last executing test programs: 14.710683281s ago: executing program 3 (id=251): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r7, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, 0x0, 0x20040050) 12.70919681s ago: executing program 3 (id=257): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x100102, 0x40) sendfile(r0, r0, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r1, 0x5) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0x0, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) write$P9_RSTATu(r4, 0x0, 0x6e) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x3, 0x4}}) r6 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 12.464427856s ago: executing program 4 (id=258): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xa) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0xff64000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 11.086452449s ago: executing program 4 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 10.832445316s ago: executing program 3 (id=262): socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 10.729783828s ago: executing program 4 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000240)=""/133, 0x85, 0x4640) 9.256809644s ago: executing program 1 (id=267): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r7, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, 0x0, 0x20040050) 8.236873319s ago: executing program 0 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000240)=""/133, 0x85, 0x4640) 7.699534382s ago: executing program 1 (id=270): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0xa8, &(0x7f0000000000), 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r8, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 7.328972311s ago: executing program 0 (id=271): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xa) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0xff64000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 6.196336499s ago: executing program 4 (id=273): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_submit(0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 6.17108479s ago: executing program 1 (id=274): socket$inet_tcp(0x2, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000080)={0x2, 0x0, [{0x1, 0x2, 0x1, 0x2, 0x10, 0x9, 0x546b89ad}, {0x8000000f, 0x1ff, 0x1, 0x2, 0x2, 0x25, 0x3ff}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) connect(r4, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xc004) connect(r4, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r6 = getpid() setpriority(0x0, r6, 0x5) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x5e5010ad, '\x00', 0x441}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r8, &(0x7f0000000100), 0x0) mq_notify(r8, 0x0) close(r7) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000002c0)={r3, r9, 0x1, 0x0, 0x400000d4}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) 5.428814758s ago: executing program 0 (id=275): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x20040050) 5.240633812s ago: executing program 4 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 5.163229364s ago: executing program 1 (id=277): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5\x00'/439, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xa) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0xff64000) read$FUSE(r0, 0x0, 0x0) 5.096528606s ago: executing program 4 (id=279): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r4, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000002c0), 0x0) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x20040050) 5.095164246s ago: executing program 3 (id=280): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r7, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20040050) 4.172035938s ago: executing program 1 (id=281): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000240)=""/133, 0x85, 0x4640) 3.401889927s ago: executing program 3 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'pim6reg1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc5, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x2, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x3ff, 0x1c00, 0x80000001, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x9, 0x4, 0x7, 0x7, 0x1, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x7, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x9c, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9c, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000240)=""/133, 0x85, 0x4640) 3.28082886s ago: executing program 2 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$kcm(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./mnt\x00', 0x840, &(0x7f0000000680)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000009c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000b40)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000b80)=0x20, 0x4) write$binfmt_misc(r2, &(0x7f0000000bc0), 0x6) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}], 0x18}, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) splice(r0, &(0x7f0000000540)=0x7, r3, &(0x7f00000005c0)=0x7, 0x200, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd605abc8000343c00fc0000000000000000000000000000ffff0200000000000000000000000000010003000000000000c910ff"], 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x4) write(r4, &(0x7f0000000100)='3', 0x1) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', &(0x7f0000000200), &(0x7f0000000240)='./sys/class/video4linux/video0/dev_debug\x00', 0x29, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x0, 0x3, 0x8, r4, 0x0, &(0x7f0000000180)={0x9b090b, 0xf64, '\x00', @value64=0x10001}}) 2.87040836s ago: executing program 0 (id=285): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xa) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0xff64000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 2.693773105s ago: executing program 3 (id=286): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r4, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 2.438923941s ago: executing program 2 (id=287): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@rodir}, {@utf8no}, {@shortname_win95}, {@rodir}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 1.470219915s ago: executing program 0 (id=288): socket$inet_tcp(0x2, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000080)={0x2, 0x0, [{0x1, 0x2, 0x1, 0x2, 0x10, 0x9, 0x546b89ad}, {0x8000000f, 0x1ff, 0x1, 0x2, 0x2, 0x25, 0x3ff}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) connect(r4, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0xc004) connect(r4, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r6 = getpid() setpriority(0x0, r6, 0x5) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x5e5010ad, '\x00', 0x441}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r8, &(0x7f0000000100), 0x0) mq_notify(r8, 0x0) close(r7) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000002c0)={r3, r9, 0x1, 0x0, 0x400000d4}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) 1.390905477s ago: executing program 2 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.229687201s ago: executing program 0 (id=290): socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1008) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) unshare(0x42000000) 1.193410491s ago: executing program 2 (id=291): munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5\x00'/439, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xa) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0xff64000) read$FUSE(r0, 0x0, 0x0) 156.814737ms ago: executing program 2 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) write(0xffffffffffffffff, &(0x7f00000002c0)='0', 0x1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='5', 0x1) close(r2) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x1) close(r3) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 122.491037ms ago: executing program 1 (id=293): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0xa, 0x0, &(0x7f0000000280)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r7, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20040050) 0s ago: executing program 2 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 37.533486][ T3849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.550962][ T3849] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. syzkaller login: [ 56.330633][ T4171] cgroup: Unknown subsys name 'net' [ 56.481185][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.710706][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.739211][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.747842][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.755613][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.811744][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 58.820150][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 58.828460][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 58.837645][ T4184] rdma_rxe: rxe_register_device failed with error -23 [ 58.840559][ T4185] infiniband rxe0: set active [ 58.845107][ T3849] infiniband rxe0: set active [ 58.849668][ T4185] infiniband rxe0: added rxe_eth0 [ 58.864403][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.875114][ T4190] rdma_rxe: failed to add rxe_eth0 [ 58.880460][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.887986][ T4185] RDS/IB: rxe0: added [ 58.892565][ T4185] smc: adding ib device rxe0 with port count 1 [ 58.899295][ T4185] smc: ib device rxe0 port 1 has pnetid [ 58.906389][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.915253][ T4184] rdma_rxe: failed to add rxe_eth0 [ 58.920677][ T4186] rdma_rxe: failed to add rxe_eth0 [ 58.926640][ T4191] rdma_rxe: failed to add rxe_eth0 [ 58.929897][ T4185] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.017115][ T4186] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.044252][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.124845][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.229862][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.250634][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.352186][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 59.417322][ T4184] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.428288][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.435363][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.461861][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.512182][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.519756][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.529778][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.578874][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.588742][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.597394][ T4186] device bridge_slave_0 entered promiscuous mode [ 59.608109][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.615263][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.623892][ T4186] device bridge_slave_1 entered promiscuous mode [ 59.652705][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 59.684748][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.700423][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.732955][ T4185] team0: Port device team_slave_0 added [ 59.740491][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.754444][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.788029][ T4186] team0: Port device team_slave_0 added [ 59.796468][ T4185] team0: Port device team_slave_1 added [ 59.803228][ T4186] team0: Port device team_slave_1 added [ 59.825026][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.832130][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.858355][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.890125][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.897284][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.923625][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.943878][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.951287][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.977964][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.991104][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.998458][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.024684][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.069666][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.076865][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.084537][ T4191] device bridge_slave_0 entered promiscuous mode [ 60.115003][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.122626][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.134684][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.142529][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.150340][ T4191] device bridge_slave_1 entered promiscuous mode [ 60.182260][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.190292][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.197741][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.206103][ T4185] Cannot create hsr debugfs directory [ 60.222331][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.256359][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.313064][ T4191] team0: Port device team_slave_0 added [ 60.323670][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 60.340816][ T4191] team0: Port device team_slave_1 added [ 60.415819][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.422970][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.449258][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.477969][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.484945][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.511011][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.542889][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.596178][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.603494][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.611656][ T4190] device bridge_slave_0 entered promiscuous mode [ 60.624316][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.631706][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.639622][ T4190] device bridge_slave_1 entered promiscuous mode [ 60.652060][ T4191] device hsr_slave_0 entered promiscuous mode [ 60.659212][ T4191] device hsr_slave_1 entered promiscuous mode [ 60.665817][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.673406][ T4191] Cannot create hsr debugfs directory [ 60.712178][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.728043][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.762438][ T4190] team0: Port device team_slave_0 added [ 60.776281][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 60.785807][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 60.791354][ T4190] team0: Port device team_slave_1 added [ 60.797889][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 60.801773][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.812523][ T4173] Bluetooth: hci3: command 0x0409 tx timeout [ 60.819340][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 60.833001][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.840228][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.848899][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.867099][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.882317][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.889608][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.898089][ T4184] device bridge_slave_1 entered promiscuous mode [ 60.905784][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.912846][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.939066][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.950648][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.963545][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.983089][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.990152][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.016711][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.050826][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.079120][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.140618][ T4184] team0: Port device team_slave_0 added [ 61.151833][ T4190] device hsr_slave_0 entered promiscuous mode [ 61.159058][ T4190] device hsr_slave_1 entered promiscuous mode [ 61.165630][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.173222][ T4190] Cannot create hsr debugfs directory [ 61.187511][ T4184] team0: Port device team_slave_1 added [ 61.230186][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.241085][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.250392][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.257716][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.284421][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.298992][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.306914][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.333436][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.359168][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.400281][ T4184] device hsr_slave_0 entered promiscuous mode [ 61.407247][ T4184] device hsr_slave_1 entered promiscuous mode [ 61.414339][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.422615][ T4184] Cannot create hsr debugfs directory [ 61.428689][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.486141][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.496547][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.517338][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.528698][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.581922][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.650687][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.664626][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.675206][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.683690][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.695094][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.705381][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.712703][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.721672][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.757791][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.768033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.777366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.786648][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.793717][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.802138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.810743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.820556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.830277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.844992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.874787][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.892632][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.900959][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.911157][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.920232][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.929147][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.938446][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.946891][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.958739][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.976207][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.989464][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.003759][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.012096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.020380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.036255][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.051962][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.066762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.075060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.111335][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.124571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.134011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.142905][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.150002][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.158381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.168303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.177347][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.184645][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.192480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.202197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.211466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.220575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.229027][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.236109][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.243796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.252621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.261260][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.268719][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.276562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.285263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.293658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.319659][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.330469][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.340976][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.351935][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.360953][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.370902][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.379974][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.389707][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.398720][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.407728][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.417161][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.426827][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.435057][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.443563][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.452042][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.460801][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.470712][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.479076][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.489745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.498352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.521476][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.549310][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.573169][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.589442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.597585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.614548][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.684069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.701954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.739718][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.749783][ T4185] device veth0_vlan entered promiscuous mode [ 62.778619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.793720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.802732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.810846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.826552][ T4185] device veth1_vlan entered promiscuous mode [ 62.841918][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.850120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.858068][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 62.862639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.864263][ T4173] Bluetooth: hci3: command 0x041b tx timeout [ 62.874283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.877963][ T4173] Bluetooth: hci1: command 0x041b tx timeout [ 62.891353][ T4173] Bluetooth: hci2: command 0x041b tx timeout [ 62.892665][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.897562][ T4173] Bluetooth: hci4: command 0x041b tx timeout [ 62.936529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.944736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.953589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.961392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.969545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.980338][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.999701][ T4185] device veth0_macvtap entered promiscuous mode [ 63.010751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.019700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.028553][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.035661][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.043846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.053451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.061478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.070577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.079153][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.086231][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.094377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.104241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.118920][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.133172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.141603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.150249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.159975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.171035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.181445][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.188574][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.197014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.205886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.214522][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.221650][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.229770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.240157][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.262500][ T4185] device veth1_macvtap entered promiscuous mode [ 63.277239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.288418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.297759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.312802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.321399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.330844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.339744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.370007][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.385980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.395277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.409221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.419450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.436514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.445292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.455297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.464381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.479753][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.491652][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.505006][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.526248][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.535123][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.544149][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.553470][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.565127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.575216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.584925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.594530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.605034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.614911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.624791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.633766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.642697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.651200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.660751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.672159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.681286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.693862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.703321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.736257][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.746777][ T4191] device veth0_vlan entered promiscuous mode [ 63.753974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.762323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.814670][ T4191] device veth1_vlan entered promiscuous mode [ 63.836855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.855864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.871085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.947511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.957698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.973441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.983029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.991235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.002309][ T4186] device veth0_vlan entered promiscuous mode [ 64.019808][ T4191] device veth0_macvtap entered promiscuous mode [ 64.026208][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.037698][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.047104][ T4186] device veth1_vlan entered promiscuous mode [ 64.053841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.063532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.072809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.081680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.090466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.101288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.110084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.119950][ T4191] device veth1_macvtap entered promiscuous mode [ 64.152402][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.164514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.176130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.184054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.192256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.207756][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.219859][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.232301][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.257496][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.263180][ T4186] device veth0_macvtap entered promiscuous mode [ 64.273064][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.280335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.290556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.301261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.310362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.319287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.328627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.337516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.345615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.355029][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.366198][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.380662][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.396968][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.414459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.424192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.435863][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.444596][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.454426][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.463626][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.500991][ T4184] device veth0_vlan entered promiscuous mode [ 64.514193][ T4186] device veth1_macvtap entered promiscuous mode [ 64.545631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.553600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.562229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.570936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.579235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.607397][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.622903][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.650297][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.661208][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.673645][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.692894][ T4184] device veth1_vlan entered promiscuous mode [ 64.701771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.710865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.722402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.731459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.746114][ T4284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.754749][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.779281][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.791395][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.804929][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.815952][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.825025][ T4286] loop0: detected capacity change from 0 to 128 [ 64.827811][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.867515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.877400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.893523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.903333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.907881][ T4286] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 64.926873][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.935973][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 64.936677][ T4286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.942532][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 64.956117][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.972540][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.975826][ T4252] Bluetooth: hci1: command 0x040f tx timeout [ 64.984074][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.997824][ T4252] Bluetooth: hci3: command 0x040f tx timeout [ 65.004054][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 65.030639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.039963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.049807][ T4190] device veth0_vlan entered promiscuous mode [ 65.073349][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.082465][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.093216][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.118488][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.155044][ T4184] device veth0_macvtap entered promiscuous mode [ 65.171675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.184333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.196013][ T4190] device veth1_vlan entered promiscuous mode [ 65.224499][ T4184] device veth1_macvtap entered promiscuous mode [ 65.273743][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.282986][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.296914][ T4292] loop0: detected capacity change from 0 to 256 [ 65.325788][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.340482][ T4292] exfat: Deprecated parameter 'utf8' [ 65.340733][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.363928][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.377072][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.379745][ T4292] exfat: Deprecated parameter 'utf8' [ 65.388199][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.392568][ T4292] exfat: Deprecated parameter 'namecase' [ 65.403260][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.403277][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.403289][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.404898][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.452967][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.463494][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.474032][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.478652][ T4292] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 65.484654][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.508911][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.519816][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.531495][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.551135][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.561735][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.571963][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.581373][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.591168][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.599881][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.617585][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.635137][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.644772][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.654983][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.668956][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.685163][ T4190] device veth0_macvtap entered promiscuous mode [ 65.698462][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.714703][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.730863][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.741251][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.759875][ T4297] loop0: detected capacity change from 0 to 8192 [ 65.764098][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.778268][ T4190] device veth1_macvtap entered promiscuous mode [ 65.795971][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.806835][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.826999][ T4297] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 65.851580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.871554][ T4297] REISERFS (device loop0): using ordered data mode [ 65.879810][ T4297] reiserfs: using flush barriers [ 65.894179][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.921815][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.932092][ T4297] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.948909][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.959927][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.960380][ T4297] REISERFS (device loop0): checking transaction log (loop0) [ 65.970439][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.970459][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.970476][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.970486][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.972674][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.038566][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.057373][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.087220][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.100261][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.159350][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.167796][ T4310] loop2: detected capacity change from 0 to 512 [ 66.190282][ T4310] ======================================================= [ 66.190282][ T4310] WARNING: The mand mount option has been deprecated and [ 66.190282][ T4310] and is ignored by this kernel. Remove the mand [ 66.190282][ T4310] option from the mount to silence this warning. [ 66.190282][ T4310] ======================================================= [ 66.203005][ T4297] REISERFS (device loop0): Using tea hash to sort names [ 66.240398][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.252829][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.252871][ T4297] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 66.268636][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.284119][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.302489][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.315080][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.343972][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.369116][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.389122][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.396447][ T4313] loop4: detected capacity change from 0 to 512 [ 66.405070][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.420239][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.423879][ T4310] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.429624][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.446218][ T4310] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.460524][ T530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.469589][ T530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.503948][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.543646][ T4313] EXT4-fs (loop4): Ignoring removed nobh option [ 66.582531][ T4310] EXT4-fs error (device loop2): ext4_generic_delete_entry:2731: inode #12: block 32: comm syz.2.11: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 66.607840][ T4313] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.626173][ T4310] EXT4-fs error (device loop2) in ext4_delete_entry:2802: Corrupt filesystem [ 66.650056][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.669770][ T4313] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.688007][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.697717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.713421][ T4313] EXT4-fs (loop4): 1 truncate cleaned up [ 66.724564][ T4313] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 66.750427][ T4318] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12'. [ 66.759813][ T4318] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12'. [ 66.786292][ T4318] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12'. [ 66.847871][ T4322] loop0: detected capacity change from 0 to 1764 [ 66.853665][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.901260][ T4322] ISOFS: unable to read i-node block [ 66.903940][ T4324] loop2: detected capacity change from 0 to 256 [ 66.915361][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.922725][ T4322] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 66.935064][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.948206][ T4326] loop1: detected capacity change from 0 to 16 [ 66.987410][ T4322] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 67.006456][ T530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.015865][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 67.022689][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 67.048076][ T4326] erofs: (device loop1): mounted with root inode @ nid 36. [ 67.048764][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 67.064687][ T530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.088726][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 67.090992][ T4328] loop4: detected capacity change from 0 to 1024 [ 67.097780][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.121331][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 67.284423][ T4332] loop0: detected capacity change from 0 to 64 [ 67.548987][ T4339] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 67.567184][ T4339] EXT4-fs (loop4): inline encryption not supported [ 67.584414][ T4339] EXT4-fs (loop4): Test dummy encryption mode enabled [ 67.620600][ T4345] NILFS (loop1): invalid segment: Magic number mismatch [ 67.632752][ T4345] NILFS (loop1): trying rollback from an earlier position [ 67.633482][ T4339] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 67.661123][ T4340] hfsplus: keylen 65060 too large [ 67.683617][ T4339] System zones: 0-5 [ 67.692597][ T4340] hfsplus: xattr searching failed [ 67.698276][ T4339] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 67.700046][ T4345] NILFS (loop1): recovery complete [ 67.821074][ T4355] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.087445][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 68.133561][ T4362] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 69.410553][ T4386] EXT4-fs (loop3): Test dummy encryption mode enabled [ 69.773737][ T4386] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 69.791993][ T4386] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.916661][ T1111] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.930427][ T4402] set_capacity_and_notify: 10 callbacks suppressed [ 69.930442][ T4402] loop1: detected capacity change from 0 to 128 [ 69.994759][ T4406] loop0: detected capacity change from 0 to 128 [ 70.419429][ T4406] EXT4-fs (loop0): Test dummy encryption mode enabled [ 70.426461][ T4402] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.505192][ T4410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 70.525251][ T4402] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 70.546770][ T4406] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 70.620942][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 70.630308][ T4406] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.642774][ T4402] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.663766][ T4395] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.345153][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.353587][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.419906][ T4426] loop4: detected capacity change from 0 to 1024 [ 72.551273][ T4431] loop1: detected capacity change from 0 to 64 [ 72.622104][ T4424] loop3: detected capacity change from 0 to 4096 [ 72.633712][ T4426] hfsplus: keylen 65060 too large [ 72.665663][ T4424] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 72.671876][ T4426] hfsplus: xattr searching failed [ 72.702301][ T4424] EXT4-fs (loop3): inline encryption not supported [ 72.770833][ T4424] EXT4-fs (loop3): Test dummy encryption mode enabled [ 72.782090][ T4436] loop0: detected capacity change from 0 to 128 [ 72.864785][ T4436] EXT4-fs (loop0): Test dummy encryption mode enabled [ 72.874616][ T4424] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 72.927922][ T4436] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 73.006085][ T4424] System zones: 0-5 [ 73.012114][ T4424] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 73.032182][ T4436] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.074356][ T4444] netlink: 160 bytes leftover after parsing attributes in process `syz.4.48'. [ 73.135693][ T4444] netlink: 160 bytes leftover after parsing attributes in process `syz.4.48'. [ 73.154325][ T4438] loop1: detected capacity change from 0 to 8192 [ 73.167744][ T4444] netlink: 160 bytes leftover after parsing attributes in process `syz.4.48'. [ 73.221522][ T4438] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 73.279989][ T4438] REISERFS (device loop1): using ordered data mode [ 73.381610][ T4438] reiserfs: using flush barriers [ 73.670599][ T4438] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.904346][ T4438] REISERFS (device loop1): checking transaction log (loop1) [ 74.140033][ T4438] REISERFS (device loop1): Using tea hash to sort names [ 74.151638][ T4459] loop3: detected capacity change from 0 to 512 [ 74.172595][ T4438] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 74.202228][ T4459] EXT4-fs (loop3): Ignoring removed nobh option [ 74.243734][ T4459] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.323026][ T4459] EXT4-fs (loop3): 1 truncate cleaned up [ 74.467687][ T4459] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 74.524660][ T4470] loop2: detected capacity change from 0 to 512 [ 74.609584][ T4474] loop0: detected capacity change from 0 to 128 [ 74.651463][ T4474] EXT4-fs (loop0): Test dummy encryption mode enabled [ 74.704883][ T4470] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 74.760036][ T4470] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.904000][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 74.921013][ T4474] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 74.966763][ T4482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 74.981697][ T4474] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.015007][ T4485] loop1: detected capacity change from 0 to 8 [ 75.105282][ T4490] loop3: detected capacity change from 0 to 64 [ 75.921462][ T4496] loop3: detected capacity change from 0 to 1764 [ 75.930883][ T4500] loop0: detected capacity change from 0 to 512 [ 75.955762][ T4500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.158586][ T4496] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 76.199983][ T4500] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.61: invalid indirect mapped block 32768 (level 2) [ 76.304286][ T4500] EXT4-fs (loop0): 1 orphan inode deleted [ 76.327495][ T4500] EXT4-fs (loop0): 1 truncate cleaned up [ 76.333183][ T4500] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.517781][ T4508] loop3: detected capacity change from 0 to 1764 [ 76.575614][ T4508] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 76.939930][ T4521] ubi0: attaching mtd0 [ 76.951452][ T4521] ubi0: scanning is finished [ 76.956176][ T4521] ubi0: empty MTD device detected [ 77.026834][ T4521] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 77.061312][ T4517] syz.1.67: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 77.061685][ T4517] CPU: 1 PID: 4517 Comm: syz.1.67 Not tainted syzkaller #0 [ 77.061705][ T4517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.061723][ T4517] Call Trace: [ 77.061730][ T4517] [ 77.061739][ T4517] dump_stack_lvl+0x188/0x250 [ 77.061764][ T4517] ? rcu_lock_release+0x5/0x20 [ 77.061786][ T4517] ? show_regs_print_info+0x20/0x20 [ 77.061806][ T4517] ? load_image+0x410/0x410 [ 77.061838][ T4517] warn_alloc+0x245/0x320 [ 77.061866][ T4517] ? zone_watermark_ok_safe+0x250/0x250 [ 77.061887][ T4517] ? __get_vm_area_node+0x164/0x2d0 [ 77.061906][ T4517] ? kfree+0xef/0x2a0 [ 77.061941][ T4517] __vmalloc_node_range+0x2b1/0x8b0 [ 77.061972][ T4517] ? vidtv_mux_init+0x200/0x1950 [ 77.061992][ T4517] vzalloc+0x75/0x80 [ 77.062009][ T4517] ? vidtv_mux_init+0x200/0x1950 [ 77.062028][ T4517] vidtv_mux_init+0x200/0x1950 [ 77.062047][ T4517] ? __mutex_lock_common+0x435/0x2400 [ 77.062074][ T4517] vidtv_start_feed+0x368/0x590 [ 77.062099][ T4517] ? vidtv_i2c_func+0x10/0x10 [ 77.062116][ T4517] ? vidtv_stop_feed+0x250/0x250 [ 77.062141][ T4517] ? _raw_spin_unlock_irq+0x1f/0x40 [ 77.062160][ T4517] ? lockdep_hardirqs_on+0x94/0x140 [ 77.062188][ T4517] dmx_ts_feed_start_filtering+0x11c/0x210 [ 77.062209][ T4517] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 77.062231][ T4517] dvb_dmxdev_filter_start+0x422/0x1060 [ 77.062262][ T4517] dvb_demux_do_ioctl+0x48d/0x530 [ 77.062285][ T4517] dvb_usercopy+0x191/0x2b0 [ 77.062303][ T4517] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 77.062329][ T4517] ? dvb_generic_ioctl+0xb0/0xb0 [ 77.062368][ T4517] ? dvb_demux_poll+0x210/0x210 [ 77.062387][ T4517] dvb_demux_ioctl+0x25/0x30 [ 77.062406][ T4517] __se_sys_ioctl+0xfa/0x170 [ 77.062430][ T4517] do_syscall_64+0x4c/0xa0 [ 77.062448][ T4517] ? clear_bhb_loop+0x30/0x80 [ 77.062469][ T4517] ? clear_bhb_loop+0x30/0x80 [ 77.062490][ T4517] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.062514][ T4517] RIP: 0033:0x7f70e6e48559 [ 77.062536][ T4517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.062552][ T4517] RSP: 002b:00007f70e50a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.062572][ T4517] RAX: ffffffffffffffda RBX: 00007f70e70cffa0 RCX: 00007f70e6e48559 [ 77.062586][ T4517] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 77.062597][ T4517] RBP: 00007f70e6edf8b0 R08: 0000000000000000 R09: 0000000000000000 [ 77.062609][ T4517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.062621][ T4517] R13: 00007f70e70d0038 R14: 00007f70e70cffa0 R15: 00007ffd585d67a8 [ 77.062652][ T4517] [ 77.062659][ T4517] Mem-Info: [ 77.062671][ T4517] active_anon:289 inactive_anon:11733 isolated_anon:0 [ 77.062671][ T4517] active_file:4586 inactive_file:36706 isolated_file:0 [ 77.062671][ T4517] unevictable:768 dirty:1805 writeback:0 [ 77.062671][ T4517] slab_reclaimable:20591 slab_unreclaimable:96969 [ 77.062671][ T4517] mapped:35178 shmem:7439 pagetables:649 bounce:0 [ 77.062671][ T4517] kernel_misc_reclaimable:0 [ 77.062671][ T4517] free:1377185 free_pcp:10741 free_cma:0 [ 77.062724][ T4517] Node 0 active_anon:1124kB inactive_anon:46420kB active_file:18136kB inactive_file:146824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140712kB dirty:7220kB writeback:0kB shmem:27676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10600kB pagetables:2596kB all_unreclaimable? no [ 77.062773][ T4517] Node 1 active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 77.062817][ T4517] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.062869][ T4517] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 77.062916][ T4517] Node 0 DMA32 free:1586292kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1124kB inactive_anon:46420kB active_file:18136kB inactive_file:146824kB unevictable:1536kB writepending:7220kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:26672kB local_pcp:21424kB free_cma:0kB [ 77.062971][ T4517] lowmem_reserve[]: 0 0 0 0 0 [ 77.063015][ T4517] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.063066][ T4517] lowmem_reserve[]: 0 0 0 0 0 [ 77.063111][ T4517] Node 1 Normal free:3907088kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:16292kB local_pcp:11908kB free_cma:0kB [ 77.063165][ T4517] lowmem_reserve[]: 0 0 0 0 0 [ 77.063209][ T4517] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.063495][ T4517] Node 0 DMA32: 1*4kB (M) 4*8kB (UME) 3*16kB (UME) 1*32kB (U) 2*64kB (UE) 1*128kB (M) 1*256kB (E) 1*512kB (M) 0*1024kB 2*2048kB (UM) 386*4096kB (M) = 1586292kB [ 77.063691][ T4517] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 77.063813][ T4517] Node 1 Normal: 58*4kB (U) 15*8kB (UE) 15*16kB (UME) 64*32kB (UE) 29*64kB (UME) 15*128kB (UME) 3*256kB (UM) 1*512kB (U) 2*1024kB (UE) 1*2048kB (M) 951*4096kB (M) = 3907088kB [ 77.064011][ T4517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.064028][ T4517] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.064044][ T4517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.064060][ T4517] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.064077][ T4517] 48729 total pagecache pages [ 77.064091][ T4517] 0 pages in swap cache [ 77.064099][ T4517] Swap cache stats: add 0, delete 0, find 0/0 [ 77.064112][ T4517] Free swap = 124996kB [ 77.064120][ T4517] Total swap = 124996kB [ 77.064132][ T4517] 2097051 pages RAM [ 77.064140][ T4517] 0 pages HighMem/MovableOnly [ 77.064148][ T4517] 415313 pages reserved [ 77.064156][ T4517] 0 pages cma reserved [ 77.452390][ T4530] loop1: detected capacity change from 0 to 8 [ 78.029452][ T4536] loop4: detected capacity change from 0 to 128 [ 78.048091][ T4536] EXT4-fs (loop4): Test dummy encryption mode enabled [ 78.061794][ T4536] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 78.061917][ T4536] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.207899][ T4538] loop1: detected capacity change from 0 to 4096 [ 78.983762][ T4538] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 79.027863][ T4538] EXT4-fs (loop1): inline encryption not supported [ 79.034560][ T4538] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.063540][ T4550] loop2: detected capacity change from 0 to 64 [ 79.088171][ T4551] loop0: detected capacity change from 0 to 256 [ 79.169464][ T4538] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 79.202973][ T4551] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 79.277077][ T4538] System zones: 0-5 [ 79.310532][ T4538] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 79.728411][ T4548] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 79.745961][ T4548] REISERFS (device loop4): using ordered data mode [ 79.752632][ T4548] reiserfs: using flush barriers [ 79.761360][ T4548] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.778515][ T4548] REISERFS (device loop4): checking transaction log (loop4) [ 79.866573][ T4565] capability: warning: `syz.2.80' uses deprecated v2 capabilities in a way that may be insecure [ 79.986501][ T4548] REISERFS (device loop4): Using tea hash to sort names [ 80.022203][ T4548] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 80.783038][ T4578] set_capacity_and_notify: 1 callbacks suppressed [ 80.783051][ T4578] loop3: detected capacity change from 0 to 512 [ 81.321968][ T4585] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.833127][ T4578] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 81.871072][ T4578] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.044862][ T4595] loop4: detected capacity change from 0 to 32768 [ 83.908670][ T4617] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.012266][ T4618] ubi0: attaching mtd0 [ 84.021339][ T4618] ubi0: scanning is finished [ 84.137331][ T4618] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 84.422001][ T4626] loop0: detected capacity change from 0 to 128 [ 84.480074][ T4626] EXT4-fs (loop0): Test dummy encryption mode enabled [ 84.512409][ T4626] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 84.556051][ T4626] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.465529][ T4652] ubi0: attaching mtd0 [ 85.474179][ T4652] ubi0: scanning is finished [ 85.615619][ T4652] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 86.135786][ T4669] ubi0: attaching mtd0 [ 86.140265][ T4669] ubi0: scanning is finished [ 86.280051][ T4668] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.640961][ T7] cfg80211: failed to load regulatory.db [ 86.897528][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 86.971208][ T4669] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 87.241612][ T4680] loop3: detected capacity change from 0 to 512 [ 88.625506][ T4688] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.849089][ T4685] loop0: detected capacity change from 0 to 128 [ 88.896044][ T4685] EXT4-fs (loop0): Test dummy encryption mode enabled [ 88.949437][ T4680] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 88.965675][ T4680] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.987872][ T4685] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 89.015745][ T4685] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.884331][ T4705] ubi0: attaching mtd0 [ 89.893198][ T4705] ubi0: scanning is finished [ 90.819625][ T4718] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.359901][ T4714] sched: RT throttling activated [ 91.368646][ T4705] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 91.411939][ T4720] ubi0: attaching mtd0 [ 91.417066][ T4720] ubi0: scanning is finished [ 91.485432][ T4720] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 91.681540][ T4729] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.882048][ T4738] warn_alloc: 3 callbacks suppressed [ 92.882060][ T4738] syz.1.129: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 92.988624][ T4738] CPU: 1 PID: 4738 Comm: syz.1.129 Not tainted syzkaller #0 [ 92.995963][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.006033][ T4738] Call Trace: [ 93.009497][ T4738] [ 93.012515][ T4738] dump_stack_lvl+0x188/0x250 [ 93.017214][ T4738] ? rcu_lock_release+0x5/0x20 [ 93.021996][ T4738] ? show_regs_print_info+0x20/0x20 [ 93.027219][ T4738] ? load_image+0x410/0x410 [ 93.031930][ T4738] warn_alloc+0x245/0x320 [ 93.036278][ T4738] ? zone_watermark_ok_safe+0x250/0x250 [ 93.041869][ T4738] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 93.047866][ T4738] ? __get_vm_area_node+0x119/0x2d0 [ 93.053187][ T4738] __vmalloc_node_range+0x2b1/0x8b0 [ 93.058422][ T4738] ? vidtv_mux_init+0x200/0x1950 [ 93.060395][ T4745] loop0: detected capacity change from 0 to 128 [ 93.063372][ T4738] vzalloc+0x75/0x80 [ 93.073511][ T4738] ? vidtv_mux_init+0x200/0x1950 [ 93.078466][ T4738] vidtv_mux_init+0x200/0x1950 [ 93.083275][ T4738] ? __mutex_lock_common+0x435/0x2400 [ 93.088674][ T4738] vidtv_start_feed+0x368/0x590 [ 93.093544][ T4738] ? vidtv_i2c_func+0x10/0x10 [ 93.098229][ T4738] ? vidtv_stop_feed+0x250/0x250 [ 93.103188][ T4738] ? _raw_spin_unlock_irq+0x1f/0x40 [ 93.108415][ T4738] ? lockdep_hardirqs_on+0x94/0x140 [ 93.113640][ T4738] dmx_ts_feed_start_filtering+0x11c/0x210 [ 93.119474][ T4738] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 93.125518][ T4738] dvb_dmxdev_filter_start+0x422/0x1060 [ 93.131186][ T4738] dvb_demux_do_ioctl+0x48d/0x530 [ 93.136322][ T4738] dvb_usercopy+0x191/0x2b0 [ 93.140838][ T4738] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 93.146401][ T4738] ? dvb_generic_ioctl+0xb0/0xb0 [ 93.151394][ T4738] ? dvb_demux_poll+0x210/0x210 [ 93.156404][ T4738] dvb_demux_ioctl+0x25/0x30 [ 93.161011][ T4738] __se_sys_ioctl+0xfa/0x170 [ 93.165615][ T4738] do_syscall_64+0x4c/0xa0 [ 93.170042][ T4738] ? clear_bhb_loop+0x30/0x80 [ 93.174777][ T4738] ? clear_bhb_loop+0x30/0x80 [ 93.179584][ T4738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.185493][ T4738] RIP: 0033:0x7f70e6e48559 [ 93.189923][ T4738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.209627][ T4738] RSP: 002b:00007f70e507f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.211381][ T4748] xt_bpf: check failed: parse error [ 93.218141][ T4738] RAX: ffffffffffffffda RBX: 00007f70e70d0090 RCX: 00007f70e6e48559 [ 93.218159][ T4738] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 93.218168][ T4738] RBP: 00007f70e6edf8b0 R08: 0000000000000000 R09: 0000000000000000 [ 93.218180][ T4738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.218189][ T4738] R13: 00007f70e70d0128 R14: 00007f70e70d0090 R15: 00007ffd585d67a8 [ 93.218216][ T4738] [ 93.300762][ T4745] EXT4-fs (loop0): Test dummy encryption mode enabled [ 93.365930][ T4738] Mem-Info: [ 93.369080][ T4738] active_anon:276 inactive_anon:6297 isolated_anon:0 [ 93.369080][ T4738] active_file:4674 inactive_file:36615 isolated_file:0 [ 93.369080][ T4738] unevictable:768 dirty:53 writeback:4 [ 93.369080][ T4738] slab_reclaimable:20746 slab_unreclaimable:99718 [ 93.369080][ T4738] mapped:29551 shmem:1635 pagetables:637 bounce:0 [ 93.369080][ T4738] kernel_misc_reclaimable:0 [ 93.369080][ T4738] free:1378139 free_pcp:11414 free_cma:0 [ 93.410845][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.426320][ T4745] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 93.538100][ T4745] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.692903][ T4738] Node 0 active_anon:1072kB inactive_anon:34576kB active_file:18488kB inactive_file:146460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125304kB dirty:212kB writeback:16kB shmem:11760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10596kB pagetables:2548kB all_unreclaimable? no [ 93.741267][ T4755] loop3: detected capacity change from 0 to 512 [ 93.827574][ T4738] Node 1 active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 93.857160][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.905084][ T4755] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 93.917131][ T4738] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 93.917189][ T4738] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 93.917235][ T4738] Node 0 DMA32 free:1572172kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1100kB inactive_anon:39980kB active_file:18516kB inactive_file:146452kB unevictable:1536kB writepending:284kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:32444kB local_pcp:13188kB free_cma:0kB [ 93.917284][ T4738] lowmem_reserve[]: 0 0 0 0 0 [ 93.917328][ T4738] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 93.917374][ T4738] lowmem_reserve[]: 0 0 0 0 0 [ 94.061124][ T4738] Node 1 Normal free:3907872kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:15544kB local_pcp:11684kB free_cma:0kB [ 94.085612][ T4755] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.132743][ T4738] lowmem_reserve[]: 0 0 0 0 0 [ 94.181018][ T4738] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 94.225067][ T4738] Node 0 DMA32: 176*4kB (UME) 123*8kB (UME) 54*16kB (UE) 90*32kB (UE) 9*64kB (UE) 40*128kB (UME) 11*256kB (UME) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 380*4096kB (M) = 1578616kB [ 94.275370][ T4738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 94.287254][ T4738] Node 1 Normal: 64*4kB (U) 16*8kB (UE) 14*16kB (UME) 74*32kB (UE) 30*64kB (UME) 16*128kB (UME) 4*256kB (UM) 1*512kB (U) 2*1024kB (UE) 1*2048kB (M) 951*4096kB (M) = 3907872kB [ 94.309001][ T4738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.318721][ T4738] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.328076][ T4738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.442340][ T4738] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.635555][ T4738] 45863 total pagecache pages [ 94.815536][ T4738] 0 pages in swap cache [ 94.845445][ T4738] Swap cache stats: add 0, delete 0, find 0/0 [ 94.851633][ T4738] Free swap = 124996kB [ 94.911033][ T4771] ubi0: attaching mtd0 [ 94.922974][ T4771] ubi0: scanning is finished [ 95.025699][ T4738] Total swap = 124996kB [ 95.029907][ T4738] 2097051 pages RAM [ 95.033714][ T4738] 0 pages HighMem/MovableOnly [ 95.043159][ T4771] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 95.104903][ T4738] 415313 pages reserved [ 95.278997][ T4738] 0 pages cma reserved [ 95.488528][ T4781] ubi0: attaching mtd0 [ 95.497125][ T4781] ubi0: scanning is finished [ 95.888420][ T4785] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.930316][ T4781] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 96.240807][ T4793] loop0: detected capacity change from 0 to 512 [ 96.860915][ T4799] loop1: detected capacity change from 0 to 512 [ 96.977928][ T4764] loop4: detected capacity change from 0 to 32768 [ 96.993021][ T4799] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.007767][ T4793] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 97.035609][ T4793] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.067803][ T4799] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.206461][ T4764] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.136 (4764) [ 98.142953][ T4818] loop2: detected capacity change from 0 to 128 [ 98.202260][ T4764] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 98.239965][ T4764] BTRFS info (device loop4): use zlib compression, level 3 [ 98.255682][ T4818] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.261247][ T4764] BTRFS info (device loop4): using free space tree [ 98.292558][ T4818] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 98.295493][ T4764] BTRFS info (device loop4): has skinny extents [ 98.380610][ T4818] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.001785][ T4843] ubi0: attaching mtd0 [ 99.010646][ T4843] ubi0: scanning is finished [ 99.146721][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4178) [ 99.158878][ T4764] BTRFS error (device loop4): open_ctree failed: -12 [ 99.174995][ T4843] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 100.235471][ T4865] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.685492][ T4872] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.985551][ T4896] ubi0: attaching mtd0 [ 103.015613][ T4896] ubi0: scanning is finished [ 103.070166][ T4896] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 103.228141][ T4900] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 103.290961][ T4902] loop4: detected capacity change from 0 to 128 [ 103.337841][ T4902] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.606477][ T4902] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 103.721463][ T4902] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.241988][ T4926] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.149268][ T4909] loop1: detected capacity change from 0 to 32768 [ 106.339092][ T4909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.166 (4909) [ 106.646966][ T4909] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 106.684441][ T4909] BTRFS info (device loop1): setting nodatacow, compression disabled [ 106.716014][ T4938] loop2: detected capacity change from 0 to 512 [ 106.762611][ T4909] BTRFS info (device loop1): disabling tree log [ 106.781824][ T4909] BTRFS info (device loop1): max_inline at 0 [ 106.815927][ T4909] BTRFS info (device loop1): using free space tree [ 106.823513][ T4909] BTRFS info (device loop1): has skinny extents [ 106.959052][ T4938] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 107.004313][ T4938] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.033856][ T4909] BTRFS error (device loop1): open_ctree failed: -12 [ 107.131677][ T4967] ubi0: attaching mtd0 [ 107.140451][ T4967] ubi0: scanning is finished [ 107.319065][ T4967] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 108.368299][ T4201] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4201) [ 108.842536][ T4994] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.492350][ T5022] comedi comedi2: das16m1: I/O port conflict (0x20140,16) [ 112.704009][ T5025] loop3: detected capacity change from 0 to 512 [ 113.362756][ T5030] loop2: detected capacity change from 0 to 256 [ 113.499348][ T5025] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 113.595641][ T5025] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.731468][ T5040] netlink: 'syz.1.197': attribute type 5 has an invalid length. [ 114.064080][ T5048] loop1: detected capacity change from 0 to 512 [ 114.279604][ T5048] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 114.324958][ T5048] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.126673][ T5057] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.383384][ T5064] loop4: detected capacity change from 0 to 8 [ 116.649108][ T5066] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.901008][ T5066] warn_alloc: 2 callbacks suppressed [ 116.901043][ T5066] syz.3.202: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 117.088350][ T5073] Zero length message leads to an empty skb [ 117.110701][ T5066] ,cpuset=syz3,mems_allowed=0-1 [ 117.194651][ T5066] CPU: 1 PID: 5066 Comm: syz.3.202 Not tainted syzkaller #0 [ 117.202001][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.212244][ T5066] Call Trace: [ 117.215544][ T5066] [ 117.218580][ T5066] dump_stack_lvl+0x188/0x250 [ 117.223272][ T5066] ? rcu_lock_release+0x5/0x20 [ 117.228046][ T5066] ? show_regs_print_info+0x20/0x20 [ 117.233288][ T5066] ? load_image+0x410/0x410 [ 117.237898][ T5066] ? __rcu_read_unlock+0x78/0xd0 [ 117.242846][ T5066] warn_alloc+0x245/0x320 [ 117.247184][ T5066] ? zone_watermark_ok_safe+0x250/0x250 [ 117.252738][ T5066] ? __get_vm_area_node+0x164/0x2d0 [ 117.257937][ T5066] ? kfree+0xef/0x2a0 [ 117.261935][ T5066] __vmalloc_node_range+0x2b1/0x8b0 [ 117.267148][ T5066] ? vidtv_mux_init+0x200/0x1950 [ 117.272177][ T5066] vzalloc+0x75/0x80 [ 117.276081][ T5066] ? vidtv_mux_init+0x200/0x1950 [ 117.281023][ T5066] vidtv_mux_init+0x200/0x1950 [ 117.285977][ T5066] ? __mutex_lock_common+0x44c/0x2400 [ 117.291454][ T5066] vidtv_start_feed+0x368/0x590 [ 117.296502][ T5066] ? vidtv_i2c_func+0x10/0x10 [ 117.301277][ T5066] ? vidtv_stop_feed+0x250/0x250 [ 117.306283][ T5066] ? _raw_spin_unlock_irq+0x1f/0x40 [ 117.312377][ T5066] ? lockdep_hardirqs_on+0x94/0x140 [ 117.317597][ T5066] dmx_ts_feed_start_filtering+0x11c/0x210 [ 117.323435][ T5066] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 117.329336][ T5066] dvb_dmxdev_filter_start+0x422/0x1060 [ 117.334992][ T5066] dvb_demux_do_ioctl+0x48d/0x530 [ 117.340039][ T5066] dvb_usercopy+0x191/0x2b0 [ 117.344656][ T5066] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 117.350213][ T5066] ? dvb_generic_ioctl+0xb0/0xb0 [ 117.355193][ T5066] ? dvb_demux_poll+0x210/0x210 [ 117.360158][ T5066] dvb_demux_ioctl+0x25/0x30 [ 117.364756][ T5066] __se_sys_ioctl+0xfa/0x170 [ 117.369350][ T5066] do_syscall_64+0x4c/0xa0 [ 117.373772][ T5066] ? clear_bhb_loop+0x30/0x80 [ 117.378470][ T5066] ? clear_bhb_loop+0x30/0x80 [ 117.383158][ T5066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.389156][ T5066] RIP: 0033:0x7f995cb12559 [ 117.393577][ T5066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.413450][ T5066] RSP: 002b:00007f995ad6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.421883][ T5066] RAX: ffffffffffffffda RBX: 00007f995cd99fa0 RCX: 00007f995cb12559 [ 117.429866][ T5066] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 117.437855][ T5066] RBP: 00007f995cba98b0 R08: 0000000000000000 R09: 0000000000000000 [ 117.445883][ T5066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.453859][ T5066] R13: 00007f995cd9a038 R14: 00007f995cd99fa0 R15: 00007ffcdeca1a68 [ 117.461959][ T5066] [ 117.486960][ T5066] Mem-Info: [ 117.490235][ T5066] active_anon:3185 inactive_anon:8827 isolated_anon:0 [ 117.490235][ T5066] active_file:4728 inactive_file:36579 isolated_file:0 [ 117.490235][ T5066] unevictable:768 dirty:191 writeback:0 [ 117.490235][ T5066] slab_reclaimable:20892 slab_unreclaimable:100913 [ 117.490235][ T5066] mapped:32464 shmem:7437 pagetables:654 bounce:0 [ 117.490235][ T5066] kernel_misc_reclaimable:0 [ 117.490235][ T5066] free:1370280 free_pcp:12766 free_cma:0 [ 117.630568][ T5066] Node 0 active_anon:1308kB inactive_anon:23096kB active_file:18704kB inactive_file:146316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118356kB dirty:664kB writeback:0kB shmem:4668kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10716kB pagetables:2416kB all_unreclaimable? no [ 117.691484][ T5066] Node 1 active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 117.720965][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.744548][ T5066] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.771758][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.780229][ T5076] loop2: detected capacity change from 0 to 128 [ 117.800467][ T5076] EXT4-fs (loop2): Test dummy encryption mode enabled [ 117.811299][ T5066] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 117.818099][ T5066] Node 0 DMA32 free:1579160kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1252kB inactive_anon:23152kB active_file:18680kB inactive_file:146300kB unevictable:1536kB writepending:396kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:37380kB local_pcp:17292kB free_cma:0kB [ 117.848402][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.866377][ T5076] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 117.983819][ T5083] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.116210][ T5076] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.138577][ T5066] lowmem_reserve[]: 0 0 0 0 0 [ 118.264204][ T5066] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.357196][ T5066] lowmem_reserve[]: 0 0 0 0 0 [ 118.362198][ T5066] Node 1 Normal free:3907872kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:15608kB local_pcp:11716kB free_cma:0kB [ 118.416401][ T5088] loop0: detected capacity change from 0 to 128 [ 118.426280][ T5066] lowmem_reserve[]: 0 0 0 0 0 [ 118.433767][ T5066] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.460166][ T5066] Node 0 DMA32: 1148*4kB (UME) 855*8kB (UME) 277*16kB (UME) 315*32kB (UM) 83*64kB (UM) 21*128kB (UME) 6*256kB (UME) 5*512kB (ME) 2*1024kB (UE) 4*2048kB (UME) 373*4096kB (UM) = 1576088kB [ 118.479183][ T5088] EXT4-fs (loop0): Test dummy encryption mode enabled [ 118.488979][ T5066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 118.502958][ T5066] Node 1 Normal: 64*4kB (U) 16*8kB (UE) 14*16kB (UME) 74*32kB (UE) 30*64kB (UME) 16*128kB (UME) 4*256kB (UM) 1*512kB (U) 2*1024kB (UE) 1*2048kB (M) 951*4096kB (M) = 3907872kB [ 118.510483][ T5088] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 118.521903][ T5066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.711116][ T5066] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.714427][ T5088] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.793018][ T5093] rxe_eth0 speed is unknown, defaulting to 1000 [ 119.435604][ T5066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.445662][ T5066] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.457406][ T5066] 42978 total pagecache pages [ 119.475783][ T5066] 0 pages in swap cache [ 119.489548][ T5066] Swap cache stats: add 0, delete 0, find 0/0 [ 119.502223][ T5066] Free swap = 124996kB [ 119.511920][ T5066] Total swap = 124996kB [ 119.540691][ T5066] 2097051 pages RAM [ 119.554807][ T5066] 0 pages HighMem/MovableOnly [ 119.565258][ T5066] 415313 pages reserved [ 119.578653][ T5066] 0 pages cma reserved [ 119.701717][ T5095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.773325][ T5101] loop3: detected capacity change from 0 to 256 [ 119.923877][ T5105] loop2: detected capacity change from 0 to 512 [ 120.149059][ T5105] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 120.563405][ T5105] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.642085][ T5114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.238909][ T5147] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.946009][ T5153] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.258643][ T5155] loop0: detected capacity change from 0 to 128 [ 124.278074][ T5155] EXT4-fs (loop0): Test dummy encryption mode enabled [ 124.376992][ T5155] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 124.437700][ T5163] loop1: detected capacity change from 0 to 128 [ 124.511786][ T5163] EXT4-fs (loop1): Test dummy encryption mode enabled [ 124.545196][ T5155] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.154929][ T5163] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 125.340404][ T5163] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.757139][ T5192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.815851][ T5193] loop1: detected capacity change from 0 to 512 [ 127.449132][ T5203] rxe_eth0 speed is unknown, defaulting to 1000 [ 128.046895][ T5193] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 128.071420][ T5193] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.912421][ T5220] loop4: detected capacity change from 0 to 8 [ 130.037124][ T5231] loop0: detected capacity change from 0 to 16 [ 130.068047][ T5231] erofs: (device loop0): mounted with root inode @ nid 36. [ 130.131990][ T5234] netlink: 'syz.4.250': attribute type 2 has an invalid length. [ 130.147195][ T5231] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 1862 in[58, 4038] out[2639] [ 130.174680][ T5235] loop3: detected capacity change from 0 to 512 [ 130.186880][ T5234] netlink: 36 bytes leftover after parsing attributes in process `syz.4.250'. [ 130.215503][ T5231] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 130.419451][ T5241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 130.583295][ T5235] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 130.890000][ T5235] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.669674][ T5265] ubi0: attaching mtd0 [ 133.018503][ T5265] ubi0: scanning is finished [ 133.024632][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.031813][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.123541][ T5265] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 133.131394][ T5265] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 133.139311][ T5265] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 133.146447][ T5265] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 133.153965][ T5265] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 133.161034][ T5265] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 133.169325][ T5265] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1434280320 [ 133.179556][ T5265] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 133.206236][ T5269] ubi0: background thread "ubi_bgt0d" started, PID 5269 [ 134.212308][ T5282] loop2: detected capacity change from 0 to 128 [ 134.265540][ T5282] EXT4-fs (loop2): Test dummy encryption mode enabled [ 134.331802][ T5282] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 134.331920][ T5282] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.622132][ T5298] loop1: detected capacity change from 0 to 512 [ 135.660778][ T5301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.706270][ T5301] warn_alloc: 2 callbacks suppressed [ 135.706304][ T5301] syz.2.266: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 135.901822][ T5301] CPU: 1 PID: 5301 Comm: syz.2.266 Not tainted syzkaller #0 [ 135.909344][ T5301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.919688][ T5301] Call Trace: [ 135.923067][ T5301] [ 135.926194][ T5301] dump_stack_lvl+0x188/0x250 [ 135.930902][ T5301] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 135.936762][ T5301] ? show_regs_print_info+0x20/0x20 [ 135.942256][ T5301] ? load_image+0x410/0x410 [ 135.947249][ T5301] ? _printk+0x11/0x130 [ 135.951665][ T5301] warn_alloc+0x245/0x320 [ 135.956022][ T5301] ? zone_watermark_ok_safe+0x250/0x250 [ 135.961644][ T5301] ? __get_vm_area_node+0x164/0x2d0 [ 135.966850][ T5301] ? kfree+0xef/0x2a0 [ 135.970849][ T5301] __vmalloc_node_range+0x2b1/0x8b0 [ 135.976062][ T5301] ? vidtv_mux_init+0x200/0x1950 [ 135.981009][ T5301] vzalloc+0x75/0x80 [ 135.985003][ T5301] ? vidtv_mux_init+0x200/0x1950 [ 135.989952][ T5301] vidtv_mux_init+0x200/0x1950 [ 135.994726][ T5301] ? __mutex_lock_common+0x435/0x2400 [ 136.000110][ T5301] vidtv_start_feed+0x368/0x590 [ 136.004977][ T5301] ? vidtv_i2c_func+0x10/0x10 [ 136.009835][ T5301] ? vidtv_stop_feed+0x250/0x250 [ 136.014786][ T5301] ? _raw_spin_unlock_irq+0x1f/0x40 [ 136.019993][ T5301] ? lockdep_hardirqs_on+0x94/0x140 [ 136.025212][ T5301] dmx_ts_feed_start_filtering+0x11c/0x210 [ 136.031116][ T5301] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 136.037027][ T5301] dvb_dmxdev_filter_start+0x422/0x1060 [ 136.042589][ T5301] dvb_demux_do_ioctl+0x48d/0x530 [ 136.047706][ T5301] dvb_usercopy+0x191/0x2b0 [ 136.052216][ T5301] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 136.057936][ T5301] ? dvb_generic_ioctl+0xb0/0xb0 [ 136.062898][ T5301] ? dvb_demux_poll+0x210/0x210 [ 136.067763][ T5301] dvb_demux_ioctl+0x25/0x30 [ 136.072396][ T5301] __se_sys_ioctl+0xfa/0x170 [ 136.076994][ T5301] do_syscall_64+0x4c/0xa0 [ 136.081512][ T5301] ? clear_bhb_loop+0x30/0x80 [ 136.086381][ T5301] ? clear_bhb_loop+0x30/0x80 [ 136.091161][ T5301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.097058][ T5301] RIP: 0033:0x7f3db1721559 [ 136.101530][ T5301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.121669][ T5301] RSP: 002b:00007f3daf979028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.130306][ T5301] RAX: ffffffffffffffda RBX: 00007f3db19a8fa0 RCX: 00007f3db1721559 [ 136.138404][ T5301] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 136.146744][ T5301] RBP: 00007f3db17b88b0 R08: 0000000000000000 R09: 0000000000000000 [ 136.154733][ T5301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.162704][ T5301] R13: 00007f3db19a9038 R14: 00007f3db19a8fa0 R15: 00007ffc7a8cf798 [ 136.170691][ T5301] [ 136.195303][ T5301] Mem-Info: [ 136.198794][ T5301] active_anon:320 inactive_anon:7669 isolated_anon:0 [ 136.198794][ T5301] active_file:4754 inactive_file:36549 isolated_file:0 [ 136.198794][ T5301] unevictable:768 dirty:140 writeback:0 [ 136.198794][ T5301] slab_reclaimable:21021 slab_unreclaimable:99151 [ 136.198794][ T5301] mapped:29594 shmem:1699 pagetables:666 bounce:0 [ 136.198794][ T5301] kernel_misc_reclaimable:0 [ 136.198794][ T5301] free:1375311 free_pcp:13198 free_cma:0 [ 136.241216][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.284375][ T5298] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 136.315603][ T5298] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.327547][ T5301] Node 0 active_anon:1248kB inactive_anon:30964kB active_file:18808kB inactive_file:146196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118376kB dirty:560kB writeback:0kB shmem:4716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11228kB pagetables:2664kB all_unreclaimable? no [ 136.363091][ T5301] Node 1 active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 136.394120][ T5301] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.421800][ T5301] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 136.471830][ T5301] Node 0 DMA32 free:1581488kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1248kB inactive_anon:30764kB active_file:18808kB inactive_file:146196kB unevictable:1536kB writepending:560kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:34028kB local_pcp:20768kB free_cma:0kB [ 136.502482][ T5301] lowmem_reserve[]: 0 0 0 0 0 [ 136.580356][ T5301] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.626606][ T5301] lowmem_reserve[]: 0 0 0 0 0 [ 137.157934][ T5301] Node 1 Normal free:3907872kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:15612kB local_pcp:3896kB free_cma:0kB [ 137.187279][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.200151][ T5301] lowmem_reserve[]: 0 0 0 0 0 [ 137.222934][ T5301] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.275498][ T5301] Node 0 DMA32: 346*4kB (UME) 83*8kB (UME) 116*16kB (UME) 565*32kB (UME) 138*64kB (UME) 33*128kB (UME) 12*256kB (UM) 7*512kB (UME) 1*1024kB (E) 3*2048kB (UME) 374*4096kB (UM) = 1580768kB [ 137.417723][ T5301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 137.459312][ T5301] Node 1 Normal: 64*4kB (U) 16*8kB (UE) 14*16kB (UME) 74*32kB (UE) 30*64kB (UME) 16*128kB (UME) 4*256kB (UM) 1*512kB (U) 2*1024kB (UE) 1*2048kB (M) 951*4096kB (M) = 3907872kB [ 137.477026][ T5301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.488434][ T5301] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.498659][ T5301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.646151][ T5301] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.775626][ T5301] 45803 total pagecache pages [ 137.878438][ T5301] 0 pages in swap cache [ 138.033300][ T5301] Swap cache stats: add 0, delete 0, find 0/0 [ 138.039662][ T5301] Free swap = 124996kB [ 138.043916][ T5301] Total swap = 124996kB [ 138.062388][ T5301] 2097051 pages RAM [ 138.066645][ T5301] 0 pages HighMem/MovableOnly [ 138.071453][ T5301] 415313 pages reserved [ 138.076476][ T5301] 0 pages cma reserved [ 138.123777][ T5323] loop2: detected capacity change from 0 to 64 [ 138.188456][ T5324] ubi: mtd0 is already attached to ubi0 [ 138.865082][ T5330] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.604208][ T5333] loop0: detected capacity change from 0 to 512 [ 139.736471][ T5333] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 139.814003][ T5333] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.831996][ T5343] loop4: detected capacity change from 0 to 512 [ 139.863434][ T5344] loop3: detected capacity change from 0 to 512 [ 139.989838][ T5349] ubi: mtd0 is already attached to ubi0 [ 140.173079][ T5343] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 140.426602][ T5344] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 140.532218][ T5343] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.544351][ T5347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.551293][ T5344] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.042693][ T5360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.563074][ T5368] loop2: detected capacity change from 0 to 128 [ 141.985211][ T5368] EXT4-fs (loop2): Test dummy encryption mode enabled [ 142.044832][ T5368] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 142.112375][ T5368] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.638707][ T5385] loop2: detected capacity change from 0 to 256 [ 142.720743][ T5387] ubi: mtd0 is already attached to ubi0 [ 144.015475][ T5399] ubi: mtd0 is already attached to ubi0 [ 144.784942][ T5404] loop1: detected capacity change from 0 to 512 [ 144.937954][ T5406] ------------[ cut here ]------------ [ 144.981991][ T5406] kernel BUG at arch/x86/mm/physaddr.c:28! [ 144.991942][ T5406] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 144.998145][ T5406] CPU: 0 PID: 5406 Comm: syz.2.294 Not tainted syzkaller #0 [ 145.005556][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.015876][ T5406] RIP: 0010:__phys_addr+0x158/0x170 [ 145.021093][ T5406] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 [ 145.040969][ T5406] RSP: 0018:ffffc90003b1f820 EFLAGS: 00010287 [ 145.047043][ T5406] RAX: ffffffff81360e88 RBX: 00004080034a1000 RCX: 0000000000080000 [ 145.055026][ T5406] RDX: ffffc900052a9000 RSI: 0000000000000e09 RDI: 0000000000000e0a [ 145.063044][ T5406] RBP: ffffc90003b1f998 R08: 0000000000000040 R09: 1ffffffff1a3e6e6 [ 145.071030][ T5406] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff88801b993310 [ 145.079037][ T5406] R13: ffff88801b993340 R14: 000000000000002e R15: 0000000000000001 [ 145.087022][ T5406] FS: 00007f3daf9796c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 145.096393][ T5406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.103072][ T5406] CR2: 00007f3daf958d58 CR3: 000000002b8dd000 CR4: 00000000003506f0 [ 145.113642][ T5406] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.123184][ T5406] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.127377][ T5410] loop3: detected capacity change from 0 to 512 [ 145.131424][ T5406] Call Trace: [ 145.131435][ T5406] [ 145.131442][ T5406] ? vidtv_s302m_encoder_init+0x573/0x770 [ 145.131466][ T5406] kfree+0x64/0x2a0 [ 145.155074][ T5406] ? kmem_cache_alloc_trace+0x18d/0x290 [ 145.160637][ T5406] ? vidtv_s302m_encoder_init+0x322/0x770 [ 145.167105][ T5406] vidtv_s302m_encoder_init+0x573/0x770 [ 145.173136][ T5406] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 145.179275][ T5406] vidtv_channel_s302m_init+0x357/0x830 [ 145.185019][ T5406] vidtv_channels_init+0x41/0x90 [ 145.189972][ T5406] vidtv_mux_init+0x4d0/0x1950 [ 145.194869][ T5406] ? __mutex_lock_common+0x435/0x2400 [ 145.200502][ T5406] vidtv_start_feed+0x368/0x590 [ 145.205451][ T5406] ? vidtv_i2c_func+0x10/0x10 [ 145.210292][ T5406] ? vidtv_stop_feed+0x250/0x250 [ 145.215240][ T5406] ? _raw_spin_unlock_irq+0x1f/0x40 [ 145.220734][ T5406] ? lockdep_hardirqs_on+0x94/0x140 [ 145.225937][ T5406] dmx_ts_feed_start_filtering+0x11c/0x210 [ 145.231845][ T5406] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 145.237907][ T5406] dvb_dmxdev_filter_start+0x422/0x1060 [ 145.243444][ T5406] dvb_demux_do_ioctl+0x48d/0x530 [ 145.248454][ T5406] dvb_usercopy+0x191/0x2b0 [ 145.252977][ T5406] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 145.258503][ T5406] ? dvb_generic_ioctl+0xb0/0xb0 [ 145.263589][ T5406] ? dvb_demux_poll+0x210/0x210 [ 145.268445][ T5406] dvb_demux_ioctl+0x25/0x30 [ 145.273124][ T5406] __se_sys_ioctl+0xfa/0x170 [ 145.277856][ T5406] do_syscall_64+0x4c/0xa0 [ 145.282442][ T5406] ? clear_bhb_loop+0x30/0x80 [ 145.287313][ T5406] ? clear_bhb_loop+0x30/0x80 [ 145.292106][ T5406] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.297993][ T5406] RIP: 0033:0x7f3db1721559 [ 145.302658][ T5406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.322268][ T5406] RSP: 002b:00007f3daf979028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.330857][ T5406] RAX: ffffffffffffffda RBX: 00007f3db19a8fa0 RCX: 00007f3db1721559 [ 145.339029][ T5406] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 145.347208][ T5406] RBP: 00007f3db17b88b0 R08: 0000000000000000 R09: 0000000000000000 [ 145.355318][ T5406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.363495][ T5406] R13: 00007f3db19a9038 R14: 00007f3db19a8fa0 R15: 00007ffc7a8cf798 [ 145.371826][ T5406] [ 145.374880][ T5406] Modules linked in: [ 145.378997][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.410393][ T5406] ---[ end trace 21a243c5abd9cde0 ]--- [ 145.424727][ T5404] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 145.427296][ T5406] RIP: 0010:__phys_addr+0x158/0x170 [ 145.445505][ T5404] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.532816][ T5406] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 [ 145.585468][ T5406] RSP: 0018:ffffc90003b1f820 EFLAGS: 00010287 [ 145.591731][ T5406] RAX: ffffffff81360e88 RBX: 00004080034a1000 RCX: 0000000000080000 [ 145.761423][ T5406] RDX: ffffc900052a9000 RSI: 0000000000000e09 RDI: 0000000000000e0a [ 145.803310][ T5406] RBP: ffffc90003b1f998 R08: 0000000000000040 R09: 1ffffffff1a3e6e6 [ 145.835454][ T5406] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff88801b993310 [ 145.859488][ T5406] R13: ffff88801b993340 R14: 000000000000002e R15: 0000000000000001 [ 145.878043][ T5406] FS: 00007f3daf9796c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 145.900004][ T5406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.913023][ T5406] CR2: 0000200000385030 CR3: 000000002b8dd000 CR4: 00000000003506e0 [ 145.929478][ T5406] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.938726][ T5406] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.940017][ T5410] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 145.948652][ T5406] Kernel panic - not syncing: Fatal exception [ 145.959128][ T5410] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.965674][ T5406] Kernel Offset: disabled