6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1047.162493][T17401] RAX: ffffffffffffffda RBX: 00007f22d5c95fa0 RCX: 00007f22d5a1ce59 [ 1047.162512][T17401] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 1047.162527][T17401] RBP: 00007f22d3c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.162543][T17401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.162557][T17401] R13: 00007f22d5c96038 R14: 00007f22d5c95fa0 R15: 00007fffb6b206a8 [ 1047.162593][T17401] [ 1047.314744][T14512] Bluetooth: hci0: command tx timeout [ 1047.712580][T17405] loop2: detected capacity change from 0 to 512 [ 1047.922343][T17405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.922453][T17405] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.989460][T17405] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.634275][ T5338] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1048.818754][ T5338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.818808][ T5338] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1048.818834][ T5338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.887850][ T5338] usb 3-1: config 0 descriptor?? [ 1049.122533][ T5338] usbhid 3-1:0.0: can't add hid device: -71 [ 1049.122674][ T5338] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1049.203772][ T5338] usb 3-1: USB disconnect, device number 75 [ 1049.325662][T14512] Bluetooth: hci0: command tx timeout [ 1049.663472][ T5338] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1049.787908][T16654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.835248][ T5338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.835296][ T5338] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1049.835314][ T5338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.894935][ T5338] usb 3-1: config 0 descriptor?? [ 1050.109022][ T38] kauditd_printk_skb: 95 callbacks suppressed [ 1050.109041][ T38] audit: type=1326 audit(1782184173.218:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.2.3697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1050.109094][ T38] audit: type=1326 audit(1782184173.218:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.2.3697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1050.109198][ T38] audit: type=1326 audit(1782184173.218:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.2.3697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1050.109248][ T38] audit: type=1326 audit(1782184173.218:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.2.3697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1050.109520][ T38] audit: type=1326 audit(1782184173.218:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.2.3697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1050.109577][ T38] audit: type=1326 audit(1782184173.218:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.2.3697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1050.109704][ T38] audit: type=1326 audit(1782184173.218:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.2.3697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1050.110435][ T38] audit: type=1326 audit(1782184173.218:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.2.3697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1050.110498][ T38] audit: type=1326 audit(1782184173.218:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.2.3697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1050.120024][ T38] audit: type=1326 audit(1782184173.218:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.2.3697" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc464f7d68e code=0x7ffc0000 [ 1051.040968][ T5338] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1051.234316][T17421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.235497][T17421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.260757][ T5338] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 1051.404951][T14512] Bluetooth: hci0: command tx timeout [ 1051.920827][ T5338] usb 3-1: USB disconnect, device number 76 [ 1051.920913][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1053.591323][ T4921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1053.679198][ T4921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1053.709505][ T4921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1053.759387][ T4921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1053.826602][ T4921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1054.763832][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.763929][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.533035][T17511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1056.058137][ T4921] Bluetooth: hci5: command tx timeout [ 1056.453686][T17509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3731'. [ 1057.733129][T17546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3741'. [ 1059.110867][ T4921] Bluetooth: hci5: command tx timeout [ 1059.821863][ T42] bridge_slave_1: left allmulticast mode [ 1059.821893][ T42] bridge_slave_1: left promiscuous mode [ 1059.877757][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.053531][ T42] bridge_slave_0: left allmulticast mode [ 1060.053583][ T42] bridge_slave_0: left promiscuous mode [ 1060.053895][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.256463][T14512] Bluetooth: hci5: command tx timeout [ 1061.270594][ T6621] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1061.591451][ T6621] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.591480][ T6621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1061.635345][ T6621] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1061.635380][ T6621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.635404][ T6621] usb 3-1: Product: syz [ 1061.635422][ T6621] usb 3-1: Manufacturer: syz [ 1061.635438][ T6621] usb 3-1: SerialNumber: syz [ 1061.960314][ T6621] usb 3-1: 0:1 : does not exist [ 1061.970011][ T6621] usb 3-1: BAAD SPEAKER p_chmask mismatch [ 1063.091129][ T6621] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1063.170691][ T6621] usb 3-1: USB disconnect, device number 77 [ 1063.324499][T14512] Bluetooth: hci5: command tx timeout [ 1063.339552][T14742] udevd[14742]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1063.725432][T17589] loop0: detected capacity change from 0 to 16 [ 1063.729240][T17589] erofs (device loop0): mounted with root inode @ nid 36. [ 1063.774548][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.819172][T17579] loop2: detected capacity change from 0 to 40427 [ 1063.820316][T17579] f2fs: Unknown parameter 'whint_mode' [ 1064.144123][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.255682][ T42] bond0 (unregistering): Released all slaves [ 1065.406318][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1069.601920][T17625] FAULT_INJECTION: forcing a failure. [ 1069.601920][T17625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.601958][T17625] CPU: 0 UID: 0 PID: 17625 Comm: syz.0.3762 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1069.601984][T17625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1069.601999][T17625] Call Trace: [ 1069.602007][T17625] [ 1069.602017][T17625] dump_stack_lvl+0xe8/0x150 [ 1069.602051][T17625] should_fail_ex+0x467/0x600 [ 1069.602085][T17625] _copy_to_user+0x31/0xb0 [ 1069.602109][T17625] rng_dev_read+0x3ed/0x7c0 [ 1069.602219][T17625] ? __pfx_rng_dev_read+0x10/0x10 [ 1069.602251][T17625] ? bpf_lsm_file_permission+0x9/0x20 [ 1069.602281][T17625] ? security_file_permission+0x75/0x260 [ 1069.602309][T17625] ? rw_verify_area+0x250/0x4d0 [ 1069.602340][T17625] vfs_readv+0x588/0x850 [ 1069.602363][T17625] ? __pfx_rng_dev_read+0x10/0x10 [ 1069.602394][T17625] ? __pfx_vfs_readv+0x10/0x10 [ 1069.602429][T17625] ? __fget_files+0x2a/0x420 [ 1069.602459][T17625] ? __fget_files+0x3a8/0x420 [ 1069.602482][T17625] ? __fget_files+0x2a/0x420 [ 1069.602515][T17625] __x64_sys_preadv+0x19f/0x2c0 [ 1069.602548][T17625] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1069.602588][T17625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.602612][T17625] do_syscall_64+0x174/0x580 [ 1069.602644][T17625] ? trace_irq_disable+0x3b/0x140 [ 1069.602673][T17625] ? clear_bhb_loop+0x40/0x90 [ 1069.602700][T17625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.602722][T17625] RIP: 0033:0x7f22d5a1ce59 [ 1069.602742][T17625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.602762][T17625] RSP: 002b:00007f22d3c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1069.602786][T17625] RAX: ffffffffffffffda RBX: 00007f22d5c95fa0 RCX: 00007f22d5a1ce59 [ 1069.602802][T17625] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1069.602815][T17625] RBP: 00007f22d3c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.602847][T17625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1069.602860][T17625] R13: 00007f22d5c96038 R14: 00007f22d5c95fa0 R15: 00007fffb6b206a8 [ 1069.602902][T17625] [ 1069.918726][T17335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.919112][T17335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.919576][T17335] bridge_slave_0: entered allmulticast mode [ 1069.948925][T17335] bridge_slave_0: entered promiscuous mode [ 1070.505100][T17636] FAULT_INJECTION: forcing a failure. [ 1070.505100][T17636] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.505139][T17636] CPU: 1 UID: 0 PID: 17636 Comm: syz.2.3765 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1070.505166][T17636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1070.505181][T17636] Call Trace: [ 1070.505191][T17636] [ 1070.505201][T17636] dump_stack_lvl+0xe8/0x150 [ 1070.505238][T17636] should_fail_ex+0x467/0x600 [ 1070.505277][T17636] should_failslab+0xa8/0x100 [ 1070.505310][T17636] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1070.505349][T17636] ? __alloc_skb+0x1d7/0x7a0 [ 1070.505378][T17636] ? __alloc_skb+0x1d7/0x7a0 [ 1070.505416][T17636] __alloc_skb+0x1d7/0x7a0 [ 1070.505453][T17636] netlink_sendmsg+0x5d4/0xb40 [ 1070.505499][T17636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.505540][T17636] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1070.505584][T17636] ? aa_sock_msg_perm+0x122/0x200 [ 1070.505620][T17636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.505656][T17636] sock_sendmsg_nosec+0x13a/0x180 [ 1070.505687][T17636] ____sys_sendmsg+0x565/0x870 [ 1070.505723][T17636] ? __might_fault+0xaf/0x130 [ 1070.505760][T17636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.505806][T17636] ? import_iovec+0x73/0xa0 [ 1070.505833][T17636] ___sys_sendmsg+0x2a5/0x360 [ 1070.505868][T17636] ? __lock_acquire+0x683/0x2ce0 [ 1070.505907][T17636] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.505979][T17636] ? __fget_files+0x2a/0x420 [ 1070.506006][T17636] ? __fget_files+0x3a8/0x420 [ 1070.506043][T17636] __x64_sys_sendmsg+0x1b7/0x290 [ 1070.506083][T17636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1070.506138][T17636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.506164][T17636] do_syscall_64+0x174/0x580 [ 1070.506197][T17636] ? trace_irq_disable+0x3b/0x140 [ 1070.506228][T17636] ? clear_bhb_loop+0x40/0x90 [ 1070.506257][T17636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.506280][T17636] RIP: 0033:0x7fc464fbce59 [ 1070.506302][T17636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.506332][T17636] RSP: 002b:00007fc463216028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.506357][T17636] RAX: ffffffffffffffda RBX: 00007fc465235fa0 RCX: 00007fc464fbce59 [ 1070.506374][T17636] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004 [ 1070.506388][T17636] RBP: 00007fc463216090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.506403][T17636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.506417][T17636] R13: 00007fc465236038 R14: 00007fc465235fa0 R15: 00007ffd6f4e5fd8 [ 1070.506452][T17636] [ 1070.826302][ T42] hsr_slave_0: left promiscuous mode [ 1070.865456][ T42] hsr_slave_1: left promiscuous mode [ 1070.868233][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.906119][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.521783][T17647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3768'. [ 1074.218940][T17655] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3772'. [ 1075.597257][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1075.654155][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1075.900072][T17335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.900462][T17335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.900788][T17335] bridge_slave_1: entered allmulticast mode [ 1075.924664][T17335] bridge_slave_1: entered promiscuous mode [ 1076.045235][T17656] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3772'. [ 1076.193704][T17658] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3772'. [ 1076.243499][T17682] loop2: detected capacity change from 0 to 2048 [ 1076.245824][T17682] udf: Unknown parameter 'ui' [ 1076.282757][T17682] netlink: 'syz.2.3782': attribute type 1 has an invalid length. [ 1076.282780][T17682] netlink: 'syz.2.3782': attribute type 4 has an invalid length. [ 1076.282796][T17682] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3782'. [ 1076.459694][T17335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.592377][T17335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.734633][T17693] loop2: detected capacity change from 0 to 512 [ 1076.855396][T17335] team0: Port device team_slave_0 added [ 1076.856899][T17693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1076.983482][T17335] team0: Port device team_slave_1 added [ 1077.144997][T17693] EXT4-fs (loop2): 1 truncate cleaned up [ 1077.167128][T17693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.201800][T17702] loop0: detected capacity change from 0 to 8 [ 1077.561732][T17709] netlink: 'syz.1.3789': attribute type 1 has an invalid length. [ 1077.561755][T17709] netlink: 'syz.1.3789': attribute type 4 has an invalid length. [ 1077.561770][T17709] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3789'. [ 1078.652547][T17718] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1078.707581][T17713] FAULT_INJECTION: forcing a failure. [ 1078.707581][T17713] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.707620][T17713] CPU: 0 UID: 0 PID: 17713 Comm: syz.0.3787 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.707647][T17713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1078.707662][T17713] Call Trace: [ 1078.707671][T17713] [ 1078.707690][T17713] dump_stack_lvl+0xe8/0x150 [ 1078.707727][T17713] should_fail_ex+0x467/0x600 [ 1078.707764][T17713] should_failslab+0xa8/0x100 [ 1078.707802][T17713] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1078.707831][T17713] ? squashfs_lookup+0x396/0xf00 [ 1078.707853][T17713] ? squashfs_lookup+0x396/0xf00 [ 1078.707892][T17713] squashfs_lookup+0x396/0xf00 [ 1078.707936][T17713] ? __pfx_squashfs_lookup+0x10/0x10 [ 1078.707963][T17713] ? rt_spin_unlock+0x157/0x200 [ 1078.708001][T17713] ? d_alloc+0x144/0x190 [ 1078.708034][T17713] lookup_one_qstr_excl+0x12d/0x360 [ 1078.708072][T17713] filename_create+0x20e/0x370 [ 1078.708112][T17713] ? __pfx_filename_create+0x10/0x10 [ 1078.708149][T17713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.708178][T17713] filename_mkdirat+0xd2/0x520 [ 1078.708220][T17713] ? __pfx_filename_mkdirat+0x10/0x10 [ 1078.708265][T17713] ? do_getname+0x151/0x250 [ 1078.708289][T17713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.708315][T17713] __se_sys_mkdir+0x34/0x150 [ 1078.708349][T17713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.708375][T17713] do_syscall_64+0x174/0x580 [ 1078.708407][T17713] ? trace_irq_disable+0x3b/0x140 [ 1078.708438][T17713] ? clear_bhb_loop+0x40/0x90 [ 1078.708468][T17713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.708492][T17713] RIP: 0033:0x7f22d5a1ce59 [ 1078.708515][T17713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.708536][T17713] RSP: 002b:00007f22d3c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1078.708573][T17713] RAX: ffffffffffffffda RBX: 00007f22d5c96090 RCX: 00007f22d5a1ce59 [ 1078.708590][T17713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1078.708604][T17713] RBP: 00007f22d3c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.708618][T17713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.708630][T17713] R13: 00007f22d5c96128 R14: 00007f22d5c96090 R15: 00007fffb6b206a8 [ 1078.708665][T17713] [ 1078.709868][T17713] SQUASHFS error: Failed to allocate squashfs_dir_index [ 1078.776119][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.990207][T17335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.990226][T17335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.990258][T17335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.180270][T17335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.180290][T17335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.180323][T17335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.452026][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1079.910013][T17335] hsr_slave_0: entered promiscuous mode [ 1079.925893][T17335] hsr_slave_1: entered promiscuous mode [ 1083.903762][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1084.692686][T17788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3811'. [ 1086.011201][T17490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.020824][T17490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.021228][T17490] bridge_slave_0: entered allmulticast mode [ 1086.052455][T17490] bridge_slave_0: entered promiscuous mode [ 1086.079630][T17490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.079953][T17490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.080253][T17490] bridge_slave_1: entered allmulticast mode [ 1086.114936][T17490] bridge_slave_1: entered promiscuous mode [ 1086.576430][ T32] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1087.433857][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 1087.436195][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1087.436229][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 1087.436258][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 1087.438809][ T32] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1087.438846][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.438862][ T32] usb 1-1: Product: syz [ 1087.438873][ T32] usb 1-1: Manufacturer: syz [ 1087.438885][ T32] usb 1-1: SerialNumber: syz [ 1087.513146][ T32] usb 1-1: config 0 descriptor?? [ 1087.526135][ T32] usb 1-1: no audio or video endpoints found [ 1087.794901][T17490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.882663][ T5338] usb 1-1: USB disconnect, device number 17 [ 1090.723860][T17490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.026145][T17853] loop2: detected capacity change from 0 to 64 [ 1091.319450][T17853] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2 [ 1092.047211][T17855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3829'. [ 1095.176343][T17490] team0: Port device team_slave_0 added [ 1095.212123][T17894] Bluetooth: MGMT ver 1.23 [ 1095.228001][T17490] team0: Port device team_slave_1 added [ 1095.761248][T17906] loop2: detected capacity change from 0 to 256 [ 1096.207071][T17892] loop0: detected capacity change from 0 to 32768 [ 1096.212902][T17892] ocfs2: Unknown parameter 'localfloc{s' [ 1097.064757][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3857'. [ 1098.558451][T17490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.558469][T17490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.558500][T17490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.760208][T17956] loop2: detected capacity change from 0 to 256 [ 1098.775253][T17956] exfat: Unknown parameter 'naÈæu(ö¢÷óase' [ 1100.446739][T14512] Bluetooth: hci2: command 0x0406 tx timeout [ 1100.705833][T17953] veth1_to_batadv: entered promiscuous mode [ 1100.730317][T17490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.730335][T17490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.730367][T17490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.131617][T17490] hsr_slave_0: entered promiscuous mode [ 1101.139909][T17490] hsr_slave_1: entered promiscuous mode [ 1101.141916][T17490] debugfs: 'hsr0' already exists in 'hsr' [ 1101.141942][T17490] Cannot create hsr debugfs directory [ 1102.066530][T17998] loop2: detected capacity change from 0 to 4096 [ 1102.478353][T18010] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1102.551934][T17998] NILFS error (device loop2): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 1102.694137][T17998] Remounting filesystem read-only [ 1102.818249][T14512] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1102.882193][T14512] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1102.892038][T14512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1102.892505][T17998] NILFS (loop2): mounting fs with errors [ 1102.922031][T14512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1102.931936][T14512] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1103.845130][ T42] bridge_slave_1: left allmulticast mode [ 1103.845183][ T42] bridge_slave_1: left promiscuous mode [ 1103.845474][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.861448][T18044] loop2: detected capacity change from 0 to 16 [ 1103.900911][T18044] erofs (device loop2): mounted with root inode @ nid 36. [ 1103.932315][T18045] loop0: detected capacity change from 0 to 1024 [ 1103.940374][T18045] EXT4-fs: Ignoring removed orlov option [ 1103.940410][T18045] ext4: Unknown parameter 'func' [ 1104.061814][ T42] bridge_slave_0: left allmulticast mode [ 1104.061851][ T42] bridge_slave_0: left promiscuous mode [ 1104.062142][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.285776][ T4921] Bluetooth: hci4: command tx timeout [ 1105.776267][ T4921] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1105.952119][T18075] netlink: 'syz.1.3886': attribute type 11 has an invalid length. [ 1105.982025][T18080] FAULT_INJECTION: forcing a failure. [ 1105.982025][T18080] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1105.982066][T18080] CPU: 0 UID: 0 PID: 18080 Comm: syz.2.3888 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1105.982093][T18080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1105.982105][T18080] Call Trace: [ 1105.982112][T18080] [ 1105.982121][T18080] dump_stack_lvl+0xe8/0x150 [ 1105.982156][T18080] should_fail_ex+0x467/0x600 [ 1105.982193][T18080] prepare_alloc_pages+0x223/0x690 [ 1105.982231][T18080] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1105.982266][T18080] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1105.982303][T18080] ? __pfx_policy_nodemask+0x10/0x10 [ 1105.982334][T18080] ? __lock_acquire+0x683/0x2ce0 [ 1105.982367][T18080] ? __lock_acquire+0x683/0x2ce0 [ 1105.982405][T18080] alloc_pages_mpol+0xce/0x280 [ 1105.982440][T18080] alloc_pages_noprof+0xd2/0x2f0 [ 1105.982474][T18080] pte_alloc_one+0x22/0x380 [ 1105.982532][T18080] __pte_alloc+0x25/0x1a0 [ 1105.982569][T18080] do_pte_missing+0x1bda/0x28f0 [ 1105.982617][T18080] handle_mm_fault+0xe0b/0x1520 [ 1105.982649][T18080] ? handle_mm_fault+0xe9/0x1520 [ 1105.982679][T18080] ? __pfx_handle_mm_fault+0x10/0x10 [ 1105.982702][T18080] ? lock_vma_under_rcu+0x45a/0x500 [ 1105.982731][T18080] ? lockdep_hardirqs_on+0x7a/0x110 [ 1105.982790][T18080] do_user_addr_fault+0xa4d/0x1340 [ 1105.982845][T18080] ? trace_page_fault_user+0x84/0x1e0 [ 1105.982879][T18080] exc_page_fault+0x6a/0xc0 [ 1105.982911][T18080] asm_exc_page_fault+0x26/0x30 [ 1105.982935][T18080] RIP: 0033:0x7fc464e74123 [ 1105.982956][T18080] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1105.982977][T18080] RSP: 002b:00007fc463215470 EFLAGS: 00010206 [ 1105.982998][T18080] RAX: 000000000000a001 RBX: 00007fc463215530 RCX: 00007fc45adf6000 [ 1105.983015][T18080] RDX: 00007fc4632156d0 RSI: 0000000000000000 RDI: 00007fc4632155d0 [ 1105.983031][T18080] RBP: 00000000000000ef R08: 0000000000000009 R09: 0000000000000191 [ 1105.983046][T18080] R10: 00000000000001a2 R11: 00007fc463215530 R12: 0000000000000001 [ 1105.983061][T18080] R13: 00007fc465072aa0 R14: 000000000000004e R15: 00007fc4632155d0 [ 1105.983101][T18080] [ 1106.226777][T18080] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1106.334988][T18080] loop2: detected capacity change from 0 to 2368 [ 1106.875764][T18084] FAULT_INJECTION: forcing a failure. [ 1106.875764][T18084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.875792][T18084] CPU: 1 UID: 0 PID: 18084 Comm: syz.2.3889 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1106.875811][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1106.875822][T18084] Call Trace: [ 1106.875828][T18084] [ 1106.875834][T18084] dump_stack_lvl+0xe8/0x150 [ 1106.875859][T18084] should_fail_ex+0x467/0x600 [ 1106.875885][T18084] _copy_to_user+0x31/0xb0 [ 1106.875903][T18084] simple_read_from_buffer+0xe1/0x170 [ 1106.875933][T18084] proc_fail_nth_read+0x1be/0x230 [ 1106.875954][T18084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1106.875975][T18084] ? rw_verify_area+0x250/0x4d0 [ 1106.875998][T18084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1106.876016][T18084] vfs_read+0x219/0xa90 [ 1106.876043][T18084] ? __pfx_vfs_read+0x10/0x10 [ 1106.876065][T18084] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1106.876089][T18084] ? lockdep_hardirqs_on+0x7a/0x110 [ 1106.876112][T18084] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1106.876134][T18084] ? mutex_lock_nested+0x152/0x1d0 [ 1106.876151][T18084] ? fdget_pos+0x252/0x320 [ 1106.876176][T18084] ksys_read+0x156/0x270 [ 1106.876201][T18084] ? __pfx_ksys_read+0x10/0x10 [ 1106.876227][T18084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.876245][T18084] do_syscall_64+0x174/0x580 [ 1106.876289][T18084] ? trace_irq_disable+0x3b/0x140 [ 1106.876313][T18084] ? clear_bhb_loop+0x40/0x90 [ 1106.876357][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.876381][T18084] RIP: 0033:0x7fc464f7d68e [ 1106.876403][T18084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1106.876428][T18084] RSP: 002b:00007fc463215fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1106.876455][T18084] RAX: ffffffffffffffda RBX: 00007fc4632166c0 RCX: 00007fc464f7d68e [ 1106.876468][T18084] RDX: 000000000000000f RSI: 00007fc4632160a0 RDI: 0000000000000004 [ 1106.876478][T18084] RBP: 00007fc463216090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.876489][T18084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.876499][T18084] R13: 00007fc465236038 R14: 00007fc465235fa0 R15: 00007ffd6f4e5fd8 [ 1106.876524][T18084] [ 1107.323396][ T4921] Bluetooth: hci4: command tx timeout [ 1108.400504][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.413569][ T4921] Bluetooth: hci4: command tx timeout [ 1109.896123][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.901347][T18093] loop2: detected capacity change from 0 to 4096 [ 1109.982971][T18096] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1110.011502][ T42] bond0 (unregistering): Released all slaves [ 1110.184887][T18043] bridge1: entered promiscuous mode [ 1110.184914][T18043] bridge1: entered allmulticast mode [ 1111.483295][ T4921] Bluetooth: hci4: command tx timeout [ 1112.455013][ T42] hsr_slave_0: left promiscuous mode [ 1112.496721][ T42] hsr_slave_1: left promiscuous mode [ 1112.497935][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.546187][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.104555][T18135] loop2: detected capacity change from 0 to 131072 [ 1114.117356][T18135] F2FS-fs (loop2): Invalid log sectors per block(570425347) log sectorsize(9) [ 1114.117389][T18135] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1114.128957][T18135] F2FS-fs (loop2): invalid crc value [ 1114.230844][T18135] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1114.254656][T18135] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 1114.254690][T18135] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 1114.984652][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1115.501036][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1115.861178][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1115.887023][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.887141][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.088408][T14512] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1116.146448][T14512] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1116.210073][T14512] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1116.237399][T14512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1116.242265][T14512] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1116.764894][ T5338] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1116.957012][ T5338] usb 3-1: Using ep0 maxpacket: 16 [ 1116.959476][ T5338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.959513][ T5338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.959555][ T5338] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1116.959582][ T5338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.067175][ T5338] usb 3-1: config 0 descriptor?? [ 1117.372329][T18171] loop2: detected capacity change from 0 to 256 [ 1117.688391][T18191] loop0: detected capacity change from 0 to 8 [ 1117.706936][T18191] SQUASHFS error: Failed to read block 0x70000034c: -5 [ 1117.707059][T18191] unable to read xattr id index table [ 1117.875226][T18198] FAULT_INJECTION: forcing a failure. [ 1117.875226][T18198] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1117.877665][T18192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.879341][T18192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.918294][T18198] CPU: 1 UID: 0 PID: 18198 Comm: syz.0.3919 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1117.918318][T18198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.918330][T18198] Call Trace: [ 1117.918337][T18198] [ 1117.918344][T18198] dump_stack_lvl+0xe8/0x150 [ 1117.918376][T18198] should_fail_ex+0x467/0x600 [ 1117.918406][T18198] prepare_alloc_pages+0x223/0x690 [ 1117.918434][T18198] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1117.918461][T18198] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1117.918489][T18198] ? __pfx_policy_nodemask+0x10/0x10 [ 1117.918515][T18198] ? __lock_acquire+0x683/0x2ce0 [ 1117.918548][T18198] alloc_pages_mpol+0xce/0x280 [ 1117.918586][T18198] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1117.918614][T18198] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1117.918643][T18198] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1117.918670][T18198] ? __pte_offset_map+0x29/0x200 [ 1117.918769][T18198] do_pte_missing+0x835/0x28f0 [ 1117.918800][T18198] ? handle_mm_fault+0xe9/0x1520 [ 1117.918824][T18198] handle_mm_fault+0xe0b/0x1520 [ 1117.918849][T18198] ? handle_mm_fault+0xe9/0x1520 [ 1117.918871][T18198] ? __pfx_handle_mm_fault+0x10/0x10 [ 1117.918890][T18198] ? lock_vma_under_rcu+0x45a/0x500 [ 1117.918938][T18198] do_user_addr_fault+0xa4d/0x1340 [ 1117.918976][T18198] ? trace_page_fault_user+0x84/0x1e0 [ 1117.919004][T18198] exc_page_fault+0x6a/0xc0 [ 1117.919035][T18198] asm_exc_page_fault+0x26/0x30 [ 1117.919058][T18198] RIP: 0033:0x7f22d58d4123 [ 1117.919079][T18198] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 1117.919096][T18198] RSP: 002b:00007f22d3c6d470 EFLAGS: 00010206 [ 1117.919115][T18198] RAX: 0000000000023000 RBX: 00007f22d3c6d530 RCX: 00007f22cb84e000 [ 1117.919130][T18198] RDX: 00007f22d3c6d6d0 RSI: 0000000000000001 RDI: 00007f22d3c6d5d0 [ 1117.919144][T18198] RBP: 00000000000000dc R08: 0000000000000008 R09: 00000000000000c1 [ 1117.919157][T18198] R10: 00000000000000d6 R11: 00007f22d3c6d530 R12: 0000000000000001 [ 1117.919171][T18198] R13: 00007f22d5ad2aa0 R14: 000000000000002e R15: 00007f22d3c6d5d0 [ 1117.919204][T18198] [ 1117.919222][T18198] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1118.268320][ T5338] apple 0003:05AC:024B.0006: unknown global tag 0xe [ 1118.268346][ T5338] apple 0003:05AC:024B.0006: item 0 1 1 14 parsing failed [ 1118.269106][ T5338] apple 0003:05AC:024B.0006: parse failed [ 1118.269216][ T5338] apple 0003:05AC:024B.0006: probe with driver apple failed with error -22 [ 1118.336823][T18198] loop0: detected capacity change from 0 to 2048 [ 1118.502906][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'. [ 1118.503156][T18192] netlink: 'syz.2.3911': attribute type 2 has an invalid length. [ 1118.533993][ T4921] Bluetooth: hci0: command tx timeout [ 1118.703914][ T5338] usb 3-1: USB disconnect, device number 78 [ 1120.603359][ T4921] Bluetooth: hci0: command tx timeout [ 1120.778479][T18238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1121.049269][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1121.187478][ T38] kauditd_printk_skb: 199 callbacks suppressed [ 1121.187499][ T38] audit: type=1326 audit(1782184244.298:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.2.3931" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1121.187665][ T38] audit: type=1326 audit(1782184244.298:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.2.3931" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1121.188074][ T38] audit: type=1326 audit(1782184244.298:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.2.3931" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1121.188282][ T38] audit: type=1326 audit(1782184244.298:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.2.3931" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1121.188485][ T38] audit: type=1326 audit(1782184244.298:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.2.3931" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1121.188680][ T38] audit: type=1326 audit(1782184244.298:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.2.3931" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc464fbcbc2 code=0x7ffc0000 [ 1121.190982][ T38] audit: type=1326 audit(1782184244.298:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.2.3931" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1121.191035][ T38] audit: type=1326 audit(1782184244.298:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.2.3931" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc464fbcc57 code=0x7ffc0000 [ 1121.191087][ T38] audit: type=1326 audit(1782184244.298:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.2.3931" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1121.191135][ T38] audit: type=1326 audit(1782184244.298:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18249 comm="syz.2.3931" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc464fbce59 code=0x7ffc0000 [ 1121.820002][ T42] bridge_slave_1: left allmulticast mode [ 1121.820040][ T42] bridge_slave_1: left promiscuous mode [ 1121.820357][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.983042][ T42] bridge_slave_0: left allmulticast mode [ 1121.983081][ T42] bridge_slave_0: left promiscuous mode [ 1121.984117][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.253403][ T5338] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1122.408817][ T5338] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1122.408849][ T5338] usb 3-1: config 0 has no interface number 0 [ 1122.409002][ T5338] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.409036][ T5338] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.409063][ T5338] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1122.417387][ T5338] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1122.417471][ T5338] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1122.417542][ T5338] usb 3-1: Product: syz [ 1122.571915][ T5338] usb 3-1: config 0 descriptor?? [ 1122.683344][ T4921] Bluetooth: hci0: command tx timeout [ 1123.100883][T18284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.102099][T18284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.508888][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.625922][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.706620][ T42] bond0 (unregistering): Released all slaves [ 1123.914882][T18263] IPVS: Error connecting to the multicast addr [ 1124.763375][ T4921] Bluetooth: hci0: command tx timeout [ 1124.763446][ T42] hsr_slave_0: left promiscuous mode [ 1124.794839][ T5338] usbhid 3-1:0.1: can't add hid device: -71 [ 1124.794964][ T5338] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1124.839163][ T42] hsr_slave_1: left promiscuous mode [ 1124.853498][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.856456][ T5338] usb 3-1: USB disconnect, device number 79 [ 1124.891510][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.599021][T18325] ceph: No mds server is up or the cluster is laggy [ 1125.685793][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'. [ 1126.019674][T18325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3962'. [ 1126.084963][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1126.210071][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1126.436681][T18353] FAULT_INJECTION: forcing a failure. [ 1126.436681][T18353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.436720][T18353] CPU: 0 UID: 0 PID: 18353 Comm: syz.0.3972 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1126.436747][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1126.436763][T18353] Call Trace: [ 1126.436773][T18353] [ 1126.436782][T18353] dump_stack_lvl+0xe8/0x150 [ 1126.436819][T18353] should_fail_ex+0x467/0x600 [ 1126.436855][T18353] _copy_to_user+0x31/0xb0 [ 1126.436882][T18353] simple_read_from_buffer+0xe1/0x170 [ 1126.436917][T18353] proc_fail_nth_read+0x1be/0x230 [ 1126.436949][T18353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1126.436980][T18353] ? rw_verify_area+0x250/0x4d0 [ 1126.437013][T18353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1126.437040][T18353] vfs_read+0x219/0xa90 [ 1126.437080][T18353] ? __pfx_vfs_read+0x10/0x10 [ 1126.437114][T18353] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1126.437148][T18353] ? lockdep_hardirqs_on+0x7a/0x110 [ 1126.437181][T18353] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1126.437215][T18353] ? mutex_lock_nested+0x152/0x1d0 [ 1126.437239][T18353] ? fdget_pos+0x252/0x320 [ 1126.437276][T18353] ksys_read+0x156/0x270 [ 1126.437311][T18353] ? __pfx_ksys_read+0x10/0x10 [ 1126.437355][T18353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.437388][T18353] do_syscall_64+0x174/0x580 [ 1126.437421][T18353] ? trace_irq_disable+0x3b/0x140 [ 1126.437465][T18353] ? clear_bhb_loop+0x40/0x90 [ 1126.437494][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.437517][T18353] RIP: 0033:0x7f22d59dd68e [ 1126.437538][T18353] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1126.437558][T18353] RSP: 002b:00007f22d3c6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1126.437582][T18353] RAX: ffffffffffffffda RBX: 00007f22d3c6e6c0 RCX: 00007f22d59dd68e [ 1126.437599][T18353] RDX: 000000000000000f RSI: 00007f22d3c6e0a0 RDI: 0000000000000004 [ 1126.437613][T18353] RBP: 00007f22d3c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.437627][T18353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.437641][T18353] R13: 00007f22d5c96038 R14: 00007f22d5c95fa0 R15: 00007fffb6b206a8 [ 1126.437677][T18353] [ 1127.195487][T18368] loop2: detected capacity change from 0 to 164 [ 1127.198916][T18368] iso9660: Unknown parameter 'seqsio' [ 1127.270178][T18368] loop2: detected capacity change from 0 to 512 [ 1127.286049][T18368] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1128.338144][T18368] EXT4-fs (loop2): 1 truncate cleaned up [ 1128.341110][T18368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1129.066779][ T38] kauditd_printk_skb: 89 callbacks suppressed [ 1129.066800][ T38] audit: type=1800 audit(1782184252.178:3000): pid=18378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3978" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1129.578311][T18407] loop0: detected capacity change from 0 to 256 [ 1129.581602][T18407] vfat: Unknown parameter 's•sZ3åhortname' [ 1130.266508][T18368] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1130.473821][ T4921] Bluetooth: hci0: command 0x080f tx timeout [ 1130.668134][T18160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.668453][T18160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.668791][T18160] bridge_slave_0: entered allmulticast mode [ 1130.695692][T18160] bridge_slave_0: entered promiscuous mode [ 1130.968878][T18160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.969319][T18160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.969659][T18160] bridge_slave_1: entered allmulticast mode [ 1131.017142][T18160] bridge_slave_1: entered promiscuous mode [ 1131.126656][T18435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3988'. [ 1131.914381][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.539261][ T42] bridge_slave_1: left allmulticast mode [ 1132.539298][ T42] bridge_slave_1: left promiscuous mode [ 1132.539588][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.909745][T18458] loop2: detected capacity change from 0 to 32768 [ 1132.946583][T18458] jfs_mount: dbMount failed w/rc = -22 [ 1132.948949][T18458] Mount JFS Failure: -22 [ 1133.059698][ T42] bridge_slave_0: left allmulticast mode [ 1133.059734][ T42] bridge_slave_0: left promiscuous mode [ 1133.060013][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.190239][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.300124][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.367734][ T42] bond0 (unregistering): Released all slaves [ 1136.505108][T18160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.505814][T18009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.506203][T18009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.506531][T18009] bridge_slave_0: entered allmulticast mode [ 1136.558174][T18009] bridge_slave_0: entered promiscuous mode [ 1136.727377][T18160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.748442][T18009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.748829][T18009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.749148][T18009] bridge_slave_1: entered allmulticast mode [ 1136.780314][T18009] bridge_slave_1: entered promiscuous mode [ 1137.305015][T18160] team0: Port device team_slave_0 added [ 1137.534511][T18511] loop2: detected capacity change from 0 to 40427 [ 1137.535662][T18511] f2fs: Unknown parameter 'whint_mode' [ 1138.790781][ T5338] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1139.035290][ T42] hsr_slave_0: left promiscuous mode [ 1139.163455][ T5338] usb 1-1: device descriptor read/64, error -71 [ 1139.180427][ T42] hsr_slave_1: left promiscuous mode [ 1139.186383][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.217044][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.417040][ T5338] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1139.543507][ T5338] usb 1-1: device descriptor read/64, error -71 [ 1139.657413][ T5338] usb usb1-port1: attempt power cycle [ 1139.790034][T18537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4025'. [ 1139.790057][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4025'. [ 1139.813754][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1139.856142][ T38] audit: type=1326 audit(1782184262.968:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.1.4026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1139.856352][ T38] audit: type=1326 audit(1782184262.968:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.1.4026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1139.856576][ T38] audit: type=1326 audit(1782184262.968:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.1.4026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1139.856960][ T38] audit: type=1326 audit(1782184262.968:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.1.4026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1139.857147][ T38] audit: type=1326 audit(1782184262.968:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.1.4026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1139.857364][ T38] audit: type=1326 audit(1782184262.968:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.1.4026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1139.857573][ T38] audit: type=1326 audit(1782184262.968:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.1.4026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1139.857762][ T38] audit: type=1326 audit(1782184262.968:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.1.4026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1139.858153][ T38] audit: type=1326 audit(1782184262.968:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.1.4026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1139.858450][ T38] audit: type=1326 audit(1782184262.968:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.1.4026" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1139.864404][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1140.043587][ T5338] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1140.066821][ T5338] usb 1-1: device descriptor read/8, error -71 [ 1140.455869][ T5338] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1140.668653][ T5338] usb 1-1: device not accepting address 21, error -71 [ 1140.945573][ T5338] usb usb1-port1: unable to enumerate USB device [ 1141.124790][T18544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4027'. [ 1141.173941][T18009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.255562][T18160] team0: Port device team_slave_1 added [ 1141.396854][T18009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.758383][T18160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.758401][T18160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.758433][T18160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.765700][T18009] team0: Port device team_slave_0 added [ 1141.769657][T18160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.769673][T18160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.769705][T18160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.838097][T18009] team0: Port device team_slave_1 added [ 1142.364416][T18009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.364434][T18009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.364463][T18009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.508805][T18160] hsr_slave_0: entered promiscuous mode [ 1142.511039][T18160] hsr_slave_1: entered promiscuous mode [ 1142.596930][T18009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.596951][T18009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.596985][T18009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.912448][T18581] loop0: detected capacity change from 0 to 512 [ 1142.980743][T18581] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (43205!=18645) [ 1143.013839][T18581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1143.140696][T18570] loop2: detected capacity change from 0 to 40427 [ 1143.142133][T18570] f2fs: Unknown parameter 'whint_mode' [ 1143.226104][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.595617][T18009] hsr_slave_0: entered promiscuous mode [ 1143.600113][T18009] hsr_slave_1: entered promiscuous mode [ 1143.602606][T18009] debugfs: 'hsr0' already exists in 'hsr' [ 1143.602633][T18009] Cannot create hsr debugfs directory [ 1145.713117][T18605] FAULT_INJECTION: forcing a failure. [ 1145.713117][T18605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.713152][T18605] CPU: 1 UID: 0 PID: 18605 Comm: syz.2.4050 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1145.713176][T18605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1145.713188][T18605] Call Trace: [ 1145.713200][T18605] [ 1145.713209][T18605] dump_stack_lvl+0xe8/0x150 [ 1145.713241][T18605] should_fail_ex+0x467/0x600 [ 1145.713298][T18605] _copy_to_user+0x31/0xb0 [ 1145.713336][T18605] simple_read_from_buffer+0xe1/0x170 [ 1145.713367][T18605] proc_fail_nth_read+0x1be/0x230 [ 1145.713395][T18605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1145.713423][T18605] ? rw_verify_area+0x250/0x4d0 [ 1145.713454][T18605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1145.713478][T18605] vfs_read+0x219/0xa90 [ 1145.713512][T18605] ? __pfx_vfs_read+0x10/0x10 [ 1145.713542][T18605] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1145.713573][T18605] ? lockdep_hardirqs_on+0x7a/0x110 [ 1145.713603][T18605] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1145.713632][T18605] ? mutex_lock_nested+0x152/0x1d0 [ 1145.713654][T18605] ? fdget_pos+0x252/0x320 [ 1145.713687][T18605] ksys_read+0x156/0x270 [ 1145.713718][T18605] ? __pfx_ksys_read+0x10/0x10 [ 1145.713754][T18605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.713778][T18605] do_syscall_64+0x174/0x580 [ 1145.713809][T18605] ? trace_irq_disable+0x3b/0x140 [ 1145.713838][T18605] ? clear_bhb_loop+0x40/0x90 [ 1145.713865][T18605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.713894][T18605] RIP: 0033:0x7fc464f7d68e [ 1145.713913][T18605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1145.713931][T18605] RSP: 002b:00007fc463215fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1145.713954][T18605] RAX: ffffffffffffffda RBX: 00007fc4632166c0 RCX: 00007fc464f7d68e [ 1145.713969][T18605] RDX: 000000000000000f RSI: 00007fc4632160a0 RDI: 0000000000000003 [ 1145.713982][T18605] RBP: 00007fc463216090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.713995][T18605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1145.714008][T18605] R13: 00007fc465236038 R14: 00007fc465235fa0 R15: 00007ffd6f4e5fd8 [ 1145.714040][T18605] [ 1147.773895][T18636] loop2: detected capacity change from 0 to 256 [ 1147.777576][T18636] vfat: Deprecated parameter 'posix' [ 1147.777593][T18636] FAT-fs: "posix" option is obsolete, not supported now [ 1148.172856][T18160] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1148.287064][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1148.310953][T18160] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1148.431489][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1148.474865][T18160] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1148.596465][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1148.604672][T18160] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1148.737988][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1150.957406][T18009] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1151.444128][T18679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4070'. [ 1152.414368][T18009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1152.427505][T18009] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1152.618564][T18009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1152.635346][T18009] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1152.861102][T18688] loop2: detected capacity change from 0 to 4096 [ 1152.937640][T18009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1152.980197][T18009] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1153.041593][T18009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1153.764206][T18160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.901134][T18160] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.996969][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.997142][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.101094][T15603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.101274][T15603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.254029][T18009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.480841][T18009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.527753][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.528000][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.674197][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.674397][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.999608][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 1155.999636][ T38] audit: type=1326 audit(1782184279.108:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.1.4101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1155.999692][ T38] audit: type=1326 audit(1782184279.108:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.1.4101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1155.999743][ T38] audit: type=1326 audit(1782184279.108:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.1.4101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1155.999792][ T38] audit: type=1326 audit(1782184279.108:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.1.4101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1155.999844][ T38] audit: type=1326 audit(1782184279.108:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.1.4101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1156.001027][ T38] audit: type=1326 audit(1782184279.108:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.1.4101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1156.001210][ T38] audit: type=1326 audit(1782184279.108:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.1.4101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1156.008663][ T38] audit: type=1326 audit(1782184279.108:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.1.4101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1156.008737][ T38] audit: type=1326 audit(1782184279.108:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.1.4101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x7ffc0000 [ 1156.018896][ T38] audit: type=1326 audit(1782184279.128:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.1.4101" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f746838d68e code=0x7ffc0000 [ 1156.546543][T18762] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1156.769321][T18759] loop2: detected capacity change from 0 to 32768 [ 1156.800199][T18759] jfs_mount: dbMount failed w/rc = -22 [ 1156.800713][T18759] Mount JFS Failure: -22 [ 1157.337947][T18160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.169068][T18009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.875386][T18160] veth0_vlan: entered promiscuous mode [ 1159.945238][T18160] veth1_vlan: entered promiscuous mode [ 1160.331632][T18160] veth0_macvtap: entered promiscuous mode [ 1160.400562][T18160] veth1_macvtap: entered promiscuous mode [ 1160.461558][T18789] loop2: detected capacity change from 0 to 40427 [ 1160.468885][T18789] f2fs: Unknown parameter 'whint_mode' [ 1162.445312][T18160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.527011][T18160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.621322][ T1041] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.652156][ T1041] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.658795][T15603] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.686085][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.099450][T14512] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1165.159673][T14512] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1165.178212][T14512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1165.196875][T14512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1165.204316][T14512] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1165.872217][T18856] loop2: detected capacity change from 0 to 16 [ 1165.879728][T18856] erofs (device loop2): mounted with root inode @ nid 36. [ 1165.889677][T18856] syz.2.4131: attempt to access beyond end of device [ 1165.889677][T18856] loop2: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 1165.889925][T18856] syz.2.4131: attempt to access beyond end of device [ 1165.889925][T18856] loop2: rw=0, sector=301990400, nr_sectors = 2 limit=16 [ 1165.891059][T18856] erofs (device loop2): read error -5 @ 0 of nid 36 [ 1165.895948][T18856] syz.2.4131: attempt to access beyond end of device [ 1165.895948][T18856] loop2: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 1165.896173][T18856] syz.2.4131: attempt to access beyond end of device [ 1165.896173][T18856] loop2: rw=0, sector=301990400, nr_sectors = 2 limit=16 [ 1165.898628][T18856] erofs (device loop2): read error -5 @ 0 of nid 36 [ 1166.059143][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.059166][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.359435][ T4921] Bluetooth: hci4: command tx timeout [ 1168.710668][ T5853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.710692][ T5853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.205856][T18879] loop2: detected capacity change from 0 to 256 [ 1169.269416][T18879] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1170.001569][T18890] FAULT_INJECTION: forcing a failure. [ 1170.001569][T18890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.001607][T18890] CPU: 1 UID: 0 PID: 18890 Comm: syz.0.4144 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1170.001634][T18890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.001647][T18890] Call Trace: [ 1170.001657][T18890] [ 1170.001667][T18890] dump_stack_lvl+0xe8/0x150 [ 1170.001703][T18890] should_fail_ex+0x467/0x600 [ 1170.001740][T18890] _copy_from_user+0x2d/0xb0 [ 1170.001765][T18890] memdup_user+0x5e/0xd0 [ 1170.001800][T18890] strndup_user+0x68/0xd0 [ 1170.001834][T18890] __keyctl_dh_compute+0x4bc/0xd10 [ 1170.001878][T18890] ? __lock_acquire+0x683/0x2ce0 [ 1170.001926][T18890] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1170.001977][T18890] ? __might_fault+0xaf/0x130 [ 1170.002026][T18890] keyctl_dh_compute+0x124/0x180 [ 1170.002052][T18890] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1170.002094][T18890] ? do_raw_spin_lock+0x12b/0x2f0 [ 1170.002133][T18890] __se_sys_keyctl+0x44c/0x9d0 [ 1170.002166][T18890] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1170.002195][T18890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1170.002229][T18890] ? rt_mutex_slowunlock+0x219/0x460 [ 1170.002255][T18890] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1170.002289][T18890] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1170.002324][T18890] ? fput+0xa0/0xd0 [ 1170.002350][T18890] ? ksys_write+0x248/0x270 [ 1170.002384][T18890] ? __pfx_ksys_write+0x10/0x10 [ 1170.002422][T18890] ? __x64_sys_keyctl+0x20/0xc0 [ 1170.002451][T18890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.002477][T18890] do_syscall_64+0x174/0x580 [ 1170.002511][T18890] ? clear_bhb_loop+0x40/0x90 [ 1170.002540][T18890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.002564][T18890] RIP: 0033:0x7f22d5a1ce59 [ 1170.002584][T18890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.002605][T18890] RSP: 002b:00007f22d3c2c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1170.002629][T18890] RAX: ffffffffffffffda RBX: 00007f22d5c96180 RCX: 00007f22d5a1ce59 [ 1170.002646][T18890] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 1170.002660][T18890] RBP: 00007f22d3c2c090 R08: 0000200000000180 R09: 0000000000000000 [ 1170.002675][T18890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.002689][T18890] R13: 00007f22d5c96218 R14: 00007f22d5c96180 R15: 00007fffb6b206a8 [ 1170.002723][T18890] [ 1170.385791][ T4921] Bluetooth: hci4: command tx timeout [ 1170.791374][T18891] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 1171.065642][ T38] kauditd_printk_skb: 54 callbacks suppressed [ 1171.065661][ T38] audit: type=1800 audit(1782184293.968:3085): pid=18891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4138" name="file0" dev="loop2" ino=1048643 res=0 errno=0 [ 1172.446602][ T4921] Bluetooth: hci4: command tx timeout [ 1174.584717][T18916] loop2: detected capacity change from 0 to 32768 [ 1174.646633][T18916] jfs_mount: dbMount failed w/rc = -22 [ 1174.649243][T18916] Mount JFS Failure: -22 [ 1174.683426][ T4921] Bluetooth: hci4: command tx timeout [ 1176.168138][ T38] audit: type=1800 audit(1782184299.278:3086): pid=18932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4158" name="file1" dev="tmpfs" ino=3858 res=0 errno=0 [ 1176.662526][T18842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1176.735215][T18842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1176.756440][T18842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1176.783420][T18842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1176.790074][T18842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1177.364402][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.364519][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.438131][T18952] FAULT_INJECTION: forcing a failure. [ 1177.438131][T18952] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.438166][T18952] CPU: 1 UID: 0 PID: 18952 Comm: syz.0.4165 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1177.438191][T18952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1177.438204][T18952] Call Trace: [ 1177.438212][T18952] [ 1177.438221][T18952] dump_stack_lvl+0xe8/0x150 [ 1177.438264][T18952] should_fail_ex+0x467/0x600 [ 1177.438295][T18952] should_failslab+0xa8/0x100 [ 1177.438329][T18952] kmem_cache_alloc_noprof+0xa4/0x650 [ 1177.438351][T18952] ? alloc_empty_file+0x5b/0x1d0 [ 1177.438371][T18952] ? alloc_empty_file+0x5b/0x1d0 [ 1177.438392][T18952] ? security_inode_alloc+0x39/0x310 [ 1177.438426][T18952] alloc_empty_file+0x5b/0x1d0 [ 1177.438449][T18952] alloc_file_pseudo+0x115/0x1e0 [ 1177.438473][T18952] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1177.438503][T18952] do_accept+0x4a4/0x930 [ 1177.438536][T18952] ? __pfx_do_accept+0x10/0x10 [ 1177.438580][T18952] __sys_accept4+0x139/0x230 [ 1177.438608][T18952] ? __pfx___sys_accept4+0x10/0x10 [ 1177.438633][T18952] ? __pfx_ksys_write+0x10/0x10 [ 1177.438667][T18952] __x64_sys_accept4+0x9a/0xb0 [ 1177.438692][T18952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.438714][T18952] do_syscall_64+0x174/0x580 [ 1177.438742][T18952] ? trace_irq_disable+0x3b/0x140 [ 1177.438788][T18952] ? clear_bhb_loop+0x40/0x90 [ 1177.438815][T18952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.438843][T18952] RIP: 0033:0x7f22d5a1ce59 [ 1177.438863][T18952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.438882][T18952] RSP: 002b:00007f22d3c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1177.438905][T18952] RAX: ffffffffffffffda RBX: 00007f22d5c95fa0 RCX: 00007f22d5a1ce59 [ 1177.438921][T18952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1177.438934][T18952] RBP: 00007f22d3c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.438946][T18952] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 1177.438959][T18952] R13: 00007f22d5c96038 R14: 00007f22d5c95fa0 R15: 00007fffb6b206a8 [ 1177.438990][T18952] [ 1178.111280][T18958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4168'. [ 1178.507550][T18972] loop2: detected capacity change from 0 to 256 [ 1178.719192][T18972] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1178.804731][T18975] FAULT_INJECTION: forcing a failure. [ 1178.804731][T18975] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1178.804772][T18975] CPU: 1 UID: 0 PID: 18975 Comm: syz.0.4171 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1178.804798][T18975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1178.804813][T18975] Call Trace: [ 1178.804822][T18975] [ 1178.804832][T18975] dump_stack_lvl+0xe8/0x150 [ 1178.804871][T18975] should_fail_ex+0x467/0x600 [ 1178.804908][T18975] prepare_alloc_pages+0x223/0x690 [ 1178.804945][T18975] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1178.804980][T18975] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1178.805010][T18975] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 1178.805045][T18975] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1178.805080][T18975] ? __pfx_policy_nodemask+0x10/0x10 [ 1178.805113][T18975] ? lockdep_hardirqs_on+0x7a/0x110 [ 1178.805152][T18975] __alloc_pages_noprof+0x10/0x100 [ 1178.805184][T18975] alloc_pages_bulk_noprof+0x67e/0x890 [ 1178.805215][T18975] ? alloc_pages_mpol+0x115/0x280 [ 1178.805250][T18975] ? alloc_pages_noprof+0x161/0x2f0 [ 1178.805287][T18975] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1178.805313][T18975] ? rt_spin_unlock+0x163/0x200 [ 1178.805343][T18975] alloc_vmap_area+0xd1a/0x1420 [ 1178.805383][T18975] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1178.805408][T18975] ? __kmalloc_cache_node_noprof+0x47b/0x6a0 [ 1178.805439][T18975] ? __get_vm_area_node+0x136/0x300 [ 1178.805461][T18975] ? __get_vm_area_node+0x136/0x300 [ 1178.805490][T18975] __get_vm_area_node+0x1f2/0x300 [ 1178.805521][T18975] __vmalloc_node_range_noprof+0x358/0x1730 [ 1178.805549][T18975] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1178.805588][T18975] ? __lock_acquire+0x683/0x2ce0 [ 1178.805645][T18975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1178.805673][T18975] ? aa_file_perm+0x18b/0x1600 [ 1178.805727][T18975] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1178.805760][T18975] __vmalloc_noprof+0xd2/0x120 [ 1178.805785][T18975] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1178.805822][T18975] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1178.805856][T18975] ? bpf_prog_alloc+0x2a/0x1a0 [ 1178.805892][T18975] bpf_prog_alloc+0x3c/0x1a0 [ 1178.805929][T18975] bpf_prog_load+0x7f8/0x1c00 [ 1178.805975][T18975] ? __pfx_bpf_prog_load+0x10/0x10 [ 1178.806034][T18975] __sys_bpf+0xd0d/0xd90 [ 1178.806075][T18975] ? __pfx___sys_bpf+0x10/0x10 [ 1178.806109][T18975] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1178.806145][T18975] ? rt_mutex_slowunlock+0x219/0x460 [ 1178.806189][T18975] ? ksys_write+0x248/0x270 [ 1178.806223][T18975] ? __pfx_ksys_write+0x10/0x10 [ 1178.806259][T18975] __x64_sys_bpf+0xba/0xd0 [ 1178.806288][T18975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.806314][T18975] do_syscall_64+0x174/0x580 [ 1178.806344][T18975] ? trace_irq_disable+0x3b/0x140 [ 1178.806375][T18975] ? clear_bhb_loop+0x40/0x90 [ 1178.806404][T18975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.806427][T18975] RIP: 0033:0x7f22d5a1ce59 [ 1178.806448][T18975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.806468][T18975] RSP: 002b:00007f22d3c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1178.806493][T18975] RAX: ffffffffffffffda RBX: 00007f22d5c96090 RCX: 00007f22d5a1ce59 [ 1178.806510][T18975] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1178.806525][T18975] RBP: 00007f22d3c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.806540][T18975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.806554][T18975] R13: 00007f22d5c96128 R14: 00007f22d5c96090 R15: 00007fffb6b206a8 [ 1178.806588][T18975] [ 1178.806947][T18975] syz.0.4171: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1178.807361][T18975] CPU: 1 UID: 0 PID: 18975 Comm: syz.0.4171 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1178.807388][T18975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1178.807402][T18975] Call Trace: [ 1178.807410][T18975] [ 1178.807420][T18975] dump_stack_lvl+0xe8/0x150 [ 1178.807454][T18975] warn_alloc+0x24c/0x270 [ 1178.807482][T18975] ? kasan_quarantine_put+0xbb/0x1f0 [ 1178.807509][T18975] ? __pfx_warn_alloc+0x10/0x10 [ 1178.807538][T18975] ? __get_vm_area_node+0x20b/0x300 [ 1178.807565][T18975] ? __get_vm_area_node+0x20b/0x300 [ 1178.807594][T18975] __vmalloc_node_range_noprof+0x37d/0x1730 [ 1178.807624][T18975] ? __lock_acquire+0x683/0x2ce0 [ 1178.807680][T18975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1178.807707][T18975] ? aa_file_perm+0x18b/0x1600 [ 1178.807768][T18975] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1178.807801][T18975] __vmalloc_noprof+0xd2/0x120 [ 1178.807826][T18975] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1178.807865][T18975] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1178.807899][T18975] ? bpf_prog_alloc+0x2a/0x1a0 [ 1178.807937][T18975] bpf_prog_alloc+0x3c/0x1a0 [ 1178.807974][T18975] bpf_prog_load+0x7f8/0x1c00 [ 1178.808021][T18975] ? __pfx_bpf_prog_load+0x10/0x10 [ 1178.808082][T18975] __sys_bpf+0xd0d/0xd90 [ 1178.808124][T18975] ? __pfx___sys_bpf+0x10/0x10 [ 1178.808160][T18975] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1178.808200][T18975] ? rt_mutex_slowunlock+0x219/0x460 [ 1178.808245][T18975] ? ksys_write+0x248/0x270 [ 1178.808280][T18975] ? __pfx_ksys_write+0x10/0x10 [ 1178.808317][T18975] __x64_sys_bpf+0xba/0xd0 [ 1178.808347][T18975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.808374][T18975] do_syscall_64+0x174/0x580 [ 1178.808406][T18975] ? trace_irq_disable+0x3b/0x140 [ 1178.808438][T18975] ? clear_bhb_loop+0x40/0x90 [ 1178.808468][T18975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.808492][T18975] RIP: 0033:0x7f22d5a1ce59 [ 1178.808513][T18975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.808533][T18975] RSP: 002b:00007f22d3c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1178.808556][T18975] RAX: ffffffffffffffda RBX: 00007f22d5c96090 RCX: 00007f22d5a1ce59 [ 1178.808574][T18975] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1178.808590][T18975] RBP: 00007f22d3c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.808605][T18975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.808618][T18975] R13: 00007f22d5c96128 R14: 00007f22d5c96090 R15: 00007fffb6b206a8 [ 1178.808654][T18975] [ 1178.808694][T18975] Mem-Info: [ 1178.808715][T18975] active_anon:9111 inactive_anon:4 isolated_anon:0 [ 1178.808715][T18975] active_file:2048 inactive_file:58981 isolated_file:0 [ 1178.808715][T18975] unevictable:768 dirty:217 writeback:0 [ 1178.808715][T18975] slab_reclaimable:12616 slab_unreclaimable:146546 [ 1178.808715][T18975] mapped:31077 shmem:2760 pagetables:1452 [ 1178.808715][T18975] sec_pagetables:0 bounce:0 [ 1178.808715][T18975] kernel_misc_reclaimable:0 [ 1178.808715][T18975] free:1247849 free_pcp:5781 free_cma:0 [ 1178.808780][T18975] Node 0 active_anon:36444kB inactive_anon:16kB active_file:8192kB inactive_file:235732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124308kB dirty:864kB writeback:0kB shmem:9504kB kernel_stack:13740kB pagetables:5700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1178.808840][T18975] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1178.808897][T18975] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.808967][T18975] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1178.809009][T18975] Node 0 DMA32 free:1040828kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36344kB inactive_anon:16kB active_file:8192kB inactive_file:235732kB unevictable:1536kB writepending:864kB zspages:0kB present:3129332kB managed:2554316kB mlocked:0kB bounce:0kB free_pcp:23108kB local_pcp:7192kB free_cma:0kB [ 1178.809082][T18975] lowmem_reserve[]: 0 0 1 1 1 [ 1178.809119][T18975] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1160kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1178.809186][T18975] lowmem_reserve[]: 0 0 0 0 0 [ 1178.809222][T18975] Node 1 Normal free:3935208kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1178.809292][T18975] lowmem_reserve[]: 0 0 0 0 0 [ 1178.809333][T18975] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1178.809466][T18975] Node 0 DMA32: 510*4kB (UM) 1144*8kB (UME) 450*16kB (UME) 681*32kB (UME) 505*64kB (UME) 226*128kB (UME) 152*256kB (UM) 75*512kB (UME) 26*1024kB (UME) 6*2048kB (UM) 201*4096kB (UM) = 1040952kB [ 1178.809645][T18975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1178.809766][T18975] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 8*16kB (UM) 12*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 959*4096kB (M) = 3935208kB [ 1178.809946][T18975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1178.809967][T18975] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1178.809987][T18975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1178.810008][T18975] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1178.810027][T18975] 63740 total pagecache pages [ 1178.810041][T18975] 0 pages in swap cache [ 1178.810050][T18975] Free swap = 124996kB [ 1178.810060][T18975] Total swap = 124996kB [ 1178.810070][T18975] 2097051 pages RAM [ 1178.810079][T18975] 0 pages HighMem/MovableOnly [ 1178.810087][T18975] 426568 pages reserved [ 1178.810096][T18975] 0 pages cma reserved [ 1179.164053][ T4921] Bluetooth: hci0: command tx timeout [ 1180.282923][T18835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.291392][T18835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.291774][T18835] bridge_slave_0: entered allmulticast mode [ 1180.311738][T18835] bridge_slave_0: entered promiscuous mode [ 1180.330067][T18835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.332157][T18835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.332501][T18835] bridge_slave_1: entered allmulticast mode [ 1180.393933][T18835] bridge_slave_1: entered promiscuous mode [ 1180.541970][T18960] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 1180.617915][ T38] audit: type=1800 audit(1782184303.728:3087): pid=18960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4167" name="file0" dev="loop2" ino=1048650 res=0 errno=0 [ 1180.808843][T19002] loop0: detected capacity change from 0 to 64 [ 1181.039421][T19002] FAULT_INJECTION: forcing a failure. [ 1181.039421][T19002] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.039461][T19002] CPU: 0 UID: 0 PID: 19002 Comm: syz.0.4182 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1181.039489][T19002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1181.039504][T19002] Call Trace: [ 1181.039513][T19002] [ 1181.039524][T19002] dump_stack_lvl+0xe8/0x150 [ 1181.039561][T19002] should_fail_ex+0x467/0x600 [ 1181.039599][T19002] should_failslab+0xa8/0x100 [ 1181.039641][T19002] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 1181.039670][T19002] ? __d_alloc+0x37/0x6f0 [ 1181.039698][T19002] ? __d_alloc+0x37/0x6f0 [ 1181.039727][T19002] ? add_lock_to_list+0xc7/0x100 [ 1181.039755][T19002] __d_alloc+0x37/0x6f0 [ 1181.039791][T19002] d_alloc_parallel+0xde/0x16c0 [ 1181.039826][T19002] ? __d_lookup+0x66/0x790 [ 1181.039869][T19002] ? __d_lookup+0x66/0x790 [ 1181.039902][T19002] ? __d_lookup+0x66/0x790 [ 1181.039933][T19002] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1181.039963][T19002] ? __d_lookup+0x6f3/0x790 [ 1181.039995][T19002] ? d_lookup+0x1f/0xc0 [ 1181.040029][T19002] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1181.040056][T19002] ? lockdep_hardirqs_on+0x7a/0x110 [ 1181.040096][T19002] path_openat+0xbf0/0x3850 [ 1181.040138][T19002] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1181.040164][T19002] ? __x64_sys_openat+0x138/0x170 [ 1181.040213][T19002] do_file_open+0x23e/0x4a0 [ 1181.040243][T19002] ? lockdep_hardirqs_on+0x7a/0x110 [ 1181.040281][T19002] ? __pfx_do_file_open+0x10/0x10 [ 1181.040350][T19002] ? alloc_fd+0x654/0x6d0 [ 1181.040390][T19002] do_sys_openat2+0x115/0x200 [ 1181.040418][T19002] ? __pfx_do_sys_openat2+0x10/0x10 [ 1181.040444][T19002] ? ksys_write+0x248/0x270 [ 1181.040477][T19002] ? __pfx_ksys_write+0x10/0x10 [ 1181.040512][T19002] __x64_sys_openat+0x138/0x170 [ 1181.040540][T19002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.040564][T19002] do_syscall_64+0x174/0x580 [ 1181.040595][T19002] ? trace_irq_disable+0x3b/0x140 [ 1181.040632][T19002] ? clear_bhb_loop+0x40/0x90 [ 1181.040680][T19002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.040704][T19002] RIP: 0033:0x7f22d5a1ce59 [ 1181.040725][T19002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.040747][T19002] RSP: 002b:00007f22d3c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1181.040773][T19002] RAX: ffffffffffffffda RBX: 00007f22d5c95fa0 RCX: 00007f22d5a1ce59 [ 1181.040791][T19002] RDX: 000000000000275a RSI: 0000200000000a40 RDI: ffffffffffffff9c [ 1181.040808][T19002] RBP: 00007f22d3c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.040822][T19002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.040836][T19002] R13: 00007f22d5c96038 R14: 00007f22d5c95fa0 R15: 00007fffb6b206a8 [ 1181.040873][T19002] [ 1181.243972][ T4921] Bluetooth: hci0: command tx timeout [ 1181.527290][T18835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.624897][T19006] openvswitch: netlink: Message has 8 unknown bytes. [ 1182.418215][T18835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.471948][ T38] audit: type=1326 audit(1782184305.578:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19011 comm="syz.1.4186" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74683cce59 code=0x0 [ 1182.657971][ T12] bridge_slave_1: left allmulticast mode [ 1182.658009][ T12] bridge_slave_1: left promiscuous mode [ 1182.658310][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.856766][ T12] bridge_slave_0: left allmulticast mode [ 1182.856803][ T12] bridge_slave_0: left promiscuous mode [ 1182.857093][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.166078][T19040] FAULT_INJECTION: forcing a failure. [ 1183.166078][T19040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.166117][T19040] CPU: 0 UID: 0 PID: 19040 Comm: syz.0.4198 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1183.166146][T19040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1183.166161][T19040] Call Trace: [ 1183.166170][T19040] [ 1183.166181][T19040] dump_stack_lvl+0xe8/0x150 [ 1183.166217][T19040] should_fail_ex+0x467/0x600 [ 1183.166255][T19040] core_sys_select+0x8c0/0xb40 [ 1183.166278][T19040] ? get_pid_task+0x20/0x1f0 [ 1183.166321][T19040] ? __pfx_core_sys_select+0x10/0x10 [ 1183.166384][T19040] ? __pfx_set_user_sigmask+0x10/0x10 [ 1183.166410][T19040] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1183.166444][T19040] __se_sys_pselect6+0x267/0x320 [ 1183.166478][T19040] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1183.166503][T19040] ? __pfx_ksys_write+0x10/0x10 [ 1183.166540][T19040] ? __x64_sys_pselect6+0x21/0xf0 [ 1183.166564][T19040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.166590][T19040] do_syscall_64+0x174/0x580 [ 1183.166624][T19040] ? trace_irq_disable+0x3b/0x140 [ 1183.166656][T19040] ? clear_bhb_loop+0x40/0x90 [ 1183.166685][T19040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.166710][T19040] RIP: 0033:0x7f22d5a1ce59 [ 1183.166730][T19040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.166752][T19040] RSP: 002b:00007f22d3c6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1183.166776][T19040] RAX: ffffffffffffffda RBX: 00007f22d5c95fa0 RCX: 00007f22d5a1ce59 [ 1183.166793][T19040] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1183.166808][T19040] RBP: 00007f22d3c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.166823][T19040] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 1183.166838][T19040] R13: 00007f22d5c96038 R14: 00007f22d5c95fa0 R15: 00007fffb6b206a8 [ 1183.166879][T19040] [ 1183.323899][ T4921] Bluetooth: hci0: command tx timeout [ 1183.481652][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4199'. [ 1183.481672][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4199'. [ 1184.163690][ T5338] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1184.313577][ T5338] usb 3-1: Using ep0 maxpacket: 32 [ 1184.316094][ T5338] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1184.316122][ T5338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.316144][ T5338] usb 3-1: config 0 has no interface number 0 [ 1184.316192][ T5338] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1184.316224][ T5338] usb 3-1: config 0 interface 8 has no altsetting 0 [ 1184.319089][ T5338] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1184.319121][ T5338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.319145][ T5338] usb 3-1: Product: syz [ 1184.319162][ T5338] usb 3-1: Manufacturer: syz [ 1184.319178][ T5338] usb 3-1: SerialNumber: syz [ 1184.334904][ T5338] usb 3-1: config 0 descriptor?? [ 1184.498187][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.517660][T19068] FAULT_INJECTION: forcing a failure. [ 1184.517660][T19068] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.517697][T19068] CPU: 1 UID: 0 PID: 19068 Comm: syz.0.4211 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1184.517725][T19068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1184.517740][T19068] Call Trace: [ 1184.517749][T19068] [ 1184.517759][T19068] dump_stack_lvl+0xe8/0x150 [ 1184.517796][T19068] should_fail_ex+0x467/0x600 [ 1184.517836][T19068] should_failslab+0xa8/0x100 [ 1184.517868][T19068] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1184.517897][T19068] ? __snd_timer_user_ioctl+0x5a3/0x4820 [ 1184.517928][T19068] ? __snd_timer_user_ioctl+0x5a3/0x4820 [ 1184.517966][T19068] __snd_timer_user_ioctl+0x5a3/0x4820 [ 1184.518001][T19068] ? kasan_quarantine_put+0xbb/0x1f0 [ 1184.518033][T19068] ? __pfx___snd_timer_user_ioctl+0x10/0x10 [ 1184.518064][T19068] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1184.518097][T19068] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1184.518136][T19068] ? __lock_acquire+0x683/0x2ce0 [ 1184.518188][T19068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1184.518221][T19068] ? hook_file_ioctl+0x1f3/0x600 [ 1184.518261][T19068] ? lockdep_hardirqs_on+0x7a/0x110 [ 1184.518302][T19068] ? do_raw_spin_lock+0x12b/0x2f0 [ 1184.518345][T19068] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1184.518379][T19068] ? lockdep_hardirqs_on+0x7a/0x110 [ 1184.518414][T19068] ? mutex_lock_nested+0x152/0x1d0 [ 1184.518438][T19068] ? snd_timer_user_ioctl+0x51/0x80 [ 1184.518469][T19068] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 1184.518499][T19068] snd_timer_user_ioctl+0x60/0x80 [ 1184.518530][T19068] __se_sys_ioctl+0xff/0x170 [ 1184.518564][T19068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.518591][T19068] do_syscall_64+0x174/0x580 [ 1184.518624][T19068] ? trace_irq_disable+0x3b/0x140 [ 1184.518658][T19068] ? clear_bhb_loop+0x40/0x90 [ 1184.518689][T19068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.518713][T19068] RIP: 0033:0x7f22d5a1ce59 [ 1184.518735][T19068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.518756][T19068] RSP: 002b:00007f22d3c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.518781][T19068] RAX: ffffffffffffffda RBX: 00007f22d5c95fa0 RCX: 00007f22d5a1ce59 [ 1184.518800][T19068] RDX: 0000200000000280 RSI: 0000000080e85411 RDI: 0000000000000003 [ 1184.518815][T19068] RBP: 00007f22d3c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.518830][T19068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.518843][T19068] R13: 00007f22d5c96038 R14: 00007f22d5c95fa0 R15: 00007fffb6b206a8 [ 1184.518880][T19068] [ 1186.508636][ T4921] Bluetooth: hci0: command tx timeout [ 1186.526982][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.602090][T15971] libceph: connect (1)[c::]:6789 error -101 [ 1186.602437][T15971] libceph: mon0 (1)[c::]:6789 connect error [ 1186.753340][ T12] bond0 (unregistering): Released all slaves [ 1186.915454][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1186.915771][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1187.068942][T18835] team0: Port device team_slave_0 added [ 1187.172759][T18835] team0: Port device team_slave_1 added [ 1187.558540][T19069] ceph: No mds server is up or the cluster is laggy [ 1187.581251][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1188.519262][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1189.086403][ T5338] ath6kl: Failed to submit usb control message: -71 [ 1189.086459][ T5338] ath6kl: unable to send the bmi data to the device: -71 [ 1189.086477][ T5338] ath6kl: Unable to send get target info: -71 [ 1189.091509][ T5338] ath6kl: Failed to init ath6kl core: -71 [ 1189.093151][ T5338] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1189.137155][ T5338] usb 3-1: USB disconnect, device number 80 [ 1189.261694][T18835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.261712][T18835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.261744][T18835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.456964][ T12] hsr_slave_0: left promiscuous mode [ 1189.495285][ T12] hsr_slave_1: left promiscuous mode [ 1189.496600][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.589154][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.524779][T19130] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4235'. [ 1192.022545][T19146] netlink: 'syz.1.4242': attribute type 8 has an invalid length. [ 1192.197797][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1192.314514][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1192.682694][T19164] FAULT_INJECTION: forcing a failure. [ 1192.682694][T19164] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.682748][T19164] CPU: 1 UID: 0 PID: 19164 Comm: syz.0.4250 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1192.682777][T19164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1192.682793][T19164] Call Trace: [ 1192.682802][T19164] [ 1192.682813][T19164] dump_stack_lvl+0xe8/0x150 [ 1192.682852][T19164] should_fail_ex+0x467/0x600 [ 1192.682895][T19164] should_failslab+0xa8/0x100 [ 1192.682930][T19164] kmem_cache_alloc_lru_noprof+0xa7/0x650 [ 1192.682960][T19164] ? hugetlbfs_alloc_inode+0xef/0x130 [ 1192.683064][T19164] ? hugetlbfs_alloc_inode+0xef/0x130 [ 1192.683096][T19164] hugetlbfs_alloc_inode+0xef/0x130 [ 1192.683131][T19164] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1192.683155][T19164] alloc_inode+0x6a/0x1b0 [ 1192.683182][T19164] new_inode+0x1f/0x170 [ 1192.683213][T19164] hugetlbfs_get_inode+0x73/0x660 [ 1192.683256][T19164] hugetlb_file_setup+0x28f/0x630 [ 1192.683296][T19164] newseg+0x479/0xc90 [ 1192.683371][T19164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1192.683408][T19164] ? __pfx_newseg+0x10/0x10 [ 1192.683438][T19164] ? rwbase_write_lock+0x550/0x720 [ 1192.683486][T19164] ipcget+0x1db/0xf30 [ 1192.683520][T19164] ? irqentry_exit+0x218/0x8f0 [ 1192.683555][T19164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1192.683588][T19164] ? irqentry_exit+0x218/0x8f0 [ 1192.683632][T19164] ? __pfx_ipcget+0x10/0x10 [ 1192.683678][T19164] __x64_sys_shmget+0x140/0x190 [ 1192.683716][T19164] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1192.683761][T19164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.683788][T19164] do_syscall_64+0x174/0x580 [ 1192.683825][T19164] ? clear_bhb_loop+0x40/0x90 [ 1192.683856][T19164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.683881][T19164] RIP: 0033:0x7f22d5a1ce59 [ 1192.683905][T19164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.683927][T19164] RSP: 002b:00007f22d3c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1192.683953][T19164] RAX: ffffffffffffffda RBX: 00007f22d5c96180 RCX: 00007f22d5a1ce59 [ 1192.683971][T19164] RDX: 00000000780008c0 RSI: 0000000000004000 RDI: 0000000000000000 [ 1192.683986][T19164] RBP: 00007f22d3c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.684001][T19164] R10: 0000200000a02000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.684017][T19164] R13: 00007f22d5c96218 R14: 00007f22d5c96180 R15: 00007fffb6b206a8 [ 1192.684054][T19164] [ 1193.319357][T19166] loop2: detected capacity change from 0 to 128 [ 1193.362641][T19166] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1193.390267][T19166] ext4 filesystem being mounted at /547/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.288721][T18835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.288738][T18835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.288765][T18835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.456218][ T5612] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1194.694188][T19188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4258'. [ 1194.835082][T19191] loop2: detected capacity change from 0 to 4096 [ 1194.963774][T19198] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1195.356067][T18835] hsr_slave_0: entered promiscuous mode [ 1195.360628][T18835] hsr_slave_1: entered promiscuous mode [ 1195.375306][T18835] debugfs: 'hsr0' already exists in 'hsr' [ 1195.375336][T18835] Cannot create hsr debugfs directory [ 1196.404873][T19228] loop2: detected capacity change from 0 to 4096 [ 1196.593357][T19237] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1197.889059][T19247] FAULT_INJECTION: forcing a failure. [ 1197.889059][T19247] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.889097][T19247] CPU: 0 UID: 0 PID: 19247 Comm: syz.0.4274 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1197.889125][T19247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1197.889140][T19247] Call Trace: [ 1197.889149][T19247] [ 1197.889160][T19247] dump_stack_lvl+0xe8/0x150 [ 1197.889205][T19247] should_fail_ex+0x467/0x600 [ 1197.889243][T19247] should_failslab+0xa8/0x100 [ 1197.889276][T19247] __kmalloc_noprof+0xfe/0x780 [ 1197.889305][T19247] ? tomoyo_encode+0x2ad/0x570 [ 1197.889340][T19247] ? tomoyo_encode+0x2ad/0x570 [ 1197.889383][T19247] tomoyo_encode+0x2ad/0x570 [ 1197.889426][T19247] tomoyo_realpath_from_path+0x5fa/0x640 [ 1197.889475][T19247] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1197.889507][T19247] tomoyo_path_number_perm+0x246/0x5f0 [ 1197.889542][T19247] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1197.889573][T19247] ? __lock_acquire+0x683/0x2ce0 [ 1197.889622][T19247] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1197.889655][T19247] ? hook_file_ioctl+0x1f3/0x600 [ 1197.889686][T19247] ? lockdep_hardirqs_on+0x7a/0x110 [ 1197.889740][T19247] ? __fget_files+0x2a/0x420 [ 1197.889771][T19247] ? __fget_files+0x2a/0x420 [ 1197.889797][T19247] ? __fget_files+0x3a8/0x420 [ 1197.889823][T19247] ? __fget_files+0x2a/0x420 [ 1197.889856][T19247] security_file_ioctl+0xc3/0x2a0 [ 1197.889888][T19247] __se_sys_ioctl+0x47/0x170 [ 1197.889922][T19247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.889949][T19247] do_syscall_64+0x174/0x580 [ 1197.889982][T19247] ? trace_irq_disable+0x3b/0x140 [ 1197.890016][T19247] ? clear_bhb_loop+0x40/0x90 [ 1197.890046][T19247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.890070][T19247] RIP: 0033:0x7f22d5a1ce59 [ 1197.890093][T19247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.890114][T19247] RSP: 002b:00007f22d3c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1197.890139][T19247] RAX: ffffffffffffffda RBX: 00007f22d5c95fa0 RCX: 00007f22d5a1ce59 [ 1197.890157][T19247] RDX: 00002000000005c0 RSI: 00000000000089f2 RDI: 0000000000000004 [ 1197.890182][T19247] RBP: 00007f22d3c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.890198][T19247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.890212][T19247] R13: 00007f22d5c96038 R14: 00007f22d5c95fa0 R15: 00007fffb6b206a8 [ 1197.890249][T19247] [ 1197.890272][T19247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1198.403718][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1199.125983][T18938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.126463][T18938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.126867][T18938] bridge_slave_0: entered allmulticast mode [ 1199.160382][T18938] bridge_slave_0: entered promiscuous mode [ 1199.253553][T18938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.260345][T18938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.260731][T18938] bridge_slave_1: entered allmulticast mode [ 1199.292132][T18938] bridge_slave_1: entered promiscuous mode [ 1199.617651][T19281] loop2: detected capacity change from 0 to 256 [ 1199.686086][T19281] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 1200.225489][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.738776][T19295] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1200.856667][T19292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4286'. [ 1201.114456][T19298] loop2: detected capacity change from 0 to 256 [ 1201.255202][T19303] netlink: 'syz.1.4292': attribute type 1 has an invalid length. [ 1201.255223][T19303] netlink: 'syz.1.4292': attribute type 4 has an invalid length. [ 1201.255234][T19303] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4292'. [ 1201.423008][T19298] FAT-fs (loop2): IO charset cp125050 not found [ 1201.463402][T19307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4294'. [ 1202.277688][T18938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.330185][T19326] loop2: detected capacity change from 0 to 2048 [ 1202.340286][T19326] udf: Unknown parameter 'ui' [ 1202.371305][T19326] netlink: 'syz.2.4302': attribute type 1 has an invalid length. [ 1202.371327][T19326] netlink: 'syz.2.4302': attribute type 4 has an invalid length. [ 1202.371343][T19326] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4302'. [ 1202.404084][T19326] loop2: detected capacity change from 0 to 256 [ 1202.405196][T19326] exfat: Deprecated parameter 'utf8' [ 1202.405296][T19326] exfat: Deprecated parameter 'namecase' [ 1202.405359][T19326] exfat: Deprecated parameter 'namecase' [ 1202.522804][T18938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.552063][T19326] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1202.568421][T19326] exfat: Deprecated parameter 'utf8' [ 1202.568535][T19326] exfat: Deprecated parameter 'namecase' [ 1202.568597][T19326] exfat: Deprecated parameter 'namecase' [ 1202.746803][T19330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1203.772453][T19341] FAULT_INJECTION: forcing a failure. [ 1203.772453][T19341] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.772492][T19341] CPU: 1 UID: 0 PID: 19341 Comm: syz.2.4306 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1203.772520][T19341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1203.772534][T19341] Call Trace: [ 1203.772543][T19341] [ 1203.772552][T19341] dump_stack_lvl+0xe8/0x150 [ 1203.772589][T19341] should_fail_ex+0x467/0x600 [ 1203.772625][T19341] should_failslab+0xa8/0x100 [ 1203.772657][T19341] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 1203.772684][T19341] ? __css_rstat_updated+0x235/0x540 [ 1203.772827][T19341] ? __get_vm_area_node+0x136/0x300 [ 1203.772850][T19341] ? __get_vm_area_node+0x136/0x300 [ 1203.772880][T19341] __get_vm_area_node+0x136/0x300 [ 1203.772909][T19341] __vmalloc_node_range_noprof+0x358/0x1730 [ 1203.772936][T19341] ? bpf_check+0x155/0x5320 [ 1203.773000][T19341] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1203.773049][T19341] ? rcu_is_watching+0x15/0xb0 [ 1203.773077][T19341] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1203.773101][T19341] ? bpf_check+0xb9/0x5320 [ 1203.773129][T19341] ? trace_kmalloc+0x2a/0xf0 [ 1203.773156][T19341] ? bpf_check+0xb9/0x5320 [ 1203.773189][T19341] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1203.773223][T19341] ? bpf_check+0x155/0x5320 [ 1203.773255][T19341] vzalloc_noprof+0xb2/0xe0 [ 1203.773280][T19341] ? bpf_check+0x155/0x5320 [ 1203.773314][T19341] bpf_check+0x155/0x5320 [ 1203.773350][T19341] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 1203.773392][T19341] ? ktime_get_with_offset+0x93/0x2d0 [ 1203.773432][T19341] ? ktime_get_with_offset+0x93/0x2d0 [ 1203.773465][T19341] ? ktime_get_with_offset+0x93/0x2d0 [ 1203.773499][T19341] ? __pfx_bpf_check+0x10/0x10 [ 1203.773532][T19341] ? __asan_memset+0x22/0x50 [ 1203.773553][T19341] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1203.773646][T19341] ? security_bpf_prog_load+0x125/0x3c0 [ 1203.773683][T19341] bpf_prog_load+0x1577/0x1c00 [ 1203.773731][T19341] ? __pfx_bpf_prog_load+0x10/0x10 [ 1203.773820][T19341] __sys_bpf+0xd0d/0xd90 [ 1203.773863][T19341] ? __pfx___sys_bpf+0x10/0x10 [ 1203.773900][T19341] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1203.773939][T19341] ? rt_mutex_slowunlock+0x219/0x460 [ 1203.773984][T19341] ? ksys_write+0x248/0x270 [ 1203.774019][T19341] ? __pfx_ksys_write+0x10/0x10 [ 1203.774056][T19341] __x64_sys_bpf+0xba/0xd0 [ 1203.774087][T19341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.774113][T19341] do_syscall_64+0x174/0x580 [ 1203.774145][T19341] ? trace_irq_disable+0x3b/0x140 [ 1203.774177][T19341] ? clear_bhb_loop+0x40/0x90 [ 1203.774206][T19341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.774230][T19341] RIP: 0033:0x7fc464fbce59 [ 1203.774253][T19341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.774275][T19341] RSP: 002b:00007fc463216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1203.774300][T19341] RAX: ffffffffffffffda RBX: 00007fc465235fa0 RCX: 00007fc464fbce59 [ 1203.774318][T19341] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 1203.774333][T19341] RBP: 00007fc463216090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.774348][T19341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1203.774362][T19341] R13: 00007fc465236038 R14: 00007fc465235fa0 R15: 00007ffd6f4e5fd8 [ 1203.774398][T19341] [ 1203.789544][T19341] syz.2.4306: vmalloc error: size 544, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1203.789741][T19341] CPU: 1 UID: 0 PID: 19341 Comm: syz.2.4306 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1203.789822][T19341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1203.789862][T19341] Call Trace: [ 1203.789884][T19341] [ 1203.789908][T19341] dump_stack_lvl+0xe8/0x150 [ 1203.790001][T19341] warn_alloc+0x24c/0x270 [ 1203.790093][T19341] ? __pfx_warn_alloc+0x10/0x10 [ 1203.790156][T19341] ? __css_rstat_updated+0x235/0x540 [ 1203.790266][T19341] ? __get_vm_area_node+0x2af/0x300 [ 1203.790342][T19341] __vmalloc_node_range_noprof+0x37d/0x1730 [ 1203.790425][T19341] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1203.790558][T19341] ? rcu_is_watching+0x15/0xb0 [ 1203.790624][T19341] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1203.790703][T19341] ? bpf_check+0xb9/0x5320 [ 1203.790811][T19341] ? trace_kmalloc+0x2a/0xf0 [ 1203.790890][T19341] ? bpf_check+0xb9/0x5320 [ 1203.790974][T19341] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1203.791058][T19341] ? bpf_check+0x155/0x5320 [ 1203.791140][T19341] vzalloc_noprof+0xb2/0xe0 [ 1203.791197][T19341] ? bpf_check+0x155/0x5320 [ 1203.791275][T19341] bpf_check+0x155/0x5320 [ 1203.791360][T19341] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 1203.791472][T19341] ? ktime_get_with_offset+0x93/0x2d0 [ 1203.791569][T19341] ? ktime_get_with_offset+0x93/0x2d0 [ 1203.791659][T19341] ? ktime_get_with_offset+0x93/0x2d0 [ 1203.791741][T19341] ? __pfx_bpf_check+0x10/0x10 [ 1203.791828][T19341] ? __asan_memset+0x22/0x50 [ 1203.791888][T19341] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1203.791971][T19341] ? security_bpf_prog_load+0x125/0x3c0 [ 1203.792065][T19341] bpf_prog_load+0x1577/0x1c00 [ 1203.792224][T19341] ? __pfx_bpf_prog_load+0x10/0x10 [ 1203.792369][T19341] __sys_bpf+0xd0d/0xd90 [ 1203.792474][T19341] ? __pfx___sys_bpf+0x10/0x10 [ 1203.792567][T19341] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1203.792668][T19341] ? rt_mutex_slowunlock+0x219/0x460 [ 1203.792786][T19341] ? ksys_write+0x248/0x270 [ 1203.792876][T19341] ? __pfx_ksys_write+0x10/0x10 [ 1203.792971][T19341] __x64_sys_bpf+0xba/0xd0 [ 1203.793031][T19341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.793101][T19341] do_syscall_64+0x174/0x580 [ 1203.793174][T19341] ? trace_irq_disable+0x3b/0x140 [ 1203.793205][T19341] ? clear_bhb_loop+0x40/0x90 [ 1203.793234][T19341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.793257][T19341] RIP: 0033:0x7fc464fbce59 [ 1203.793294][T19341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.793347][T19341] RSP: 002b:00007fc463216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1203.793402][T19341] RAX: ffffffffffffffda RBX: 00007fc465235fa0 RCX: 00007fc464fbce59 [ 1203.793452][T19341] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 1203.793501][T19341] RBP: 00007fc463216090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.793556][T19341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1203.793603][T19341] R13: 00007fc465236038 R14: 00007fc465235fa0 R15: 00007ffd6f4e5fd8 [ 1203.793696][T19341] [ 1203.806966][T19341] Mem-Info: [ 1203.807016][T19341] active_anon:7573 inactive_anon:4 isolated_anon:0 [ 1203.807016][T19341] active_file:2048 inactive_file:58997 isolated_file:0 [ 1203.807016][T19341] unevictable:768 dirty:222 writeback:0 [ 1203.807016][T19341] slab_reclaimable:12646 slab_unreclaimable:145247 [ 1203.807016][T19341] mapped:31051 shmem:1319 pagetables:1437 [ 1203.807016][T19341] sec_pagetables:0 bounce:0 [ 1203.807016][T19341] kernel_misc_reclaimable:0 [ 1203.807016][T19341] free:1248508 free_pcp:7928 free_cma:0 [ 1203.807184][T19341] Node 0 active_anon:30292kB inactive_anon:16kB active_file:8192kB inactive_file:235796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124204kB dirty:888kB writeback:0kB shmem:3740kB kernel_stack:13496kB pagetables:5640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1203.807312][T19341] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1203.807460][T19341] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.807645][T19341] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1203.807750][T19341] Node 0 DMA32 free:1043464kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30292kB inactive_anon:16kB active_file:8192kB inactive_file:235796kB unevictable:1536kB writepending:888kB zspages:0kB present:3129332kB managed:2554316kB mlocked:0kB bounce:0kB free_pcp:31696kB local_pcp:14524kB free_cma:0kB [ 1203.807952][T19341] lowmem_reserve[]: 0 0 1 1 1 [ 1203.823783][T19341] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1160kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1203.837219][T19341] lowmem_reserve[]: 0 0 0 0 0 [ 1203.837334][T19341] Node 1 Normal free:3935208kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.837479][T19341] lowmem_reserve[]: 0 0 0 0 0 [ 1203.837518][T19341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1203.837652][T19341] Node 0 DMA32: 5*4kB (ME) 402*8kB (UM) 673*16kB (UME) 935*32kB (UME) 480*64kB (UME) 235*128kB (UME) 153*256kB (UM) 75*512kB (UME) 25*1024kB (ME) 6*2048kB (UM) 201*4096kB (UM) = 1043476kB [ 1203.837915][T19341] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1203.838180][T19341] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 8*16kB (UM) 12*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 959*4096kB (M) = 3935208kB [ 1203.838666][T19341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.848163][T19341] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1203.848226][T19341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.848271][T19341] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1203.848322][T19341] 62336 total pagecache pages [ 1203.848345][T19341] 0 pages in swap cache [ 1203.848367][T19341] Free swap = 124996kB [ 1203.848397][T19341] Total swap = 124996kB [ 1203.848419][T19341] 2097051 pages RAM [ 1203.848441][T19341] 0 pages HighMem/MovableOnly [ 1203.848462][T19341] 426568 pages reserved [ 1203.848490][T19341] 0 pages cma reserved [ 1204.847642][T19345] FAULT_INJECTION: forcing a failure. [ 1204.847642][T19345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.847680][T19345] CPU: 0 UID: 0 PID: 19345 Comm: syz.2.4310 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1204.847708][T19345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1204.847723][T19345] Call Trace: [ 1204.847731][T19345] [ 1204.847741][T19345] dump_stack_lvl+0xe8/0x150 [ 1204.847778][T19345] should_fail_ex+0x467/0x600 [ 1204.847815][T19345] _copy_to_user+0x31/0xb0 [ 1204.847842][T19345] simple_read_from_buffer+0xe1/0x170 [ 1204.847880][T19345] proc_fail_nth_read+0x1be/0x230 [ 1204.847911][T19345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1204.847942][T19345] ? rw_verify_area+0x250/0x4d0 [ 1204.847974][T19345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1204.848000][T19345] vfs_read+0x219/0xa90 [ 1204.848041][T19345] ? __pfx_vfs_read+0x10/0x10 [ 1204.848075][T19345] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1204.848110][T19345] ? lockdep_hardirqs_on+0x7a/0x110 [ 1204.848143][T19345] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1204.848176][T19345] ? mutex_lock_nested+0x152/0x1d0 [ 1204.848209][T19345] ? fdget_pos+0x252/0x320 [ 1204.848246][T19345] ksys_read+0x156/0x270 [ 1204.848280][T19345] ? __pfx_ksys_read+0x10/0x10 [ 1204.848315][T19345] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 1204.848354][T19345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.848379][T19345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.848405][T19345] do_syscall_64+0x174/0x580 [ 1204.848437][T19345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.848462][T19345] ? clear_bhb_loop+0x40/0x90 [ 1204.848491][T19345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.848515][T19345] RIP: 0033:0x7fc464f7d68e [ 1204.848536][T19345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1204.848556][T19345] RSP: 002b:00007fc463215fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1204.848581][T19345] RAX: ffffffffffffffda RBX: 00007fc4632166c0 RCX: 00007fc464f7d68e [ 1204.848598][T19345] RDX: 000000000000000f RSI: 00007fc4632160a0 RDI: 0000000000000004 [ 1204.848613][T19345] RBP: 00007fc463216090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.848628][T19345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.848642][T19345] R13: 00007fc465236038 R14: 00007fc465235fa0 R15: 00007ffd6f4e5fd8 [ 1204.848674][T19345] [ 1205.148732][T19347] loop2: detected capacity change from 0 to 512 [ 1205.168735][T19347] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1205.207532][T19347] EXT4-fs (loop2): 1 truncate cleaned up [ 1205.499173][T19347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.394958][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.683786][T19359] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4312'. [ 1207.691701][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.230311][T18938] team0: Port device team_slave_0 added [ 1208.248572][T18938] team0: Port device team_slave_1 added [ 1208.273408][ T32] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1208.426468][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 1208.434699][ T32] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1208.434744][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 1208.434772][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.487092][ T32] usb 3-1: config 0 descriptor?? [ 1209.065736][T19426] netlink: 'syz.1.4338': attribute type 5 has an invalid length. [ 1209.935000][T19431] loop2: detected capacity change from 0 to 16 [ 1209.942028][T19431] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1210.006834][ T32] usbhid 3-1:0.0: can't add hid device: -71 [ 1210.006956][ T32] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1210.103403][ T32] usb 3-1: USB disconnect, device number 81 [ 1210.221828][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.784662][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1210.801285][T18938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.801304][T18938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.801333][T18938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.567620][T18938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.567637][T18938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.567669][T18938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.030580][T19476] loop0: detected capacity change from 0 to 512 [ 1215.196704][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.427271][T19476] EXT4-fs (loop0): 1 orphan inode deleted [ 1215.431350][T19476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1215.438441][T19476] ext4 filesystem being mounted at /2828/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1215.484157][ T1528] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1215.484348][ T1528] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 1 [ 1215.661527][T19476] [ 1215.661537][T19476] ====================================================== [ 1215.661544][T19476] WARNING: possible circular locking dependency detected [ 1215.661556][T19476] syzkaller #0 Not tainted [ 1215.661565][T19476] ------------------------------------------------------ [ 1215.661572][T19476] syz.0.4357/19476 is trying to acquire lock: [ 1215.661581][T19476] ffff8880612967f0 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0 [ 1215.661664][T19476] [ 1215.661664][T19476] but task is already holding lock: [ 1215.661669][T19476] ffff88805ee80cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 1215.661717][T19476] [ 1215.661717][T19476] which lock already depends on the new lock. [ 1215.661717][T19476] [ 1215.661723][T19476] [ 1215.661723][T19476] the existing dependency chain (in reverse order) is: [ 1215.661729][T19476] [ 1215.661729][T19476] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1215.661766][T19476] percpu_down_read_internal+0x48/0x1d0 [ 1215.661788][T19476] ext4_writepages+0x205/0x3b0 [ 1215.661829][T19476] do_writepages+0x338/0x560 [ 1215.661907][T19476] __writeback_single_inode+0x12e/0xf90 [ 1215.661933][T19476] writeback_single_inode+0x4dd/0xe10 [ 1215.661978][T19476] write_inode_now+0x1c2/0x290 [ 1215.662000][T19476] iput+0x98b/0xf00 [ 1215.662016][T19476] ext4_xattr_block_set+0x1b0c/0x2a80 [ 1215.662047][T19476] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 1215.662062][T19476] __ext4_expand_extra_isize+0x30d/0x400 [ 1215.662086][T19476] __ext4_mark_inode_dirty+0x455/0x700 [ 1215.662104][T19476] ext4_evict_inode+0x976/0x10c0 [ 1215.662121][T19476] evict+0x624/0xb50 [ 1215.662141][T19476] ext4_orphan_cleanup+0xc7a/0x14c0 [ 1215.662160][T19476] ext4_fill_super+0x5cc0/0x65d0 [ 1215.662189][T19476] get_tree_bdev_flags+0x430/0x4f0 [ 1215.662210][T19476] vfs_get_tree+0x92/0x2a0 [ 1215.662230][T19476] do_new_mount+0x319/0xdc0 [ 1215.662244][T19476] __se_sys_mount+0x31d/0x420 [ 1215.662260][T19476] do_syscall_64+0x174/0x580 [ 1215.662283][T19476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.662298][T19476] [ 1215.662298][T19476] -> #0 (sb_internal){.+.+}-{0:0}: [ 1215.662319][T19476] __lock_acquire+0x1520/0x2ce0 [ 1215.662343][T19476] lock_acquire+0x106/0x350 [ 1215.662362][T19476] percpu_down_read_internal+0x48/0x1d0 [ 1215.662376][T19476] ext4_evict_inode+0x426/0x10c0 [ 1215.662393][T19476] evict+0x624/0xb50 [ 1215.662413][T19476] ext4_ext_migrate+0xddf/0x10e0 [ 1215.662427][T19476] ext4_ioctl+0x234f/0x4b80 [ 1215.662443][T19476] __se_sys_ioctl+0xff/0x170 [ 1215.662464][T19476] do_syscall_64+0x174/0x580 [ 1215.662485][T19476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.662499][T19476] [ 1215.662499][T19476] other info that might help us debug this: [ 1215.662499][T19476] [ 1215.662505][T19476] Possible unsafe locking scenario: [ 1215.662505][T19476] [ 1215.662510][T19476] CPU0 CPU1 [ 1215.662515][T19476] ---- ---- [ 1215.662520][T19476] lock(&sbi->s_writepages_rwsem); [ 1215.662530][T19476] lock(sb_internal); [ 1215.662542][T19476] lock(&sbi->s_writepages_rwsem); [ 1215.662553][T19476] rlock(sb_internal); [ 1215.662563][T19476] [ 1215.662563][T19476] *** DEADLOCK *** [ 1215.662563][T19476] [ 1215.662567][T19476] 3 locks held by syz.0.4357/19476: [ 1215.662576][T19476] #0: ffff888061296500 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210 [ 1215.662621][T19476] #1: ffff888033a0eec0 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: ext4_ioctl+0x2347/0x4b80 [ 1215.662661][T19476] #2: ffff88805ee80cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 1215.662696][T19476] [ 1215.662696][T19476] stack backtrace: [ 1215.662706][T19476] CPU: 1 UID: 0 PID: 19476 Comm: syz.0.4357 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1215.662724][T19476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1215.662734][T19476] Call Trace: [ 1215.662740][T19476] [ 1215.662747][T19476] dump_stack_lvl+0xe8/0x150 [ 1215.662768][T19476] print_circular_bug+0x2e1/0x300 [ 1215.662790][T19476] check_noncircular+0x12e/0x150 [ 1215.662808][T19476] __lock_acquire+0x1520/0x2ce0 [ 1215.662833][T19476] ? __lock_acquire+0x683/0x2ce0 [ 1215.662859][T19476] ? ext4_evict_inode+0x426/0x10c0 [ 1215.662877][T19476] lock_acquire+0x106/0x350 [ 1215.662920][T19476] ? ext4_evict_inode+0x426/0x10c0 [ 1215.662953][T19476] percpu_down_read_internal+0x48/0x1d0 [ 1215.662976][T19476] ? ext4_evict_inode+0x426/0x10c0 [ 1215.662995][T19476] ext4_evict_inode+0x426/0x10c0 [ 1215.663015][T19476] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1215.663036][T19476] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1215.663053][T19476] ? rt_spin_unlock+0x157/0x200 [ 1215.663071][T19476] ? rt_spin_unlock+0x163/0x200 [ 1215.663088][T19476] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1215.663106][T19476] evict+0x624/0xb50 [ 1215.663130][T19476] ? __pfx_evict+0x10/0x10 [ 1215.663152][T19476] ? rt_spin_unlock+0x163/0x200 [ 1215.663187][T19476] ? iput+0xb84/0xf00 [ 1215.663213][T19476] ext4_ext_migrate+0xddf/0x10e0 [ 1215.663244][T19476] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 1215.663266][T19476] ext4_ioctl+0x234f/0x4b80 [ 1215.663287][T19476] ? __pfx_ext4_ioctl+0x10/0x10 [ 1215.663304][T19476] ? is_bpf_text_address+0x292/0x2b0 [ 1215.663328][T19476] ? is_bpf_text_address+0x26/0x2b0 [ 1215.663353][T19476] ? kernel_text_address+0xa5/0xe0 [ 1215.663376][T19476] ? __kernel_text_address+0xd/0x30 [ 1215.663396][T19476] ? unwind_get_return_address+0x4d/0x90 [ 1215.663448][T19476] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1215.663503][T19476] ? arch_stack_walk+0xfb/0x150 [ 1215.663545][T19476] ? stack_trace_save+0xa9/0x100 [ 1215.663565][T19476] ? __pfx_stack_trace_save+0x10/0x10 [ 1215.663584][T19476] ? kasan_save_track+0x4f/0x80 [ 1215.663602][T19476] ? stack_depot_save_flags+0x33/0x800 [ 1215.663623][T19476] ? __lock_acquire+0x683/0x2ce0 [ 1215.663646][T19476] ? kasan_save_track+0x4f/0x80 [ 1215.663661][T19476] ? kasan_save_track+0x3e/0x80 [ 1215.663676][T19476] ? kasan_save_free_info+0x40/0x50 [ 1215.663699][T19476] ? __kasan_slab_free+0x5c/0x80 [ 1215.663715][T19476] ? kfree+0x1c5/0x6c0 [ 1215.663729][T19476] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1215.663749][T19476] ? security_file_ioctl+0xc3/0x2a0 [ 1215.663767][T19476] ? __se_sys_ioctl+0x47/0x170 [ 1215.663793][T19476] ? do_syscall_64+0x174/0x580 [ 1215.663814][T19476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.663844][T19476] ? kasan_quarantine_put+0xbb/0x1f0 [ 1215.663863][T19476] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1215.663884][T19476] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1215.663905][T19476] ? do_vfs_ioctl+0x1184/0x1550 [ 1215.663927][T19476] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1215.663975][T19476] ? hook_file_ioctl+0x1f3/0x600 [ 1215.664021][T19476] ? __fget_files+0x2a/0x420 [ 1215.664041][T19476] ? __fget_files+0x2a/0x420 [ 1215.664057][T19476] ? __fget_files+0x3a8/0x420 [ 1215.664073][T19476] ? __fget_files+0x2a/0x420 [ 1215.664091][T19476] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1215.664111][T19476] ? __pfx_ext4_ioctl+0x10/0x10 [ 1215.664127][T19476] __se_sys_ioctl+0xff/0x170 [ 1215.664149][T19476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.664165][T19476] do_syscall_64+0x174/0x580 [ 1215.664185][T19476] ? trace_irq_disable+0x3b/0x140 [ 1215.664206][T19476] ? clear_bhb_loop+0x40/0x90 [ 1215.664224][T19476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.664240][T19476] RIP: 0033:0x7f22d5a1ce59 [ 1215.664254][T19476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.664268][T19476] RSP: 002b:00007f22d3c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1215.664286][T19476] RAX: ffffffffffffffda RBX: 00007f22d5c95fa0 RCX: 00007f22d5a1ce59 [ 1215.664298][T19476] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000007 [ 1215.664308][T19476] RBP: 00007f22d5ab2e6f R08: 0000000000000000 R09: 0000000000000000 [ 1215.664318][T19476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1215.664328][T19476] R13: 00007f22d5c96038 R14: 00007f22d5c95fa0 R15: 00007fffb6b206a8 [ 1215.664346][T19476] [ 1215.861071][T19464] ceph: No mds server is up or the cluster is laggy [ 1215.871703][ T1191] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1215.872009][ T1191] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 1216.596993][T18938] hsr_slave_0: entered promiscuous mode [ 1216.599069][T18938] hsr_slave_1: entered promiscuous mode [ 1216.600903][T18938] debugfs: 'hsr0' already exists in 'hsr' [ 1216.600923][T18938] Cannot create hsr debugfs directory [ 1216.667383][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.070057][T18835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1217.098062][T18835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1217.214639][ T12] bridge_slave_1: left allmulticast mode [ 1217.214667][ T12] bridge_slave_1: left promiscuous mode [ 1217.214874][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.353935][ T12] bridge_slave_0: left allmulticast mode [ 1217.353962][ T12] bridge_slave_0: left promiscuous mode [ 1217.354137][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.033691][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.113782][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.134762][ T12] bond0 (unregistering): Released all slaves [ 1218.173864][T18835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1218.234982][T18835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1218.316286][T18835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1218.360021][T18835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1218.361295][T18835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1218.396450][T18835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1218.838362][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1219.343755][T18835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.374288][T18835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.608532][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.608632][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.637527][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.637635][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.872488][ T12] hsr_slave_0: left promiscuous mode [ 1219.903404][ T12] hsr_slave_1: left promiscuous mode [ 1219.903977][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.903994][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.944157][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.944182][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.023602][ T12] veth1_macvtap: left promiscuous mode [ 1220.023650][ T12] veth0_macvtap: left promiscuous mode [ 1220.023804][ T12] veth1_vlan: left promiscuous mode [ 1220.023908][ T12] veth0_vlan: left promiscuous mode [ 1220.685188][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1220.723725][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1220.912748][T18938] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1220.936615][T18938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1220.939527][T18938] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1220.976664][T18938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1220.979129][T18938] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1221.016846][T18938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1221.021692][T18938] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1221.086871][T18938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1221.321981][T18938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.360981][T18938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.418178][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.418282][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.439597][T15603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.439751][T15603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.765755][T18835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.126719][T18938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.215803][T18835] veth0_vlan: entered promiscuous mode [ 1222.237476][T18835] veth1_vlan: entered promiscuous mode [ 1222.309088][T18835] veth0_macvtap: entered promiscuous mode [ 1222.320898][T18835] veth1_macvtap: entered promiscuous mode [ 1222.356397][T18835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.381029][T18835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.410058][ T1041] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.411110][ T1041] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.412011][ T1041] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.412812][ T1041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.587619][T18835] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 1222.641305][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.641328][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.665829][T18835] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 1222.669787][T18938] veth0_vlan: entered promiscuous mode [ 1222.712221][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.712243][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.730562][T18938] veth1_vlan: entered promiscuous mode [ 1222.790386][T18938] veth0_macvtap: entered promiscuous mode [ 1222.802174][T18938] veth1_macvtap: entered promiscuous mode [ 1222.829790][T18938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.856574][T18938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.879739][ T1297] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.881165][ T1297] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.882858][ T1297] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.917129][ T1297] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.040065][T18938] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 1223.073031][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.073053][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.094902][T18938] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 1223.124922][T15603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.124944][T15603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50