last executing test programs: 9.237352299s ago: executing program 0 (id=387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a0b0400000000000000000200000248000480440001800b00010074617267657400003400028008000240000000010d000100434f4e4e4d41524b000000ea14000300e4624777db9d97adbf2cd16d6fb1131fe40000000900020073797a32000000000900010073797a30"], 0x9c}}, 0x0) 9.168127219s ago: executing program 0 (id=392): ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000000c0)) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010002}}}}}, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r0) 9.105503727s ago: executing program 0 (id=393): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c) 9.10519623s ago: executing program 0 (id=395): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4003}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 9.104713846s ago: executing program 0 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 8.229501822s ago: executing program 0 (id=408): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000040)=0x9, 0x4) 2.621497589s ago: executing program 1 (id=519): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) 2.621215566s ago: executing program 1 (id=520): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x8, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xffffb5fb, 0x0, 0x0, 0x0, 0x8ec4, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x7e) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000200)=0x2, 0x4) connect$bt_rfcomm(r0, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc8}}}, 0x6) 1.757790049s ago: executing program 1 (id=525): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") rseq(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xb42, 0x168) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.570290032s ago: executing program 3 (id=531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) 1.525481029s ago: executing program 1 (id=533): socket$igmp6(0xa, 0x3, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) fsmount(r3, 0x1, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0xc) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 1.037507261s ago: executing program 4 (id=536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000040)='smaps_rollup\x00') exit(0xffff) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.037265496s ago: executing program 3 (id=537): r0 = semget(0x1, 0x4, 0x3bf) semop(r0, &(0x7f0000000340)=[{0x3, 0x800f, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 885.254348ms ago: executing program 2 (id=541): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 869.642819ms ago: executing program 2 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c0019800800", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 846.265449ms ago: executing program 2 (id=543): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) 781.421365ms ago: executing program 2 (id=544): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xd7, 0x7, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x20, 0x8000, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x4e25, @remote}}) 781.30199ms ago: executing program 2 (id=545): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x6000)=nil, 0x6000, 0xf) 781.171259ms ago: executing program 2 (id=546): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000400000000000000ff010000852000003547010085200000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000540)={0x6, 'dvmrp0\x00', {0x1}, 0xc}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffe}}) 428.895776ms ago: executing program 1 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='usb_gadget/g1\x00', 0x0) mkdirat(r0, &(0x7f0000000080)='usb_gadget/g1/functions/uvc.usb0\x00', 0x0) r1 = openat(r0, &(0x7f00000000c0)='usb_gadget/g1/functions/uvc.usb0/streaming_maxpacket\x00', 0x1, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) write(r1, &(0x7f0000000100)='6', 0x1) 404.514186ms ago: executing program 1 (id=548): syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300090585"], 0x0) 157.587865ms ago: executing program 4 (id=549): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) sync() 157.102634ms ago: executing program 3 (id=550): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nouid32}, {@noquota}, {@nouid32}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000800)=@xdp={0x2c, 0x1, 0x0, 0x28}, 0x80, 0x0}}], 0x1, 0x2000c840) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x1b, 0x0, [{0x70000, 0x79, &(0x7f0000000680)=""/121}, {0xeeef0000, 0x2f, &(0x7f0000000700)=""/47}, {0x200000, 0x36, &(0x7f0000000740)=""/54}]}) 137.863323ms ago: executing program 4 (id=551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x2004c8c0, &(0x7f0000000100)={0xa, 0x4e26, 0x1, @local}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}], 0x400000000000049, 0x400c404) close_range(r0, 0xffffffffffffffff, 0x0) 90.806586ms ago: executing program 3 (id=552): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xfff, 0xd5}) 37.525138ms ago: executing program 4 (id=553): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @broadcast}}]}, 0x210) 37.399282ms ago: executing program 3 (id=554): socket$key(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) unshare(0x22020400) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 30.592288ms ago: executing program 4 (id=555): r0 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 305.36µs ago: executing program 3 (id=556): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b45, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711815000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000040)="c09503bb7321b89b7bc0acfd2250b5329b4a59fe7098cf09276c", 0x1a, 0x5) 0s ago: executing program 4 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180100002020692500000000002020207b1af8ff00000000bfa1000000000000070100000700ffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0xb}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 28.855605][ T4696] cgroup: Unknown subsys name 'net' [ 28.956982][ T4696] cgroup: Unknown subsys name 'cpuset' [ 28.959112][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.126034][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.996866][ T4710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.998630][ T4710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.000426][ T4710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.002210][ T4710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.004006][ T4710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.011304][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.011694][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.011863][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.012185][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.012390][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.030427][ T4712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.030888][ T4712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.031045][ T4712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.031349][ T4712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.031847][ T4712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.045660][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.051734][ T4726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.053271][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.055118][ T4710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.055183][ T4710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.055585][ T4710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.056147][ T4710] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.056558][ T4710] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.057036][ T4710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.075166][ T4710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.396887][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.397164][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.397240][ T4709] bridge_slave_0: entered allmulticast mode [ 30.397736][ T4709] bridge_slave_0: entered promiscuous mode [ 30.401826][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.401850][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.401904][ T4709] bridge_slave_1: entered allmulticast mode [ 30.402322][ T4709] bridge_slave_1: entered promiscuous mode [ 30.435015][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.435989][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.454138][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.454189][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.454252][ T4708] bridge_slave_0: entered allmulticast mode [ 30.454954][ T4708] bridge_slave_0: entered promiscuous mode [ 30.456161][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.456199][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.456283][ T4708] bridge_slave_1: entered allmulticast mode [ 30.456700][ T4708] bridge_slave_1: entered promiscuous mode [ 30.464202][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.468300][ T4709] team0: Port device team_slave_0 added [ 30.472455][ T4709] team0: Port device team_slave_1 added [ 30.482464][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.484224][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.484278][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.484749][ T4718] bridge_slave_0: entered allmulticast mode [ 30.485203][ T4718] bridge_slave_0: entered promiscuous mode [ 30.486208][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.486234][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.486284][ T4718] bridge_slave_1: entered allmulticast mode [ 30.486730][ T4718] bridge_slave_1: entered promiscuous mode [ 30.490703][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.490731][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.490802][ T4714] bridge_slave_0: entered allmulticast mode [ 30.491284][ T4714] bridge_slave_0: entered promiscuous mode [ 30.492811][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.492820][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.492832][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.493957][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.493964][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.493974][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.498140][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.498175][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.498489][ T4719] bridge_slave_0: entered allmulticast mode [ 30.498907][ T4719] bridge_slave_0: entered promiscuous mode [ 30.499936][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.499958][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.500042][ T4719] bridge_slave_1: entered allmulticast mode [ 30.500468][ T4719] bridge_slave_1: entered promiscuous mode [ 30.515908][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.515969][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.516017][ T4714] bridge_slave_1: entered allmulticast mode [ 30.516429][ T4714] bridge_slave_1: entered promiscuous mode [ 30.524277][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.529209][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.535300][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.536344][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.540149][ T4708] team0: Port device team_slave_0 added [ 30.540961][ T4708] team0: Port device team_slave_1 added [ 30.544857][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.545628][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.566632][ T4719] team0: Port device team_slave_0 added [ 30.567946][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.567969][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.567985][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.568504][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.568511][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.568526][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.578325][ T4708] hsr_slave_0: entered promiscuous mode [ 30.578653][ T4708] hsr_slave_1: entered promiscuous mode [ 30.595325][ T4709] hsr_slave_0: entered promiscuous mode [ 30.595627][ T4709] hsr_slave_1: entered promiscuous mode [ 30.595819][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.595849][ T4709] Cannot create hsr debugfs directory [ 30.596497][ T4714] team0: Port device team_slave_0 added [ 30.597320][ T4714] team0: Port device team_slave_1 added [ 30.603562][ T4719] team0: Port device team_slave_1 added [ 30.607348][ T4718] team0: Port device team_slave_0 added [ 30.609229][ T4718] team0: Port device team_slave_1 added [ 30.613258][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.613379][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.613397][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.613997][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.614004][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.614018][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.637116][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.637137][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.637152][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.637933][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.637941][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.637957][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.645546][ T4714] hsr_slave_0: entered promiscuous mode [ 30.645836][ T4714] hsr_slave_1: entered promiscuous mode [ 30.646010][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.646019][ T4714] Cannot create hsr debugfs directory [ 30.664150][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.665867][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.666013][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.672160][ T4719] hsr_slave_0: entered promiscuous mode [ 30.672428][ T4719] hsr_slave_1: entered promiscuous mode [ 30.672605][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 30.672614][ T4719] Cannot create hsr debugfs directory [ 30.687889][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.687914][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.687931][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.717570][ T4718] hsr_slave_0: entered promiscuous mode [ 30.719113][ T4718] hsr_slave_1: entered promiscuous mode [ 30.720414][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.721489][ T4718] Cannot create hsr debugfs directory [ 30.784003][ T4708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.786993][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.791981][ T4708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.794099][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.796229][ T4708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.798839][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.802995][ T4708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.806021][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.827324][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.827390][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.827536][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.827569][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.837329][ T4714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.839278][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.840002][ T4714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.841799][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.846244][ T4714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.848564][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.849012][ T4714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.850680][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.869105][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.871441][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.873070][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.875467][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.876281][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.876306][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.876384][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.876413][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.895816][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.899339][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.900838][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.902862][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.906585][ T4719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.908827][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.913888][ T4719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.916499][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.918324][ T4719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.920327][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.929173][ T4719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.931336][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.940114][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.948199][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.956069][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.957604][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.959883][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.961452][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.970550][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.978948][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.980337][ T4718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.982431][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.983074][ T4718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.985838][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.988803][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.988861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.991635][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.991668][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.997210][ T4718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.999344][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.999653][ T4718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.001365][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.006571][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.006614][ T3831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.020136][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.020175][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.052274][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.052309][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.072470][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.076768][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.083156][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.086471][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.091579][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.108212][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.108249][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.108620][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.108646][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.138289][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.138331][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.138708][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.138726][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.152460][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.170507][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.170546][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.180075][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.180228][ T3831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.284864][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.322655][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.326648][ T4714] veth0_vlan: entered promiscuous mode [ 31.330555][ T4714] veth1_vlan: entered promiscuous mode [ 31.341362][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.352773][ T4709] veth0_vlan: entered promiscuous mode [ 31.363290][ T4709] veth1_vlan: entered promiscuous mode [ 31.368620][ T4714] veth0_macvtap: entered promiscuous mode [ 31.371273][ T4714] veth1_macvtap: entered promiscuous mode [ 31.376073][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.378578][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.396511][ T4709] veth0_macvtap: entered promiscuous mode [ 31.397852][ T4709] veth1_macvtap: entered promiscuous mode [ 31.409892][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.411768][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.413521][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.417747][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.430133][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.433969][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.448289][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.448460][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.448596][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.448701][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.457982][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.479685][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.479719][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.493143][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.524699][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.524725][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.528922][ T4718] veth0_vlan: entered promiscuous mode [ 31.530594][ T4719] veth0_vlan: entered promiscuous mode [ 31.541284][ T4718] veth1_vlan: entered promiscuous mode [ 31.542454][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.542478][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.547000][ T4708] veth0_vlan: entered promiscuous mode [ 31.553485][ T4708] veth1_vlan: entered promiscuous mode [ 31.558788][ T4719] veth1_vlan: entered promiscuous mode [ 31.566585][ T4718] veth0_macvtap: entered promiscuous mode [ 31.574809][ T4718] veth1_macvtap: entered promiscuous mode [ 31.581125][ T4708] veth0_macvtap: entered promiscuous mode [ 31.581239][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.581253][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.587969][ T4714] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.588317][ T4708] veth1_macvtap: entered promiscuous mode [ 31.591038][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.600270][ T4719] veth0_macvtap: entered promiscuous mode [ 31.613265][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.618425][ T4719] veth1_macvtap: entered promiscuous mode [ 31.626522][ T4870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.626583][ T4870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.626603][ T4870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.626618][ T4870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.651154][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.653729][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.656628][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.657664][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.683295][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683514][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683533][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683549][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683566][ T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683581][ T15] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683596][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.683611][ T15] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.729166][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.729201][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.762886][ T4870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.762914][ T4870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.774786][ T4870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.776419][ T4870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.798992][ T4893] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 31.803131][ T4870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.803185][ T4870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.809970][ T871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.809995][ T871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.821056][ T4870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.821087][ T4870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.074811][ T4710] Bluetooth: hci3: command tx timeout [ 32.074815][ T50] Bluetooth: hci2: command tx timeout [ 32.075050][ T4710] Bluetooth: hci1: command tx timeout [ 32.075127][ T50] Bluetooth: hci0: command tx timeout [ 32.128890][ T4900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.154379][ T4712] Bluetooth: hci4: command tx timeout [ 32.199250][ T4907] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 32.634062][ T4915] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 32.634094][ T4915] syzkaller0: Linktype set failed because interface is up [ 34.154432][ T4710] Bluetooth: hci1: command tx timeout [ 34.154470][ T4710] Bluetooth: hci3: command tx timeout [ 34.154498][ T4710] Bluetooth: hci2: command tx timeout [ 34.155556][ T4712] Bluetooth: hci0: command tx timeout [ 34.364822][ T4712] Bluetooth: hci4: command tx timeout [ 34.465028][ T4970] random: crng reseeded on system resumption [ 34.497665][ T4970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29'. [ 34.499703][ T4971] binder: 4967:4971 tried to acquire reference to desc 0, got 1 instead [ 34.505986][ T4971] binder: 4967:4971 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 34.506022][ T4971] binder: 4971 RLIMIT_NICE not set [ 34.506084][ T4971] binder: 4971 RLIMIT_NICE not set [ 34.506241][ T4971] binder: 4967:4971 got new transaction with bad transaction stack, transaction 5 has target 4967:4971 [ 34.506274][ T4971] binder: 4967:4971 transaction call to 4967:0 failed 6/29201/-71, code 0 size 0-0 line 3312 [ 34.598231][ T4975] netlink: 52 bytes leftover after parsing attributes in process `syz.1.30'. [ 34.745619][ T4975] loop1: detected capacity change from 0 to 256 [ 34.769882][ T39] kworker/u8:2 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 34.769923][ T39] CPU: 1 UID: 0 PID: 39 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT [ 34.769936][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 34.769942][ T39] Workqueue: loop1 loop_rootcg_workfn [ 34.769965][ T39] Call trace: [ 34.769969][ T39] show_stack+0x2c/0x3c (C) [ 34.769984][ T39] __dump_stack+0x30/0x40 [ 34.769995][ T39] dump_stack_lvl+0xd8/0x12c [ 34.770004][ T39] dump_stack+0x1c/0x28 [ 34.770014][ T39] dump_header+0xbc/0x3f0 [ 34.770022][ T39] oom_kill_process+0x248/0x8a0 [ 34.770032][ T39] out_of_memory+0xd24/0x1064 [ 34.770040][ T39] mem_cgroup_out_of_memory+0xe8/0x170 [ 34.770049][ T39] try_charge_memcg+0x8ec/0xc64 [ 34.770056][ T39] charge_memcg+0x17c/0x280 [ 34.770063][ T39] mem_cgroup_swapin_charge_folio+0x2b0/0x3f8 [ 34.770071][ T39] swap_cache_alloc_folio+0x3f4/0x9a4 [ 34.770080][ T39] swap_cache_read_folio+0x60/0x220 [ 34.770088][ T39] swap_cluster_readahead+0x314/0x52c [ 34.770096][ T39] shmem_swapin_folio+0x760/0x20d0 [ 34.770104][ T39] shmem_get_folio_gfp+0x2e0/0x1464 [ 34.770110][ T39] shmem_file_read_iter+0x184/0x9cc [ 34.770118][ T39] lo_rw_aio+0xb08/0xda0 [ 34.770128][ T39] loop_process_work+0x5ac/0xbf0 [ 34.770137][ T39] loop_rootcg_workfn+0x28/0x38 [ 34.770147][ T39] process_scheduled_works+0x788/0x10b8 [ 34.770157][ T39] worker_thread+0x798/0xbd0 [ 34.770165][ T39] kthread+0x304/0x3d4 [ 34.770173][ T39] ret_from_fork+0x10/0x20 [ 34.776537][ T39] memory: usage 96kB, limit 96kB, failcnt 103 [ 34.776547][ T39] memory+swap: usage 196kB, limit 9007199254740988kB, failcnt 0 [ 34.776553][ T39] kmem: usage 44kB, limit 9007199254740988kB, failcnt 0 [ 34.776559][ T39] Memory cgroup stats for /syz1/test: [ 34.776674][ T39] cache 36864 [ 34.776679][ T39] rss 0 [ 34.776683][ T39] rss_huge 0 [ 34.776687][ T39] shmem 32768 [ 34.776690][ T39] mapped_file 0 [ 34.776694][ T39] dirty 0 [ 34.776697][ T39] writeback 0 [ 34.776700][ T39] workingset_refault_anon 12 [ 34.776703][ T39] workingset_refault_file 0 [ 34.776707][ T39] swap 102400 [ 34.776710][ T39] swapcached 188416 [ 34.776713][ T39] pgpgin 57 [ 34.776716][ T39] pgpgout 44 [ 34.776719][ T39] pgfault 42 [ 34.776722][ T39] pgmajfault 2 [ 34.776725][ T39] inactive_anon 49152 [ 34.776728][ T39] active_anon 0 [ 34.776731][ T39] inactive_file 4096 [ 34.776734][ T39] active_file 0 [ 34.776737][ T39] unevictable 0 [ 34.776740][ T39] hierarchical_memory_limit 98304 [ 34.776743][ T39] hierarchical_memsw_limit 9223372036854771712 [ 34.776746][ T39] total_cache 36864 [ 34.776749][ T39] total_rss 0 [ 34.776752][ T39] total_rss_huge 0 [ 34.776755][ T39] total_shmem 32768 [ 34.776758][ T39] total_mapped_file 0 [ 34.776762][ T39] total_dirty 0 [ 34.776769][ T39] total_writeback 0 [ 34.776773][ T39] total_workingset_refault_anon 12 [ 34.776776][ T39] total_workingset_refault_file 0 [ 34.777886][ T39] total_swap 102400 [ 34.777892][ T39] total_swapcached 188416 [ 34.777898][ T39] total_pgpgin 57 [ 34.777904][ T39] total_pgpgout 44 [ 34.777909][ T39] total_pgfault 42 [ 34.777913][ T39] total_pgmajfault 2 [ 34.777917][ T39] total_inactive_anon 49152 [ 34.777921][ T39] total_active_anon 0 [ 34.777925][ T39] total_inactive_file 4096 [ 34.777929][ T39] total_active_file 0 [ 34.777933][ T39] total_unevictable 0 [ 34.777936][ T39] anon_cost 7 [ 34.777940][ T39] file_cost 0 [ 34.777943][ T39] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.30,pid=4974,uid=0 [ 34.778297][ T39] Memory cgroup out of memory: Killed process 4974 (syz.1.30) total-vm:102188kB, anon-rss:1376kB, file-rss:22792kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 34.860641][ T4979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.864080][ T4979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.889451][ T4979] loop1: detected capacity change from 0 to 512 [ 34.958162][ T4979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.026120][ T4990] fuse: Bad value for 'fd' [ 35.097477][ T4994] loop3: detected capacity change from 0 to 1024 [ 35.107589][ T4994] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0) [ 35.222737][ T4998] syz.3.36 uses obsolete (PF_INET,SOCK_PACKET) [ 35.238879][ T5000] ieee802154 phy0 wpan0: encryption failed: -22 [ 35.241124][ T5000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.38'. [ 35.499125][ T11] binder: release 4967:4971 transaction 5 out, still active [ 35.499168][ T11] binder: undelivered TRANSACTION_COMPLETE [ 35.499202][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.529108][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.581650][ T5007] warning: `syz.2.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 35.610555][ T4793] binder: release 4967:4971 transaction 5 in, still active [ 35.610595][ T4793] binder: send failed reply for transaction 5, target dead [ 35.743363][ T5019] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 35.743363][ T5019] The task syz.1.44 (5019) triggered the difference, watch for misbehavior. [ 35.748059][ T5021] fuse: Bad value for 'fd' [ 36.091326][ T5027] nvme_tcp: malformed address passed: :27.0.0.1:4420 [ 36.127597][ T5032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.127785][ T5032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.128153][ T5032] fuse: Unknown parameter 'æd\0x0000000000000008' [ 36.179072][ T5033] capability: warning: `syz.3.49' uses deprecated v2 capabilities in a way that may be insecure [ 36.227879][ T50] Bluetooth: hci2: command tx timeout [ 36.227914][ T50] Bluetooth: hci3: command tx timeout [ 36.227941][ T50] Bluetooth: hci1: command tx timeout [ 36.229072][ T4712] Bluetooth: hci0: command tx timeout [ 36.257029][ T4793] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 36.453115][ T4793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.454224][ T4793] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 36.454242][ T4793] usb 1-1: can't read configurations, error -71 [ 36.559789][ T5035] netlink: 'syz.2.50': attribute type 27 has an invalid length. [ 36.559821][ T5035] netlink: 'syz.2.50': attribute type 4 has an invalid length. [ 36.559840][ T5035] netlink: 140 bytes leftover after parsing attributes in process `syz.2.50'. [ 36.561070][ T5038] netlink: 'syz.4.51': attribute type 1 has an invalid length. [ 36.634833][ T5045] loop4: detected capacity change from 0 to 1024 [ 36.635274][ T5045] ======================================================= [ 36.635274][ T5045] WARNING: The mand mount option has been deprecated and [ 36.635274][ T5045] and is ignored by this kernel. Remove the mand [ 36.635274][ T5045] option from the mount to silence this warning. [ 36.635274][ T5045] ======================================================= [ 36.635321][ T5045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.635330][ T5045] EXT4-fs: inline encryption not supported [ 36.635339][ T5045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.647399][ T5045] EXT4-fs (loop4): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.658541][ T5035] nvme nvme1: failed to connect socket: -111 [ 36.999029][ T4708] EXT4-fs (loop4): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 37.082048][ T4712] Bluetooth: hci4: command tx timeout [ 37.097577][ T5064] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 37.276405][ T5073] loop0: detected capacity change from 0 to 1024 [ 37.277360][ T5066] md: could not open device unknown-block(1,0). [ 37.279393][ T5073] EXT4-fs: Ignoring removed bh option [ 37.281710][ T5073] EXT4-fs (loop0): stripe (32767) is not aligned with cluster size (16), stripe is disabled [ 37.289226][ T5073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.292811][ T5073] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.552064][ T5064] md: could not open device unknown-block(1,1). [ 37.597183][ T5066] md: could not open device unknown-block(1,2). [ 37.625608][ T5079] md: could not open device unknown-block(1,3). [ 38.132290][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.247626][ T4710] Bluetooth: hci3: command tx timeout [ 38.248018][ T4710] Bluetooth: hci2: command tx timeout [ 38.248091][ T4710] Bluetooth: hci0: command tx timeout [ 38.250246][ T4712] Bluetooth: hci1: command tx timeout [ 38.264824][ T5094] FAULT_INJECTION: forcing a failure. [ 38.264824][ T5094] name failslab, interval 1, probability 0, space 0, times 1 [ 38.264892][ T5094] CPU: 0 UID: 0 PID: 5094 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT [ 38.264905][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.264913][ T5094] Call trace: [ 38.264916][ T5094] show_stack+0x2c/0x3c (C) [ 38.264939][ T5094] __dump_stack+0x30/0x40 [ 38.264951][ T5094] dump_stack_lvl+0xd8/0x12c [ 38.264961][ T5094] dump_stack+0x1c/0x28 [ 38.264971][ T5094] should_fail_ex+0x41c/0x590 [ 38.264982][ T5094] should_failslab+0xc4/0x120 [ 38.264990][ T5094] __kmalloc_cache_noprof+0x94/0x5ec [ 38.264999][ T5094] io_ring_ctx_alloc+0x64/0x934 [ 38.265008][ T5094] io_uring_create+0x6c/0x830 [ 38.265016][ T5094] __arm64_sys_io_uring_setup+0x284/0x290 [ 38.265025][ T5094] invoke_syscall+0x98/0x244 [ 38.265035][ T5094] el0_svc_common+0xec/0x23c [ 38.265045][ T5094] do_el0_svc+0x4c/0x5c [ 38.265054][ T5094] el0_svc+0x64/0x260 [ 38.265064][ T5094] el0t_64_sync_handler+0x48/0x148 [ 38.265074][ T5094] el0t_64_sync+0x198/0x19c [ 38.428211][ T5098] Cannot find set identified by id 0 to match [ 38.474091][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 38.494868][ T5102] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.71' sets config #0 [ 38.563784][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 38.565820][ T5106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 38.601144][ T5108] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 38.662686][ T5109] loop4: detected capacity change from 0 to 512 [ 38.663604][ T5109] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 38.674340][ T5109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 38.674452][ T5109] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.674793][ T5109] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.72: bg 0: block 361: padding at end of block bitmap is not set [ 38.674858][ T5109] loop4: lost filesystem error report for type 5 error -117 [ 38.675808][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 38.675818][ C0] EXT4-fs (loop4): initial error at time 524326: ext4_validate_block_bitmap:441 [ 38.675830][ C0] EXT4-fs (loop4): last error at time 524326: ext4_validate_block_bitmap:441 [ 38.681114][ T5109] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 38.681130][ T5109] loop4: lost filesystem error report for type 5 error -117 [ 38.681287][ T5109] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.72: attempt to clear invalid blocks 33619980 len 1 [ 38.681340][ T5109] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.685875][ T5108] md: could not open device unknown-block(1,0). [ 38.687355][ T5109] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.72: invalid indirect mapped block 1811939328 (level 0) [ 38.687372][ T5109] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.687591][ T5109] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.72: invalid indirect mapped block 2185560079 (level 1) [ 38.687608][ T5109] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.690664][ T5109] EXT4-fs (loop4): 1 truncate cleaned up [ 38.696980][ T5109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 38.700740][ T5108] md: could not open device unknown-block(1,1). [ 38.734322][ T5108] md: could not open device unknown-block(1,2). [ 38.773213][ T5108] md: could not open device unknown-block(1,3). [ 38.796983][ T5113] loop1: detected capacity change from 0 to 512 [ 38.801294][ T5113] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.801335][ T5113] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 38.805110][ T5113] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 38.809185][ T5113] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.75: attempt to clear invalid blocks 2 len 1 [ 38.809222][ T5113] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.812029][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 38.812045][ C0] EXT4-fs (loop1): initial error at time 524326: ext4_mb_generate_buddy:1317 [ 38.812061][ C0] EXT4-fs (loop1): last error at time 524326: ext4_mb_generate_buddy:1317 [ 38.820868][ T5113] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.75: invalid indirect mapped block 1819239214 (level 0) [ 38.820910][ T5113] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.824989][ T5113] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.75: invalid indirect mapped block 1819239214 (level 1) [ 38.825579][ T5113] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.826191][ T5113] EXT4-fs (loop1): 1 truncate cleaned up [ 38.826805][ T5113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.840456][ T5113] macvlan1: entered promiscuous mode [ 38.844021][ T5113] macvlan1: left promiscuous mode [ 38.954303][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.071489][ T5122] loop2: detected capacity change from 0 to 512 [ 39.227216][ T5122] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 39.256203][ T5122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 39.256883][ T5122] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.278692][ T5122] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.76: bg 0: block 361: padding at end of block bitmap is not set [ 39.278934][ T5122] loop2: lost filesystem error report for type 5 error -117 [ 39.282105][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 39.282118][ C1] EXT4-fs (loop2): initial error at time 524327: ext4_validate_block_bitmap:441 [ 39.282130][ C1] EXT4-fs (loop2): last error at time 524327: ext4_validate_block_bitmap:441 [ 39.296289][ T5122] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 39.296326][ T5122] loop2: lost filesystem error report for type 5 error -117 [ 39.303552][ T5122] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.76: attempt to clear invalid blocks 33619980 len 1 [ 39.303622][ T5122] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.322802][ T5122] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.76: invalid indirect mapped block 1811939328 (level 0) [ 39.322881][ T5122] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.333297][ T5122] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.76: invalid indirect mapped block 2185560079 (level 1) [ 39.333361][ T5122] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.359747][ T5122] EXT4-fs (loop2): 1 truncate cleaned up [ 39.365070][ T5122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 39.748398][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 39.865547][ T5133] fuse: Bad value for 'user_id' [ 39.865581][ T5133] fuse: Bad value for 'user_id' [ 39.865702][ T5135] fuse: Bad value for 'user_id' [ 39.865714][ T5135] fuse: Bad value for 'user_id' [ 39.903112][ T5141] binder: tried to use weak ref as strong ref [ 39.903140][ T5141] binder: 5140:5141 Acquire 1 refcount change on invalid ref 0 ret -22 [ 39.903325][ T5141] binder: 5140:5141 got transaction to invalid handle, 1 [ 39.903341][ T5141] binder: 5140:5141 cannot find target node [ 39.903360][ T5141] binder: 5140:5141 transaction call to 0:0 failed 9/29201/-22, code 0 size 72-0 line 3252 [ 39.925699][ T5141] binder: 5140:5141 ioctl c0106426 20000380 returned -22 [ 39.939869][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 39.948722][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 39.950965][ T5142] loop0: detected capacity change from 0 to 2048 [ 39.951328][ T5142] EXT4-fs: Ignoring removed i_version option [ 39.970091][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 39.970379][ T40] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.970441][ T40] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.970462][ T40] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.970478][ T40] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.987508][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.996758][ T5149] netlink: 'syz.2.86': attribute type 30 has an invalid length. [ 40.016866][ T5142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.056386][ T5151] loop3: detected capacity change from 0 to 4096 [ 40.058966][ T5154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 40.058993][ T5154] IPv6: NLM_F_CREATE should be set when creating new route [ 40.059051][ T5154] IPv6: NLM_F_CREATE should be set when creating new route [ 40.059060][ T5154] IPv6: NLM_F_CREATE should be set when creating new route [ 40.073202][ T5151] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.074910][ T5151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.144605][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.191867][ T4793] IPVS: starting estimator thread 0... [ 40.234945][ T5174] netlink: 'syz.1.95': attribute type 16 has an invalid length. [ 40.234980][ T5174] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 40.235637][ T5174] netlink: 112 bytes leftover after parsing attributes in process `syz.1.95'. [ 40.255846][ T5177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 40.291220][ T5182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 40.296528][ T5168] IPVS: using max 59 ests per chain, 141600 per kthread [ 40.320224][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 40.369111][ T5198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.106'. [ 40.881674][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.056635][ T5299] tap0: tun_chr_ioctl cmd 35108 [ 41.089201][ T5306] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 41.103885][ T5301] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 41.205760][ T5318] netlink: 'syz.0.166': attribute type 10 has an invalid length. [ 41.233900][ T5324] netlink: set zone limit has 8 unknown bytes [ 41.389831][ T5349] netlink: 'syz.3.181': attribute type 29 has an invalid length. [ 41.391922][ T5349] netlink: 'syz.3.181': attribute type 29 has an invalid length. [ 41.555021][ T5382] Zero length message leads to an empty skb [ 41.682354][ T5410] netlink: 'syz.2.201': attribute type 11 has an invalid length. [ 41.789495][ T5431] tap0: tun_chr_ioctl cmd 1074025680 [ 41.831023][ T5442] netlink: zone id is out of range [ 41.832041][ T5442] netlink: zone id is out of range [ 41.833491][ T5442] netlink: zone id is out of range [ 41.834726][ T5442] netlink: zone id is out of range [ 41.835776][ T5442] netlink: zone id is out of range [ 41.837028][ T5442] netlink: zone id is out of range [ 41.838171][ T5442] netlink: zone id is out of range [ 41.839486][ T5442] netlink: zone id is out of range [ 41.840557][ T5442] netlink: zone id is out of range [ 42.014385][ T5472] validate_nla: 1 callbacks suppressed [ 42.019766][ T5472] netlink: 'syz.3.218': attribute type 2 has an invalid length. [ 42.307776][ T5540] netlink: 'syz.4.232': attribute type 29 has an invalid length. [ 42.311603][ T5540] netlink: 'syz.4.232': attribute type 29 has an invalid length. [ 42.529378][ T5582] netlink: 'syz.3.248': attribute type 10 has an invalid length. [ 42.565303][ T5586] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 42.571482][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.572393][ T5582] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 42.989914][ T5648] syzkaller0: entered promiscuous mode [ 42.989955][ T5648] syzkaller0: entered allmulticast mode [ 42.991960][ T5657] netlink: 'syz.2.286': attribute type 27 has an invalid length. [ 43.063503][ T5665] netlink: 'syz.4.291': attribute type 29 has an invalid length. [ 43.166098][ T5678] netlink: 'syz.1.295': attribute type 29 has an invalid length. [ 43.366502][ T5674] netlink: 'syz.4.291': attribute type 29 has an invalid length. [ 43.367248][ T5681] netlink: 'syz.1.295': attribute type 29 has an invalid length. [ 43.407138][ T5683] __nla_validate_parse: 29 callbacks suppressed [ 43.407174][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 43.558871][ T5710] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.311'. [ 43.707994][ T5730] netlink: 'syz.0.321': attribute type 2 has an invalid length. [ 43.733525][ T5733] tap0: tun_chr_ioctl cmd 1074025681 [ 43.748837][ T5740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.324'. [ 43.751312][ T5740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.324'. [ 43.754145][ T5740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.324'. [ 43.814487][ T5750] netlink: 5460 bytes leftover after parsing attributes in process `syz.3.330'. [ 44.014382][ T5784] netlink: 60 bytes leftover after parsing attributes in process `syz.3.347'. [ 44.016362][ T5784] netlink: 60 bytes leftover after parsing attributes in process `syz.3.347'. [ 44.209105][ T5819] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.363'. [ 44.210880][ T5819] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.363'. [ 44.548816][ T5858] netdevsim0 speed is unknown, defaulting to 1000 [ 44.549444][ T5858] netdevsim0 speed is unknown, defaulting to 1000 [ 44.554226][ T5858] netdevsim0 speed is unknown, defaulting to 1000 [ 44.675477][ T5858] infiniband syz2: set active [ 44.676714][ T5858] infiniband syz2: added netdevsim0 [ 44.678103][ T9] netdevsim0 speed is unknown, defaulting to 1000 [ 44.697837][ T5858] RDS/IB: syz2: added [ 44.698256][ T5858] smc: adding ib device syz2 with port count 1 [ 44.698292][ T5858] smc: ib device syz2 port 1 has no pnetid [ 44.698836][ T4383] netdevsim0 speed is unknown, defaulting to 1000 [ 44.701118][ T5858] netdevsim0 speed is unknown, defaulting to 1000 [ 44.753872][ T5885] trusted_key: encrypted_key: insufficient parameters specified [ 44.811871][ T5858] netdevsim0 speed is unknown, defaulting to 1000 [ 44.832195][ T5895] loop1: detected capacity change from 0 to 512 [ 44.854454][ T5895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.901248][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.938727][ T5858] netdevsim0 speed is unknown, defaulting to 1000 [ 44.983255][ T5909] loop1: detected capacity change from 0 to 8192 [ 44.985141][ T5858] netdevsim0 speed is unknown, defaulting to 1000 [ 45.050523][ T5858] netdevsim0 speed is unknown, defaulting to 1000 [ 45.139516][ T5918] loop2: detected capacity change from 0 to 1024 [ 45.139867][ T5918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.139885][ T5918] EXT4-fs: Ignoring removed orlov option [ 45.148052][ T5918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.345276][ T30] audit: type=1326 audit(524333.552:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5923 comm="syz.4.407" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb217a168 code=0x0 [ 45.717357][ T5927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.717651][ T5927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.911718][ T5916] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 45.971040][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.433452][ T5946] loop3: detected capacity change from 0 to 1024 [ 46.436135][ T5946] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 46.456283][ T5946] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.417: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.459453][ T5946] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.460495][ T5946] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 46.462284][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 46.462299][ C1] EXT4-fs (loop3): initial error at time 524334: ext4_map_blocks:791: inode 3: block 2 [ 46.462318][ C1] EXT4-fs (loop3): last error at time 524334: ext4_map_blocks:791: inode 3: block 2 [ 46.470116][ T5946] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.417: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.470160][ T5946] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.474202][ T5946] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 46.474233][ T5946] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.417: Failed to acquire dquot type 0 [ 46.474267][ T5946] loop3: lost filesystem error report for type 5 error -117 [ 46.476418][ T5946] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 46.476436][ T5946] loop3: lost filesystem error report for type 5 error -117 [ 46.484002][ T5946] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.417: mark_inode_dirty error [ 46.484038][ T5946] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.488029][ T5946] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 46.488103][ T5946] EXT4-fs (loop3): 1 orphan inode deleted [ 46.488575][ T5946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.498671][ T40] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.499362][ T40] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 46.499401][ T40] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 46.502806][ T5946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.503238][ T5946] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.417: Invalid inode table block 1 in block_group 0 [ 46.503265][ T5946] loop3: lost filesystem error report for type 5 error -117 [ 46.504137][ T5946] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 46.504163][ T5946] loop3: lost filesystem error report for type 5 error -117 [ 46.504679][ T5946] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz.3.417: mark_inode_dirty error [ 46.504709][ T5946] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.683279][ T5959] loop4: detected capacity change from 0 to 512 [ 46.704175][ T5959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.730591][ T5959] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.420: invalid block [ 46.730785][ T5959] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.733668][ T5959] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.420: invalid indirect mapped block 4294967295 (level 1) [ 46.733745][ T5959] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.736316][ T5959] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.420: invalid indirect mapped block 4294967295 (level 1) [ 46.736369][ T5959] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.736617][ C0] EXT4-fs (loop4): error count since last fsck: 3 [ 46.736633][ C0] EXT4-fs (loop4): initial error at time 524334: ext4_get_branch:178: inode 11: block 4294967295 [ 46.736676][ C0] EXT4-fs (loop4): last error at time 524334: ext4_free_branches:1023: inode 11 [ 46.739377][ T5959] EXT4-fs (loop4): 2 truncates cleaned up [ 46.744683][ T5959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.765720][ T5959] EXT4-fs error (device loop4): ext4_get_parent:1832: inode #11: comm syz.4.420: bad parent inode number: 3 [ 47.028406][ T5971] loop1: detected capacity change from 0 to 512 [ 47.030341][ T5971] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.053182][ T5973] loop3: detected capacity change from 0 to 1024 [ 47.080216][ T5973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.106258][ T40] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.108570][ T40] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 47.108587][ T40] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.108587][ T40] [ 47.110412][ T4719] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 47.112628][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.149474][ T5979] loop3: detected capacity change from 0 to 512 [ 47.151155][ T5979] EXT4-fs: Ignoring removed i_version option [ 47.151189][ T5979] EXT4-fs: Ignoring removed bh option [ 47.166296][ T5979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.194028][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.245848][ T5987] loop3: detected capacity change from 0 to 128 [ 47.332025][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.370323][ T5991] loop3: detected capacity change from 0 to 2048 [ 47.415093][ T5991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.448328][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.492631][ T6001] input: syz1 as /devices/virtual/input/input2 [ 47.643040][ T6008] loop3: detected capacity change from 0 to 2048 [ 47.690946][ T6008] Alternate GPT is invalid, using primary GPT. [ 47.691079][ T6008] loop3: p2 p3 p7 [ 47.716489][ T6021] xt_hashlimit: max too large, truncated to 1048576 [ 47.743701][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 47.746473][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 47.764199][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 47.824039][ T6029] Bluetooth: MGMT ver 1.23 [ 47.827491][ T6029] dummy_hcd dummy_hcd.0: remove, state 4 [ 47.828295][ T6029] usb usb1: USB disconnect, device number 1 [ 47.857246][ T6029] dummy_hcd dummy_hcd.0: stopped [ 47.857279][ T6029] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 47.868616][ T6031] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.868660][ T6031] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.880925][ T6031] EXT4-fs (loop4): 1 truncate cleaned up [ 47.881398][ T6031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.915996][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.925788][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.925981][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.929364][ T5977] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 48.081785][ T6057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.135045][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.195614][ T6065] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.225830][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.241463][ T6065] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.462: corrupted xattr block 32: bad e_name length [ 48.247093][ T6065] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.462: corrupted xattr block 32: bad e_name length [ 48.249832][ T6065] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.462: corrupted xattr block 32: bad e_name length [ 48.267891][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.828998][ T6105] EXT4-fs (loop2): bad s_want_extra_isize: 192 [ 48.885890][ T6108] EXT4-fs: Ignoring removed i_version option [ 48.887859][ T6108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.922249][ T6108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.958059][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.008218][ T6114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.009648][ T6114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.016150][ T6114] validate_nla: 3 callbacks suppressed [ 49.016184][ T6114] netlink: 'syz.2.481': attribute type 49 has an invalid length. [ 49.031534][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.031718][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.087367][ T6114] ip6gretap0: entered promiscuous mode [ 49.087398][ T6114] ip6gretap0: entered allmulticast mode [ 49.295958][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.296173][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.591550][ T30] audit: type=1326 audit(524337.867:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.4.486" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb217a168 code=0x7ffc0000 [ 49.597782][ T30] audit: type=1326 audit(524337.877:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.4.486" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb217a168 code=0x7ffc0000 [ 49.602007][ T30] audit: type=1326 audit(524337.877:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.4.486" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffb217a168 code=0x7ffc0000 [ 49.607726][ T30] audit: type=1326 audit(524337.887:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.4.486" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb217a168 code=0x7ffc0000 [ 49.612017][ T30] audit: type=1326 audit(524337.887:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.4.486" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb217a168 code=0x7ffc0000 [ 49.616327][ T30] audit: type=1326 audit(524337.897:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.4.486" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb217a168 code=0x7ffc0000 [ 49.726061][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.726244][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.749353][ T6154] ext4: Unknown parameter 'nouser_xattr' [ 50.010099][ T6163] mmap: syz.3.495 (6163) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.126956][ T6165] set_capacity_and_notify: 7 callbacks suppressed [ 50.127170][ T6165] loop3: detected capacity change from 0 to 256 [ 50.130896][ T6165] FAT-fs (loop3): bogus sectors per cluster 0 [ 50.130929][ T6165] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 50.131518][ T6165] FAT-fs (loop3): Can't find a valid FAT filesystem [ 50.235250][ T6173] loop3: detected capacity change from 0 to 512 [ 50.239470][ T6173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.243181][ T6173] EXT4-fs (loop3): 1 truncate cleaned up [ 50.244885][ T6173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.278708][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.320912][ T6179] loop3: detected capacity change from 0 to 128 [ 50.348845][ T6181] loop1: detected capacity change from 0 to 128 [ 50.360220][ T6181] FAT-fs (loop1): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 50.424110][ T6184] loop3: detected capacity change from 0 to 1024 [ 50.431041][ T6184] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 50.432803][ T6184] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 50.433275][ T6184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.467116][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.486692][ T6187] loop1: detected capacity change from 0 to 512 [ 50.500059][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.895659][ T6193] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.949438][ T6200] usb usb7: usbfs: process 6200 (syz.4.508) did not claim interface 0 before use [ 51.040286][ T6209] __nla_validate_parse: 5 callbacks suppressed [ 51.040323][ T6209] netlink: 80 bytes leftover after parsing attributes in process `syz.1.511'. [ 51.138554][ T6215] loop1: detected capacity change from 0 to 512 [ 51.141376][ T6215] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 51.258141][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.258335][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.271127][ T6224] batadv_slave_1: entered promiscuous mode [ 51.271818][ T6223] batadv_slave_1: left promiscuous mode [ 51.395971][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.396702][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.775548][ T6235] loop4: detected capacity change from 0 to 512 [ 51.781338][ T6235] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.790466][ T6235] EXT4-fs (loop4): 1 truncate cleaned up [ 51.790928][ T6235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.196301][ T6241] loop2: detected capacity change from 0 to 512 [ 52.196937][ T6241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.198069][ T6241] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 52.200624][ T6241] EXT4-fs (loop2): 1 truncate cleaned up [ 52.201481][ T6241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.224028][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.228463][ T6244] loop1: detected capacity change from 0 to 2048 [ 52.241634][ T6247] EXT4-fs: inline encryption not supported [ 52.241959][ T6247] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.242048][ T6247] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52306!=33349) [ 52.242759][ T6247] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.242914][ T6247] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.528: inode #15: comm syz.2.528: iget: illegal inode # [ 52.242928][ T6247] loop2: lost filesystem error report for type 5 error -117 [ 52.245167][ T6247] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.528: couldn't read orphan inode 15 (err -117) [ 52.245200][ T6247] loop2: lost filesystem error report for type 5 error -117 [ 52.245825][ T6247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0006-000000000000 ro without journal. Quota mode: none. [ 52.257181][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0006-000000000000. [ 52.271990][ T6244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.290460][ T6244] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 52.297283][ T6244] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 52.299933][ T6244] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.299933][ T6244] [ 52.303460][ T6244] EXT4-fs (loop1): Total free blocks count 0 [ 52.304770][ T6244] EXT4-fs (loop1): Free/Dirty block details [ 52.306009][ T6244] EXT4-fs (loop1): free_blocks=4096 [ 52.307251][ T6244] EXT4-fs (loop1): dirty_blocks=64 [ 52.308590][ T6244] EXT4-fs (loop1): Block reservation details [ 52.308620][ T6244] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 52.323131][ T6244] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 52.356947][ T4709] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 52.387777][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 52.391424][ T30] audit: type=1326 audit(524340.690:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b7a168 code=0x7ffc0000 [ 52.396369][ T30] audit: type=1326 audit(524340.690:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b7a168 code=0x7ffc0000 [ 52.400658][ T30] audit: type=1326 audit(524340.690:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b7a168 code=0x7ffc0000 [ 52.405483][ T30] audit: type=1326 audit(524340.690:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffffa8b7a168 code=0x7ffc0000 [ 52.409907][ T30] audit: type=1326 audit(524340.690:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b7a168 code=0x7ffc0000 [ 52.414879][ T30] audit: type=1326 audit(524340.690:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa8b7a168 code=0x7ffc0000 [ 52.420157][ T30] audit: type=1326 audit(524340.690:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6257 comm="syz.2.532" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa8b7a168 code=0x7ffc0000 [ 52.839807][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.921221][ T6274] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 52.922847][ T6274] syzkaller0: entered promiscuous mode [ 52.924435][ T6274] syzkaller0: entered allmulticast mode [ 53.008628][ T6280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.095196][ T6288] netlink: 'syz.2.544': attribute type 11 has an invalid length. [ 53.095230][ T6288] netlink: 36 bytes leftover after parsing attributes in process `syz.2.544'. [ 53.514894][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.515086][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.765801][ T6302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.821796][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.004706][ T6319] Unable to handle kernel paging request at virtual address dfff800000000000 [ 54.008009][ T6319] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 54.009072][ T6319] Mem abort info: [ 54.010071][ T6319] ESR = 0x0000000096000005 [ 54.011049][ T6319] EC = 0x25: DABT (current EL), IL = 32 bits [ 54.011061][ T6319] SET = 0, FnV = 0 [ 54.011070][ T6319] EA = 0, S1PTW = 0 [ 54.011078][ T6319] FSC = 0x05: level 1 translation fault [ 54.011086][ T6319] Data abort info: [ 54.011093][ T6319] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 54.011101][ T6319] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 54.011110][ T6319] GCS = 0, Overlay = 0, DirtyBit = 0 [ 54.011119][ T6319] [dfff800000000000] address between user and kernel address ranges [ 54.011167][ T6319] Internal error: Oops: 0000000096000005 [#1] SMP [ 54.023940][ T6319] Modules linked in: [ 54.024601][ T6319] CPU: 1 UID: 0 PID: 6319 Comm: syz.3.556 Tainted: G L syzkaller #0 PREEMPT [ 54.026363][ T6319] Tainted: [L]=SOFTLOCKUP [ 54.027115][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 54.028880][ T6319] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 54.030338][ T6319] pc : dummy_set_selfpowered+0xb0/0x158 [ 54.031393][ T6319] lr : dummy_set_selfpowered+0x80/0x158 [ 54.032437][ T6319] sp : ffff8000980f7570 [ 54.033218][ T6319] x29: ffff8000980f7570 x28: 1fffe0001f58cca6 x27: 1fffe00018d5418b [ 54.034707][ T6319] x26: dfff800000000000 x25: ffff0000d7695110 x24: ffff0000d7695148 [ 54.036131][ T6319] x23: ffff0000fac666a0 x22: dfff800000000000 x21: 0000000000000003 [ 54.037566][ T6319] x20: 0000000000000000 x19: 0000000000000001 x18: 00000000ffffffff [ 54.039037][ T6319] x17: ffff80008a791000 x16: 0000000000000007 x15: ffff800080c9daa4 [ 54.040467][ T6319] x14: ffff800080c9d924 x13: 0000000000000001 x12: 0000000000000000 [ 54.041887][ T6319] x11: 0000000000000000 x10: 1fffe00018d5418e x9 : 00000000000006a8 [ 54.043363][ T6319] x8 : 0000000000000000 x7 : ffff800080efaa90 x6 : 0000000000000000 [ 54.044751][ T6319] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000835b7b94 [ 54.046129][ T6319] x2 : 0000000000000003 x1 : ffff0000c9dc9d40 x0 : 0000000000000000 [ 54.047575][ T6319] Call trace: [ 54.048167][ T6319] dummy_set_selfpowered+0xb0/0x158 (P) [ 54.049175][ T6319] usb_gadget_set_selfpowered+0x74/0x450 [ 54.050165][ T6319] composite_dev_prepare+0x284/0x2b4 [ 54.051068][ T6319] configfs_composite_bind+0xa0/0x10b8 [ 54.051982][ T6319] gadget_bind_driver+0x274/0x834 [ 54.052818][ T6319] really_probe+0x29c/0x800 [ 54.053619][ T6319] __driver_probe_device+0x1e0/0x350 [ 54.054539][ T6319] driver_probe_device+0x6c/0x19c [ 54.055396][ T6319] __driver_attach+0x168/0x384 [ 54.056235][ T6319] bus_for_each_dev+0x128/0x1b4 [ 54.057071][ T6319] driver_attach+0x50/0x60 [ 54.057838][ T6319] bus_add_driver+0x208/0x500 [ 54.058629][ T6319] driver_register+0x220/0x310 [ 54.059461][ T6319] usb_gadget_register_driver_owner+0xf0/0x25c [ 54.060505][ T6319] gadget_dev_desc_UDC_store+0x164/0x22c [ 54.061471][ T6319] configfs_write_iter+0x27c/0x354 [ 54.062352][ T6319] vfs_write+0x51c/0xa0c [ 54.063096][ T6319] ksys_write+0x12c/0x228 [ 54.063870][ T6319] __arm64_sys_write+0x84/0x98 [ 54.064720][ T6319] invoke_syscall+0x98/0x244 [ 54.065555][ T6319] el0_svc_common+0xec/0x23c [ 54.066363][ T6319] do_el0_svc+0x4c/0x5c [ 54.067098][ T6319] el0_svc+0x64/0x260 [ 54.067807][ T6319] el0t_64_sync_handler+0x48/0x148 [ 54.068736][ T6319] el0t_64_sync+0x198/0x19c [ 54.069525][ T6319] Code: aa1403e0 975794a4 f9400294 d343fe88 (38766908) [ 54.070744][ T6319] ---[ end trace 0000000000000000 ]--- [ 54.343175][ T6319] Kernel panic - not syncing: Oops: Fatal exception [ 54.344277][ T6319] SMP: stopping secondary CPUs [ 54.345078][ T6319] Kernel Offset: disabled [ 54.345780][ T6319] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 54.346895][ T6319] Memory Limit: none [ 54.619372][ T6319] Rebooting in 86400 seconds..