last executing test programs: 43m0.644041795s ago: executing program 2 (id=16): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000240), 0x2, 0x259, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x42, 0x1) pwrite64(r0, &(0x7f0000000dc0)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000209000/0x400000)=nil) 42m59.727323189s ago: executing program 2 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x9, 0x1}) 42m58.362216568s ago: executing program 2 (id=28): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000080000000000000009000000731109000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000a00), 0x181000, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000a40)=0xd) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000a80)) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000ec0)) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000b00)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b40), 0x102280, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000b80)={0x18}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='mnt\x00', 0x0, &(0x7f0000000540)={[{@noquota}, {@discard}, {@i_version}, {@nobarrier}]}, 0x0, 0x235, &(0x7f0000000580)="$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") syz_open_dev$usbfs(0x0, 0x204, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='mnt/encrypted_dir\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mnt/encrypted_dir\x00', 0x800, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000840)=@v1={0x0, @aes128, 0x0, @desc1}) chdir(&(0x7f0000000880)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20800, 0x0, 0xbe, 0x0, &(0x7f0000000a00)) 42m57.126698935s ago: executing program 2 (id=33): signalfd(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000140)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@noquota}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn79Nivjb4uiTidUOPlmt9rm6cu1qSifDJTaEdRmKiKy7RmrjfyyGotF5Y/Hap6U2DthQ1VyXwxerwF0sibJbAJSj+KDP7n+LbfNmH+W7+nL9BiiL+3q+1Y8MR5qXGWm7v+2niYg4dvHfr7ItNuY5BABAi++z+c+zneZ/aTzQVO6efG1oPF9L2R0R90XEnoi4P6JW9sGIeGid9bcvktw8/0mv9BTYGmXzv5fyta3W+V8x+4vxoTy3qxb/SHL8ZGXxUP6aTMbI1iw/s0odP7z62xfdjjXP/7Itq7+YC+btuDK8tfWchbmVuduJudnVTyL2DXeKP7mxEpBExN6I2NdjHSef/uZAt2O3jn8VfVhnqn4d8VS9/y9GW/yFZPX1yeltUVk8NF1cFTf75ddLb3Wr/7bi74Os/7d3vP5vxD+eNK/XLq+/jkt/fN71nmaqp+u/sWNL/vfDuZWVszMRW5I36o1u3j/bOLfIF+Wz+CcPdh7/u6PxSuyPiOwifjgiHomIR/O+eywiHo+Ig53Dy24d46dXnnivW/x3Qv8vtPX/eGuRtv5vJLZE+57OiaFTP37X+j82kmt7/ztSS03me9by/reWdvV2NQMAAMD/TxoROyNJp26kR9Opqfp3+PfE9rSytLzyzPGlD84s1H8jMB4jafGka6zpeehMfltf5Gfb8ofz58ZfDo3W8lPzS5WFsoOHAbfjpvGf1sZ/5s+hslsHbDi/14LB1TT+kzLbAWw+n/8wuIx/GFwdxv9oGe0ANl+nz/+PS2gHsPnaxr9lPxgg7v9hcBn/MLiax78vAMDAWB6NW/9IvlNiW/RylsRdk4j0jmhGfxJJj6NgrYmdZQe4/kTZ70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98V8AAAD///Mv57k=") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() poll(&(0x7f00000000c0), 0x0, 0x5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='mountinfo\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000280)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) read$FUSE(r0, &(0x7f00000036c0)={0x2020}, 0x2020) 42m56.347357284s ago: executing program 2 (id=36): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f0000000280), 0x0, 0x236, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt/encrypted_dir\x00', 0x800, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x14) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') getdents64(r4, &(0x7f0000000580)=""/41, 0x29) connect$unix(r1, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/file0\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f00000001c0), &(0x7f0000000200)=@tcp6=r5}, 0x20) shutdown(r5, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000240), 0x0, 0x140, 0x0) 42m55.588529462s ago: executing program 2 (id=39): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2200000, &(0x7f00000005c0)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@inlinecrypt}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x57b, &(0x7f0000002780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000001340)='a', 0x200000c1, 0x9000) truncate(&(0x7f0000001380)='./file1\x00', 0x8da6) syz_clone3(0x0, 0x0) timer_create(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./file1\x00', 0x48042, 0x8c) fallocate(r1, 0x0, 0x0, 0x8010007) 42m54.32813395s ago: executing program 32 (id=39): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2200000, &(0x7f00000005c0)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@inlinecrypt}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x57b, &(0x7f0000002780)="$eJzs3V1rHFUYAOB3NkmbfmhTKEW9kEAvrNRumsSPCkLrpWixoPd1SbahZNMt2U1pYqHthQXxRoogYkH8Ad57WfwB+isKWihSgl54E5nNTLtJdvPVrYmd54Fpz5mZzZmzZ96z7+zssgEU1nD6Tyni5Yj4Ook41LatP7KNw8v7LT66PpEuSSwtffJnEkm2Lt8/yf4/kFVeiohfvog4UVrbbmN+YbpSq1Vns/pIc+bKSGN+4eSlmcpUdap6eWx8/PRb42PvvvN2z/r6+vm/v/v43genvzq2+O1PDw7fSeJsHMy2tfcjt7S05SZutleGYzh7Tgbi7KodR7f8p3e3ZKcPgG3py+J8INI54FD0ZVEPPP9utF7ngGJKxD8UVJ4H5Nf2na6Dn2cP31++AFrb//7l90ZisHVttH8xWXFllF7vDvWg/bSNn/+4eyddosv7ELkbPWgPIHfzVkSc6u9fO/8l2fy3fadabx6vb3UbRXv9gZ10L81/3uiU/5Qe5z/RIf850CF2t2Pj+C896EEzXaX533sd89/HU9dQX1Z7oZXzDSQXL9WqpyLixYg4HgN70/p693NOL97veiepPf9Ll7T9PBfMjuNB/96Vj5msNCtP0+d2D29FvPIk/01izfw/2Mp1V49/+nycTwu/frlhG0erd1/ttm3j/rfrfQa89GPEax3H/8kdrWT9+5MjrfNhJD8r1vrr9tHfurW/tf73Xjr++9fv/1DSfr+2sfU2fhj8p9pt23bP/z3Jp63ynmzdtUqzOTsasSf5aO36sSePzev5/mn/jx9bf/7rdP7vi4jPNtn/20dud911N4z/5JbGf+uF+x9+/n239jc3/m+2SsezNZuZ/zZ7gE/z3AEAAAAAAMBuU4qIg5GUyo/LpVK5vPz5jiOxv1SrN5onLtbnLk9G67uyQzFQyu90H2r7PMRo9nnYvD62qj4eEYcj4pu+fa16eaJem9zpzgMAAAAAAAAAAAAAAAAAAMAucaDL9/9Tv/ft9NEBz5yf/Ibi2jD+e/FLT8Cu5PUfikv8Q3GJfygu8Q/FJf6huMQ/FJf4h+IS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dS5elxUfXJ9L65NX5uen61ZOT1cZ0eWZuojxRn71SnqrXp2rV8kR9ZqO/V6vXr4yOxdy1kWa10RxpzC9cmKnPXW5euDRTmapeqA78J70CAAAAAAAAAAAAAAAAAACA/5fG/MJ0pVarzip0LZyJXXEY2y4kG43ymexkWLkpBtd9VGSF/p3voMIzKOzwxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbf4NAAD//0P5NdQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000001340)='a', 0x200000c1, 0x9000) truncate(&(0x7f0000001380)='./file1\x00', 0x8da6) syz_clone3(0x0, 0x0) timer_create(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./file1\x00', 0x48042, 0x8c) fallocate(r1, 0x0, 0x0, 0x8010007) 39m3.143920315s ago: executing program 1 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000001940)=""/102392, 0x18ff8) r3 = epoll_create1(0x80000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000280)=0x5, 0x4) r5 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000001c0)={0x10000001}) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000430001000200000000000000020000000e00"], 0x3c}}, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000200)={0x60000008}) 39m1.777382975s ago: executing program 1 (id=703): mkdir(&(0x7f00000004c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000020300)='./config\x00', &(0x7f0000020340)='configfs\x00', 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) listxattr(&(0x7f0000000080)='./config\x00', &(0x7f00000000c0)=""/51, 0x33) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, "0f9d0000002000000000b82100"}) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={&(0x7f0000000040)=""/16, 0x10}) mkdir(&(0x7f0000020380)='./config/usb_gadget/g1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f80), 0x8, 0x10, &(0x7f0000000fc0), 0x10}, 0x94) sched_getparam(r2, &(0x7f00000003c0)) mkdir(&(0x7f00000203c0)='./config/usb_gadget/g1/configs/c.1\x00', 0xfa) mkdir(&(0x7f0000020400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) 39m1.388455004s ago: executing program 1 (id=706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40010000, &(0x7f0000000300)={0x0, 0x989680}) close(r1) sendmsg$nl_route(r0, 0x0, 0x2000c800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) ioctl$TIOCCONS(r2, 0x541d) 39m1.314667412s ago: executing program 1 (id=708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x8000, 0x0) write$tun(r0, &(0x7f0000000d40)={@val={0x0, 0xf9}, @val={0x0, 0x3, 0x7, 0x6, 0x2, 0x4976}, @ipv4=@igmp={{0x9, 0x4, 0x2, 0x9, 0x6b, 0x66, 0x0, 0xb6, 0x2, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x10, "bf856bd7d219a8e36262f3ff9af7"}]}}, {0x11, 0x6, 0x0, @remote, "18124cf6362dd7b8f306408488138ef24ef8a8debe5dae9168c12696f6795d48f55893b920cc5e5ac062982aa95983643dfc8bf4b5d20fb462da71cff99013"}}}, 0x79) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xe, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2}, 0x8, 0x10, &(0x7f0000000740), 0x10}, 0x94) syz_mount_image$squashfs(&(0x7f0000000dc0), &(0x7f0000000e00)='./file1\x00', 0x10800, &(0x7f0000000e40)=ANY=[@ANYRES64=0x0], 0x2, 0x195, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000010c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000011c0), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000012c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xd, 0x4, &(0x7f00000013c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x7}]}, 0x0, 0x5, 0xc3, &(0x7f0000001440)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000ac0)=@buf) 38m59.460677561s ago: executing program 1 (id=713): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf43, 0x4c9, 0xa3d4, 0x9dff, 0xe, "3d52e3ff0600"}) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="bc19cca5d3910c4202a0ed5414ee6c7b8f32f2c172fdfbc1768ce6daf6c88ede1369374cf307cbcc2858b18c5b0cd47c9994b0556fb7d947f537566f40224ea4f467b87ed830b516043a6777921f1b79a2dfff92e67cfc2a4c1c45057f653cccd6535353da62d6a8318c772f1991548c9220a23bec8003eac38ca1c3a591f2c9305817c34ef85196a1c47697672e7baa443dc04a08cbad3485df692c41fa31"], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0xff) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000e2381701000002003c4baa8ef160ca1c8f033ef5c7a834d99326c9b84fc09f4775f55a2db92e85e373a123c8e5289841ed9601ac513727d50b4d7db9858d"], 0x10}}], 0x2, 0xc010) 38m56.319667822s ago: executing program 1 (id=720): r0 = syz_open_dev$evdev(&(0x7f0000001200), 0x0, 0x802) write$evdev(r0, &(0x7f0000001240), 0x100000008) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x40044581, 0x0) 38m40.617040226s ago: executing program 33 (id=720): r0 = syz_open_dev$evdev(&(0x7f0000001200), 0x0, 0x802) write$evdev(r0, &(0x7f0000001240), 0x100000008) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x40044581, 0x0) 35m53.902408226s ago: executing program 5 (id=1174): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\f\x00\x00', @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000002380)=""/102392, 0x18ff8) setresgid(0x0, 0xee01, 0x0) 35m50.848677178s ago: executing program 5 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc_dir\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc_dir/acpi/wakeup\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 35m49.790507615s ago: executing program 5 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1, r0}, 0xc) 35m48.804479856s ago: executing program 5 (id=1187): mkdir(&(0x7f00000004c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000020300)='./config\x00', &(0x7f0000020340)='configfs\x00', 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) listxattr(&(0x7f0000000080)='./config\x00', &(0x7f00000000c0)=""/51, 0x33) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, "0f9d0000002000000000b82100"}) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={&(0x7f0000000040)=""/16, 0x10}) mkdir(&(0x7f0000020380)='./config/usb_gadget/g1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071107900000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0afefe000000007303000000000000b500fdff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d5252"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f80), 0x8, 0x10, &(0x7f0000000fc0), 0x10}, 0x94) sched_getparam(r2, &(0x7f00000003c0)) mkdir(&(0x7f00000203c0)='./config/usb_gadget/g1/configs/c.1\x00', 0xfa) mkdir(&(0x7f0000020400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) 35m46.506051801s ago: executing program 5 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 35m46.072686215s ago: executing program 5 (id=1193): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000003) setreuid(0xffffffffffffffff, 0xee00) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) 35m30.729613693s ago: executing program 34 (id=1193): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000003) setreuid(0xffffffffffffffff, 0xee00) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) 33m48.7425663s ago: executing program 0 (id=1463): syz_open_dev$rtc(&(0x7f00000003c0), 0xda34, 0x46000) 33m48.556419489s ago: executing program 0 (id=1466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x3ff}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008084}, 0x20000810) 33m47.803537126s ago: executing program 0 (id=1467): setrlimit(0x1, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xbae, 0x2000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x2, 0x4) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x42202) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 33m47.531672343s ago: executing program 0 (id=1468): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x204001, &(0x7f00000001c0), 0x1, 0xb9f, &(0x7f0000000200)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000dc0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000e00)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f00000010c0)='.\x00', 0x0, 0x2b90020, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x1c0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) 33m45.738817577s ago: executing program 0 (id=1474): pipe2(0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000000480)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000001b540)={0xd, 0x3, &(0x7f000001b600)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019480)=0x410000002) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) read$FUSE(0xffffffffffffffff, &(0x7f0000019500)={0x2020}, 0x2020) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 33m45.12036449s ago: executing program 0 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0}, 0x400c0c0) r4 = open(0x0, 0x80242, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) fchmodat(r4, &(0x7f0000000080)='./file0/file0\x00', 0x40) mount$tmpfs(0x0, 0x0, 0x0, 0x2e40ab, &(0x7f0000000080)=ANY=[]) tkill(0x0, 0x12) syz_read_part_table(0x5ed, &(0x7f00000004c0)="$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") tkill(0x0, 0x32) 33m44.072921787s ago: executing program 35 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0}, 0x400c0c0) r4 = open(0x0, 0x80242, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) fchmodat(r4, &(0x7f0000000080)='./file0/file0\x00', 0x40) mount$tmpfs(0x0, 0x0, 0x0, 0x2e40ab, &(0x7f0000000080)=ANY=[]) tkill(0x0, 0x12) syz_read_part_table(0x5ed, &(0x7f00000004c0)="$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") tkill(0x0, 0x32) 21m24.77617383s ago: executing program 7 (id=4487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000fcfffffd0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 21m24.706653918s ago: executing program 7 (id=4488): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) socket$kcm(0x1e, 0x1, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r1 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_open_dev$ublk_chdev(0x0, r1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nullb/nullb1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc\x00', 0x161) munmap(&(0x7f0000ff6000/0x8000)=nil, 0x8000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000d40)={0xaa, 0x67d}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000d80)={&(0x7f0000fee000/0x10000)=nil, 0x10000}) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000b80)='100', 0x3) socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f0000000c40)='1', 0x1) 21m24.144599035s ago: executing program 7 (id=4490): openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/trace_marker\x00', 0x1, 0x5a) 21m24.026832977s ago: executing program 7 (id=4491): inotify_init() r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x200008, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x3af, &(0x7f00000009c0)="$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") open(&(0x7f0000000d80)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000dc0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000e00)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000e40)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x3, 0x0, 0x0, 0x2, 0xd, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x42, 0x20) rename(&(0x7f00000004c0)='./file1/file0\x00', 0x0) 21m23.007435642s ago: executing program 7 (id=4494): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./bus\x00', 0x1c1002, 0x12) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) write(r2, &(0x7f00000006c0)="c7", 0x1) sendfile(r2, r1, 0x0, 0x2fffe) r3 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0xc2a02) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0xc1205531, &(0x7f0000000740)=""/4078) shmctl$SHM_LOCK(0x0, 0xb) write(r0, &(0x7f0000000100)="1c0000000700aaaaaaaaaa1101", 0xd) 21m21.743431181s ago: executing program 7 (id=4501): openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) syz_mount_image$jfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2, &(0x7f00000004c0)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x9}}, {@discard_size={'discard', 0x3d, 0x6}}, {@errors_remount}, {@nointegrity}, {@discard}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x21, 0x61b7, &(0x7f0000004480)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) getdents64(r0, &(0x7f000000a680)=""/4096, 0x1000) syz_mount_image$msdos(&(0x7f000001afc0), &(0x7f000001b000)='.\x00', 0x1a5e4b8, &(0x7f000001b040)=ANY=[], 0xd, 0x0, &(0x7f000001b080)) 21m21.16362745s ago: executing program 36 (id=4501): openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) syz_mount_image$jfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2, &(0x7f00000004c0)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x9}}, {@discard_size={'discard', 0x3d, 0x6}}, {@errors_remount}, {@nointegrity}, {@discard}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x21, 0x61b7, &(0x7f0000004480)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) getdents64(r0, &(0x7f000000a680)=""/4096, 0x1000) syz_mount_image$msdos(&(0x7f000001afc0), &(0x7f000001b000)='.\x00', 0x1a5e4b8, &(0x7f000001b040)=ANY=[], 0xd, 0x0, &(0x7f000001b080)) 17m44.967714536s ago: executing program 8 (id=5107): sendmsg$inet(0xffffffffffffffff, 0x0, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x4000040) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000240)={{}, "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"}) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x15d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r2, 0x4}, 0x38) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) unshare(0x24020400) fcntl$notify(r3, 0x402, 0x40000029) 17m43.941477772s ago: executing program 8 (id=5110): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) socket$kcm(0x1e, 0x1, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r1 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_open_dev$ublk_chdev(0x0, r1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nullb/nullb1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc\x00', 0x161) munmap(&(0x7f0000ff6000/0x8000)=nil, 0x8000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000d40)={0xaa, 0x67d}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000d80)={&(0x7f0000fee000/0x10000)=nil, 0x10000}) mount(0x0, &(0x7f0000000ac0)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000b80)='100', 0x3) socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/nullb/nullb1/irqmode\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r4, &(0x7f0000000c40)='1', 0x1) 17m43.644507032s ago: executing program 8 (id=5113): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000190001002bbd700000000000ff010000000000000000000000000001fe80000000040000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000729900000000000002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) 17m43.279830279s ago: executing program 8 (id=5114): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000c12, &(0x7f0000000080)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRES32=r0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa4c, &(0x7f0000000400)="$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") mount(0x0, &(0x7f0000000fc0)='./file0\x00', 0x0, 0x84000, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000e80), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000001000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'Ju', 0x3a, './file0', 0x3a, [0x43, 0x50, 0x46, 0x4f, 0x4f, 0x50]}, 0x3a) 17m42.39013318s ago: executing program 8 (id=5116): io_setup(0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = fcntl$dupfd(r0, 0x406, r0) unshare(0x2000400) fsopen(0x0, 0x0) inotify_add_watch(r1, 0x0, 0x10000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0xc00) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) getpid() ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000380)={0x4, 0x4}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = semget(0x3, 0x4, 0x39c) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019480)=0x410000002) semctl$GETVAL(r2, 0x1, 0xc, &(0x7f00000194c0)=""/133) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000019580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/161}) userfaultfd(0x80001) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000196c0)={&(0x7f0000019700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000019780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000019800)={0x7, 0x1b, 0x2}, 0x7) 17m41.340477108s ago: executing program 8 (id=5120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) 17m40.583431825s ago: executing program 37 (id=5120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) 49.589083933s ago: executing program 4 (id=6865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) close(r1) r2 = memfd_create(&(0x7f00000002c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x21011, r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 49.394732552s ago: executing program 4 (id=6866): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2000}, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x2c00, 0x8, 0x19}, 0x18) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000180)=0xffff, 0x4) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x40800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000800) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x80000, 0x0, 0x0, @by_dev={r1}, {0x8, @core='@stats_print 1'}}) 48.83265054s ago: executing program 3 (id=6868): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = semget(0x1, 0x2, 0x704) semop(r0, &(0x7f0000000000)=[{0x1, 0x1, 0x1000}], 0x1) semctl$GETVAL(r0, 0x0, 0xc, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="666f726365000000000000001633372c6769643d", @ANYRESDEC, @ANYRESHEX], 0x1, 0x5d9, &(0x7f0000000280)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1") setxattr$trusted_overlay_origin(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x0, 0x0, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0xa702, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) io_submit(0x0, 0x0, &(0x7f0000002a40)) lsetxattr$security_ima(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1a1441, 0xd) 48.540284429s ago: executing program 3 (id=6871): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 47.327189243s ago: executing program 3 (id=6874): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) epoll_create1(0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0) 45.804149648s ago: executing program 3 (id=6878): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000a0001000242ac1100020000050021000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) 42.348440989s ago: executing program 3 (id=6882): syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000001700)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) 42.012822503s ago: executing program 3 (id=6883): unshare(0x60000600) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 25.984605325s ago: executing program 38 (id=6883): unshare(0x60000600) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 11.631349856s ago: executing program 6 (id=6947): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 11.539516706s ago: executing program 6 (id=6949): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x1, 0x4b9, &(0x7f0000001040)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000300)='cgroup2\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x69) 10.144461688s ago: executing program 6 (id=6951): r0 = memfd_create(&(0x7f00000002c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f0000000300)='i', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) 9.950118917s ago: executing program 6 (id=6952): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d", 0x24}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e5", 0x8d}, {&(0x7f0000000900)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb682e05b38c2d19db77d13ec6bbee3da919aa8147271b5612c545cf95483beb486531e1289271e9570708af6a5f7263238f654", 0x65}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000cc0)="5f5d081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f719ac698a8654cb33f97c338b1d64514efe7e080d6be27dfbd65ff000000000000007cd6826560ea331714464739afa60f9bd10bb9d4b533abdb1d72bd", 0x75}], 0x1}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5d62dc43b74cf", 0xd8}, {&(0x7f0000000980)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42a2d02b09e37c75fbdb3f50108e5d5d135440a4cde064d28c9c30b8c59ebfcf1b3804b16606a289938e5d310359fb8ca279e501d6edc0c7b4cc2419f0bf92a5aea2e8b60b95ffd2c82d9932a22d7a8eb2346247776a523a5d0066bd5f7869e4d24bf30e366fb39c5c3091e615339a415b3efcf073205576f86fdc7e98a12fff979ba11c76a43e889e9bd44ae74e058b5e8e2d8028521a084e135600b4c3e6770b8ff8e26dbd3a010ed5e3bb894cdbfd1b53f85f80", 0xd8}, {&(0x7f00000012c0)="99b8979ec0fd5f721da667032cfc1f89a347faf9add0ff5faf7646e11e7526e29ac6", 0x22}, {&(0x7f0000000c00)="88c28a2a8af39ce81f3b350e8d029b409bacf181a71c0d4559cb976dff2a1a381136daa1f0d4151e92032b07b24f9aa22a0cf3490eb924a37eb0c0501b733da3f2fe0000000000000008166e2f02fb98b2376f670f6f722692c8cc30b6f8d164b47a6e0023141e8e4984202f1dcc965d36e3161df2710079158c3e0cbe8a3ed05c717e1963acbc25359cb6dafabc4fd590c6132ade56994a6cf8ab078adc6aa46b", 0xa1}, {&(0x7f0000001480)="8e475dbf80965ae4d8ebaa00000900000000000000", 0x15}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000b00)="82a1e967d618554a0280696fe8d54dc7d556224eb6207c42534a8f4e8509e9879f332bedf922ae9fc0d77ae422e9d3f8945bf19c5507c8809d9ac398b8308856b5689cfe906211f948e7ec7678640d5d6832d28138e453a450081e810f88f29caa27b9c7f4695ba338a4c97b564e3a0fc7fa90649bd5a4a99d6c5555c1c80977b90560127992c6dc5b026661d4d10156acd0d6dc935ae4c3e3ab34e1a5f06e1769c2", 0xa2}], 0x1}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9.6341119s ago: executing program 6 (id=6953): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000180), 0x18) 9.440523909s ago: executing program 6 (id=6954): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) unshare(0x40000000) nanosleep(0x0, 0x0) unshare(0x40000000) unshare(0x40000000) 3.460478188s ago: executing program 9 (id=6969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xac}}, 0x0) 3.184484136s ago: executing program 9 (id=6970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2, r0}, 0xc) 3.099553635s ago: executing program 4 (id=6867): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f00000000c0)) 2.999267135s ago: executing program 9 (id=6971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000400), &(0x7f0000000440)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r5, 0x0, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 1.936460563s ago: executing program 9 (id=6972): ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000680)='127.:.0.1:/export\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) 1.930199924s ago: executing program 4 (id=6973): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000040000000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.681109999s ago: executing program 4 (id=6974): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000180), 0x3, 0x42f, &(0x7f00000009c0)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = open(&(0x7f0000000740)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000780)=0x20000088) 1.359811212s ago: executing program 9 (id=6975): r0 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000a40)=""/102392, 0x18ff8) r5 = syz_open_dev$usbmon(&(0x7f0000019a40), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000019a80), 0x20000007c, 0x0) dup3(r5, r6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x4f) execve(&(0x7f0000000a00)='./file0\x00', 0x0, 0x0) 1.356881152s ago: executing program 4 (id=6976): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000008c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f00000002c0)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 9 (id=6977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000480)="d362dd2e66660fc73600000f01c5b800008ed8baf80c66b8b2c4a58466efbafc0cec7f00baf80c66b8f116788b66efbafc0cb0ccee67670f01c3660f3882b9040067f26e", 0x44}], 0x1, 0x35, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002400)=@vmx={0x1, 0x0, 0x2080, {0x0, 0x2}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df26b1bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f387400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006720f9ba621b07420000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c82e21e210710eaf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a49000000000000000000f100"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): _mock1: Adding to iommu group 0 [ 1559.252117][T24160] overlayfs: missing 'lowerdir' [ 1559.440682][T24162] loop4: detected capacity change from 0 to 4096 [ 1560.512227][T24162] ntfs3: loop4: ino=0, mi_enum_attr [ 1560.517644][T24162] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1560.563003][T24162] ntfs3: loop4: failed to replay log file. Can't mount rw! [ 1566.514408][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1567.037497][T24219] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1571.549612][T24255] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1572.460105][T24260] loop4: detected capacity change from 0 to 2048 [ 1572.469309][T24260] UDF-fs: bad mount option "ÿÿ000000000000000000000030xffffffffffffffffÿÿÿÿ" or missing value [ 1576.076447][T24294] loop3: detected capacity change from 0 to 64 [ 1576.239189][T24298] loop4: detected capacity change from 0 to 2048 [ 1576.275432][T24298] UDF-fs: bad mount option "ÿÿ000000000000000000000030xffffffffffffffffÿÿÿÿ" or missing value [ 1581.063558][T24338] loop8: detected capacity change from 0 to 2048 [ 1581.128314][T24338] UDF-fs: bad mount option "ÿÿ000000000000000000000030xffffffffffffffffÿÿÿÿ" or missing value [ 1582.035683][T24346] netlink: 'syz.4.5074': attribute type 11 has an invalid length. [ 1584.034510][T21426] Bluetooth: hci1: command 0x0406 tx timeout [ 1585.043093][T24378] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1586.255742][T24383] loop4: detected capacity change from 0 to 2048 [ 1586.318180][T24383] UDF-fs: bad mount option "ÿÿ000000000000000000000030xffffffffffffffffÿÿÿÿ" or missing value [ 1587.005954][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1587.308196][T24398] netlink: 'syz.4.5089': attribute type 11 has an invalid length. [ 1592.068586][T24429] netlink: 'syz.6.5099': attribute type 11 has an invalid length. [ 1595.378767][T24463] netlink: 'syz.3.5109': attribute type 11 has an invalid length. [ 1595.503376][T24468] loop6: detected capacity change from 0 to 512 [ 1595.536276][T24468] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1595.567099][T24468] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1595.646753][T24468] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 1595.668851][T24472] loop4: detected capacity change from 0 to 2048 [ 1595.682569][T24472] UDF-fs: bad mount option "ÿÿ000000000000000000000030xffffffffffffffffÿÿÿÿ" or missing value [ 1595.695638][T24468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1595.721647][T24468] System zones: 0-2, 18-18, 34-34 [ 1595.850532][T24468] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.5111: bad orphan inode 15 [ 1595.953504][T24468] ext4_test_bit(bit=14, block=18) = 1 [ 1595.961351][T24468] is_bad_inode(inode)=0 [ 1595.966220][T24468] NEXT_ORPHAN(inode)=2264924160 [ 1595.971108][T24468] max_ino=32 [ 1595.974795][T24468] i_nlink=0 [ 1596.389967][T24468] EXT4-fs error (device loop6): ext4_do_update_inode:5294: inode #15: comm syz.6.5111: corrupted inode contents [ 1596.547874][T24468] EXT4-fs error (device loop6): ext4_dirty_inode:6188: inode #15: comm syz.6.5111: mark_inode_dirty error [ 1596.592832][T24468] EXT4-fs error (device loop6): ext4_do_update_inode:5294: inode #15: comm syz.6.5111: corrupted inode contents [ 1596.635987][T24468] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.5111: mark_inode_dirty error [ 1596.654208][T24468] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #15: comm syz.6.5111: mark inode dirty (error -117) [ 1596.668091][T24468] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 1596.681417][T24468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1596.685979][T24485] loop8: detected capacity change from 0 to 1764 [ 1596.703300][T24468] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.777457][T24487] FAULT_INJECTION: forcing a failure. [ 1596.777457][T24487] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1596.804127][T24487] CPU: 0 PID: 24487 Comm: syz.4.5115 Not tainted syzkaller #0 [ 1596.811657][T24487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1596.814291][T22401] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1596.821724][T24487] Call Trace: [ 1596.821736][T24487] [ 1596.835447][T24487] dump_stack_lvl+0x18c/0x250 [ 1596.840205][T24487] ? alloc_file_pseudo+0x184/0x210 [ 1596.845352][T24487] ? __sys_socket+0x140/0x1b0 [ 1596.850053][T24487] ? show_regs_print_info+0x20/0x20 [ 1596.855356][T24487] ? load_image+0x420/0x420 [ 1596.859863][T24487] ? mark_lock+0x94/0x320 [ 1596.864203][T24487] should_fail_ex+0x394/0x4c0 [ 1596.868894][T24487] get_futex_key+0x134/0xf40 [ 1596.873484][T24487] ? futex_setup_timer+0xc0/0xc0 [ 1596.878432][T24487] futex_wake+0x127/0x4f0 [ 1596.882765][T24487] ? futex_wake_mark+0x150/0x150 [ 1596.887738][T24487] ? fd_install+0x60/0x4e0 [ 1596.892161][T24487] do_futex+0x35d/0x3e0 [ 1596.896323][T24487] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1596.902220][T24487] ? __lock_acquire+0x7eb0/0x7eb0 [ 1596.907256][T24487] __se_sys_futex+0x3a9/0x440 [ 1596.911933][T24487] ? __x64_sys_futex+0xf0/0xf0 [ 1596.916717][T24487] ? __x64_sys_futex+0x21/0xf0 [ 1596.921479][T24487] do_syscall_64+0x55/0xb0 [ 1596.925910][T24487] ? clear_bhb_loop+0x40/0x90 [ 1596.930584][T24487] ? clear_bhb_loop+0x40/0x90 [ 1596.935265][T24487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1596.941162][T24487] RIP: 0033:0x7f3d7df9fb19 [ 1596.945582][T24487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.965277][T24487] RSP: 002b:00007f3d7ee6f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1596.973691][T24487] RAX: ffffffffffffffda RBX: 00007f3d7e225fa8 RCX: 00007f3d7df9fb19 [ 1596.981665][T24487] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3d7e225fac [ 1596.989750][T24487] RBP: 00007f3d7e225fa0 R08: 0000000000745a5b R09: 0000000000000000 [ 1596.997720][T24487] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1597.005690][T24487] R13: 00007f3d7e226038 R14: 00007ffd4ab40b80 R15: 00007ffd4ab40c68 [ 1597.013681][T24487] [ 1597.085222][T22401] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1598.378593][T23041] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.608960][T23041] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.808783][T24502] loop4: detected capacity change from 0 to 2048 [ 1598.809890][T24502] UDF-fs: bad mount option "ÿÿ000000000000000000000030xffffffffffffffffÿÿÿÿ" or missing value [ 1598.814901][T23041] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.847473][T24477] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1599.046596][T23041] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.383365][T24511] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1599.845033][T24513] FAULT_INJECTION: forcing a failure. [ 1599.845033][T24513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1599.845066][T24513] CPU: 1 PID: 24513 Comm: syz.6.5127 Not tainted syzkaller #0 [ 1599.845104][T24513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1599.845119][T24513] Call Trace: [ 1599.845127][T24513] [ 1599.845136][T24513] dump_stack_lvl+0x18c/0x250 [ 1599.845169][T24513] ? show_regs_print_info+0x20/0x20 [ 1599.845193][T24513] ? load_image+0x420/0x420 [ 1599.845216][T24513] ? __might_fault+0xaa/0x120 [ 1599.845238][T24513] ? __lock_acquire+0x7eb0/0x7eb0 [ 1599.845258][T24513] ? preempt_schedule+0xc0/0xd0 [ 1599.845288][T24513] should_fail_ex+0x394/0x4c0 [ 1599.845314][T24513] _copy_from_user+0x2f/0xe0 [ 1599.845334][T24513] ___sys_sendmsg+0x1c7/0x360 [ 1599.845360][T24513] ? __sys_sendmsg+0x2b0/0x2b0 [ 1599.845425][T24513] __se_sys_sendmsg+0x1d0/0x2c0 [ 1599.845448][T24513] ? __x64_sys_sendmsg+0x80/0x80 [ 1599.845478][T24513] ? lockdep_hardirqs_on+0x98/0x150 [ 1599.845496][T24513] do_syscall_64+0x55/0xb0 [ 1599.845518][T24513] ? clear_bhb_loop+0x40/0x90 [ 1599.845542][T24513] ? clear_bhb_loop+0x40/0x90 [ 1599.845568][T24513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1599.845591][T24513] RIP: 0033:0x7f7862b9fb19 [ 1599.845610][T24513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.845626][T24513] RSP: 002b:00007f7863a58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1599.845648][T24513] RAX: ffffffffffffffda RBX: 00007f7862e25fa0 RCX: 00007f7862b9fb19 [ 1599.845663][T24513] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000004 [ 1599.845677][T24513] RBP: 00007f7862c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1599.845690][T24513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.845703][T24513] R13: 00007f7862e26038 R14: 00007f7862e25fa0 R15: 00007fff63534a98 [ 1599.845733][T24513] [ 1600.775989][T21426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1600.789711][T21426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1600.805487][T21426] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1600.819759][T21426] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1600.828398][T21426] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1600.844298][T21426] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1601.617809][T24533] loop6: detected capacity change from 0 to 2048 [ 1601.745031][T24533] UDF-fs: bad mount option "ÿÿ000000000000000000000030xffffffffffffffffÿÿÿÿ" or missing value [ 1602.485663][T24524] rxe_eth0 speed is unknown, defaulting to 1000 [ 1602.676756][T24552] FAULT_INJECTION: forcing a failure. [ 1602.676756][T24552] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1602.787655][T24555] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1602.798628][T24552] CPU: 1 PID: 24552 Comm: syz.6.5135 Not tainted syzkaller #0 [ 1602.806147][T24552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1602.816233][T24552] Call Trace: [ 1602.819529][T24552] [ 1602.822506][T24552] dump_stack_lvl+0x18c/0x250 [ 1602.827222][T24552] ? alloc_file_pseudo+0x184/0x210 [ 1602.832367][T24552] ? __sys_socket+0x140/0x1b0 [ 1602.837076][T24552] ? show_regs_print_info+0x20/0x20 [ 1602.842349][T24552] ? load_image+0x420/0x420 [ 1602.846886][T24552] ? mark_lock+0x94/0x320 [ 1602.851258][T24552] should_fail_ex+0x394/0x4c0 [ 1602.856006][T24552] get_futex_key+0x134/0xf40 [ 1602.860632][T24552] ? futex_setup_timer+0xc0/0xc0 [ 1602.865599][T24552] futex_wake+0x127/0x4f0 [ 1602.869957][T24552] ? futex_wake_mark+0x150/0x150 [ 1602.874943][T24552] ? fd_install+0x60/0x4e0 [ 1602.879388][T24552] do_futex+0x35d/0x3e0 [ 1602.883571][T24552] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1602.889496][T24552] ? __lock_acquire+0x7eb0/0x7eb0 [ 1602.894563][T24552] __se_sys_futex+0x3a9/0x440 [ 1602.899277][T24552] ? __x64_sys_futex+0xf0/0xf0 [ 1602.904089][T24552] ? __x64_sys_futex+0x21/0xf0 [ 1602.908894][T24552] do_syscall_64+0x55/0xb0 [ 1602.913340][T24552] ? clear_bhb_loop+0x40/0x90 [ 1602.918041][T24552] ? clear_bhb_loop+0x40/0x90 [ 1602.922751][T24552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1602.928677][T24552] RIP: 0033:0x7f7862b9fb19 [ 1602.933113][T24552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.952748][T24552] RSP: 002b:00007f7863a580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1602.961189][T24552] RAX: ffffffffffffffda RBX: 00007f7862e25fa8 RCX: 00007f7862b9fb19 [ 1602.969181][T24552] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7862e25fac [ 1602.977178][T24552] RBP: 00007f7862e25fa0 R08: 0000000000745a5b R09: 0000000000000000 [ 1602.985177][T24552] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1602.993182][T24552] R13: 00007f7862e26038 R14: 00007fff635349b0 R15: 00007fff63534a98 [ 1603.001192][T24552] [ 1603.258398][T21426] Bluetooth: hci0: command tx timeout [ 1604.180798][T24524] chnl_net:caif_netlink_parms(): no params data found [ 1604.396163][T24524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.414526][T24524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.434452][T24524] bridge_slave_0: entered allmulticast mode [ 1604.441407][T24524] bridge_slave_0: entered promiscuous mode [ 1604.467460][T24524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.480611][T24524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.489520][T24524] bridge_slave_1: entered allmulticast mode [ 1604.502536][T24524] bridge_slave_1: entered promiscuous mode [ 1604.582152][T24524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.607937][T24524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.673340][T24524] team0: Port device team_slave_0 added [ 1604.700750][T24524] team0: Port device team_slave_1 added [ 1604.781139][T24524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.804168][T24524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1604.863607][T24524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1604.896648][T24524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.903639][T24524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1604.984166][T24524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.344288][T21426] Bluetooth: hci0: command tx timeout [ 1606.846555][T24524] hsr_slave_0: entered promiscuous mode [ 1606.908438][T24524] hsr_slave_1: entered promiscuous mode [ 1606.915748][T24599] loop6: detected capacity change from 0 to 2048 [ 1606.954238][T24524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1606.955392][T24599] UDF-fs: bad mount option "ÿÿ000000000000000000000030xffffffffffffffffÿÿÿÿ" or missing value [ 1606.963940][T24524] Cannot create hsr debugfs directory [ 1607.407963][T21426] Bluetooth: hci0: command tx timeout [ 1607.510741][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.521069][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.078880][T23041] team0: Port device gretap1 removed [ 1609.475578][T21426] Bluetooth: hci0: command tx timeout [ 1610.556893][T24524] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1610.668081][T24524] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1610.791624][T23041] hsr_slave_0: left promiscuous mode [ 1610.814897][T23041] hsr_slave_1: left promiscuous mode [ 1610.834887][T23041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1610.852713][T23041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.870131][T23041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1610.897074][T23041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.935490][T23041] bridge_slave_1: left allmulticast mode [ 1610.960114][T23041] bridge_slave_1: left promiscuous mode [ 1611.021232][T23041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.080487][T23041] bridge_slave_0: left allmulticast mode [ 1611.128653][T23041] bridge_slave_0: left promiscuous mode [ 1611.168814][T23041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.512051][T23041] veth1_macvtap: left promiscuous mode [ 1612.526746][T23041] veth0_macvtap: left promiscuous mode [ 1612.532469][T23041] veth1_vlan: left promiscuous mode [ 1612.564254][T23041] veth0_vlan: left promiscuous mode [ 1614.075058][T23041] bond2 (unregistering): Released all slaves [ 1614.095463][T23041] bond1 (unregistering): Released all slaves [ 1615.737146][T23041] team0 (unregistering): Port device team_slave_1 removed [ 1615.834186][T23041] team0 (unregistering): Port device team_slave_0 removed [ 1616.807224][T23041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1617.036539][T23041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1620.752927][T23041] bond0 (unregistering): Released all slaves [ 1620.877832][T24524] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1620.888918][T24524] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1620.907692][T24632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5149'. [ 1621.019056][T24682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5162'. [ 1622.050415][T24524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1622.121817][T24524] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.185594][T16018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.192744][T16018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.262479][T16018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.269642][T16018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1625.122721][T24524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1625.224768][T24524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1625.568531][T24724] lwtunnel_output(): recursion limit reached on datapath [ 1625.900263][T24732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5174'. [ 1626.195281][T24524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.704920][T24758] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1628.996728][T24771] loop6: detected capacity change from 0 to 128 [ 1629.004489][T24771] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1629.034145][T24771] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1629.221974][T24524] veth0_vlan: entered promiscuous mode [ 1629.279073][T24524] veth1_vlan: entered promiscuous mode [ 1629.366427][T24779] lwtunnel_output(): recursion limit reached on datapath [ 1629.490073][T24524] veth0_macvtap: entered promiscuous mode [ 1629.522180][T24524] veth1_macvtap: entered promiscuous mode [ 1630.367189][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.444209][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.484122][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.526069][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.554154][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.584862][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.604603][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.638989][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.673920][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.688844][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.744316][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.784101][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.829663][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1630.875300][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1630.906295][T24524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.959234][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1631.064884][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1631.223716][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1631.401413][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1631.504860][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1631.539349][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1631.599737][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1632.403477][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.413809][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1632.424904][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.436240][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1632.447130][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.457382][T24524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1632.478029][T24524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.496021][T24524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1632.552183][T24524] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.570212][T24524] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.658989][T24808] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1633.484177][T24524] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.492961][T24524] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.543502][T24811] lwtunnel_output(): recursion limit reached on datapath [ 1633.908063][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1633.947593][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.046178][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.087537][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.282765][T24843] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1637.046016][T24851] lwtunnel_output(): recursion limit reached on datapath [ 1640.775171][T24894] xt_CT: No such helper "netbios-ns" [ 1642.073230][T24912] loop3: detected capacity change from 0 to 4096 [ 1644.329161][T24943] lwtunnel_output(): recursion limit reached on datapath [ 1646.803259][T24981] lwtunnel_output(): recursion limit reached on datapath [ 1655.005155][T25054] random: crng reseeded on system resumption [ 1655.307920][T25056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5250'. [ 1659.585520][T11056] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1659.654073][T11056] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1663.634156][ T27] audit: type=1800 audit(1793893880.239:891): pid=25122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5261" name="iso_qlen" dev="configfs" ino=66086 res=0 errno=0 [ 1667.874294][T25168] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5274'. [ 1669.176209][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.216546][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.489489][T25184] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1682.180404][T25279] ip_tables: iptables: counters copy to user failed while replacing table [ 1689.849040][T25346] loop4: detected capacity change from 0 to 256 [ 1690.402304][T25346] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1694.276055][T25376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5316'. [ 1697.605218][T25413] loop9: detected capacity change from 0 to 16 [ 1699.008837][T25413] erofs: (device loop9): mounted with root inode @ nid 36. [ 1700.126086][T25436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5325'. [ 1700.295731][T25439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.303149][T25439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.828557][T25473] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1706.627143][T25488] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5336'. [ 1706.897471][T25493] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1707.714590][T25477] Bluetooth: hci1: command 0x0406 tx timeout [ 1709.874890][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1713.935082][T25536] loop6: detected capacity change from 0 to 2048 [ 1713.971769][T25536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1715.808763][T25544] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1719.077151][T21426] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1720.769544][T25585] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1724.676115][T25617] loop9: detected capacity change from 0 to 2048 [ 1724.816776][T25617] loop9: p1 < > p2 p3 p4 < p5 p6 > [ 1724.842529][T25617] loop9: partition table partially beyond EOD, truncated [ 1724.905706][T25617] loop9: p1 start 3405774849 is beyond EOD, truncated [ 1725.156360][T25617] loop9: p3 start 4225 is beyond EOD, truncated [ 1725.369067][T25617] loop9: p6 start 4225 is beyond EOD, truncated [ 1725.388873][T25626] nvmet: adding nsid 1 to subsystem subsys1 [ 1727.736273][T21426] Bluetooth: hci0: command 0x0406 tx timeout [ 1727.775636][T25635] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1727.812341][T25633] loop4: detected capacity change from 0 to 256 [ 1727.887893][T25633] FAT-fs (loop4): Directory bread(block 64) failed [ 1727.894708][T25633] FAT-fs (loop4): Directory bread(block 65) failed [ 1727.901370][T25633] FAT-fs (loop4): Directory bread(block 66) failed [ 1727.932562][T25633] FAT-fs (loop4): Directory bread(block 67) failed [ 1727.947617][T25633] FAT-fs (loop4): Directory bread(block 68) failed [ 1727.976934][T25633] FAT-fs (loop4): Directory bread(block 69) failed [ 1727.983633][T25633] FAT-fs (loop4): Directory bread(block 70) failed [ 1728.015807][T25633] FAT-fs (loop4): Directory bread(block 71) failed [ 1728.022506][T25633] FAT-fs (loop4): Directory bread(block 72) failed [ 1728.059742][T25633] FAT-fs (loop4): Directory bread(block 73) failed [ 1730.515751][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.522088][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.499669][T22131] Bluetooth: hci0: command 0x0406 tx timeout [ 1736.907120][T25684] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1737.009148][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5384'. [ 1738.518491][T25699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5387'. [ 1750.726779][T25757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5397'. [ 1756.400548][T25788] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1769.428453][T25859] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5428'. [ 1770.766394][T25866] FAULT_INJECTION: forcing a failure. [ 1770.766394][T25866] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1770.804701][T25866] CPU: 0 PID: 25866 Comm: syz.9.5430 Not tainted syzkaller #0 [ 1770.812238][T25866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1770.822366][T25866] Call Trace: [ 1770.825667][T25866] [ 1770.828620][T25866] dump_stack_lvl+0x18c/0x250 [ 1770.833334][T25866] ? show_regs_print_info+0x20/0x20 [ 1770.838565][T25866] ? load_image+0x420/0x420 [ 1770.843095][T25866] ? rcu_read_lock_sched_held+0x8a/0x110 [ 1770.848756][T25866] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 1770.854940][T25866] ? __cgroup_rstat_updated+0xd5/0x360 [ 1770.860438][T25866] should_fail_ex+0x394/0x4c0 [ 1770.865148][T25866] get_futex_key+0x134/0xf40 [ 1770.869767][T25866] ? futex_setup_timer+0xc0/0xc0 [ 1770.874780][T25866] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1770.880801][T25866] ? __lock_acquire+0x7eb0/0x7eb0 [ 1770.885942][T25866] ? lock_chain_count+0x20/0x20 [ 1770.890835][T25866] futex_wait_setup+0xbc/0x270 [ 1770.895653][T25866] ? futex_wait_multiple+0x970/0x970 [ 1770.900993][T25866] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1770.906926][T25866] ? _raw_spin_unlock+0x40/0x40 [ 1770.911823][T25866] futex_wait+0x1cf/0x640 [ 1770.916194][T25866] ? futex_wait_setup+0x270/0x270 [ 1770.921279][T25866] ? file_end_write+0x159/0x250 [ 1770.926163][T25866] ? vfs_write+0x5de/0x9a0 [ 1770.930620][T25866] do_futex+0x2ff/0x3e0 [ 1770.934816][T25866] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1770.940742][T25866] __se_sys_futex+0x3a9/0x440 [ 1770.945480][T25866] ? __x64_sys_futex+0xf0/0xf0 [ 1770.950276][T25866] ? __x64_sys_futex+0x21/0xf0 [ 1770.955068][T25866] do_syscall_64+0x55/0xb0 [ 1770.959506][T25866] ? clear_bhb_loop+0x40/0x90 [ 1770.964209][T25866] ? clear_bhb_loop+0x40/0x90 [ 1770.968917][T25866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1770.974846][T25866] RIP: 0033:0x7f514239fb19 [ 1770.979281][T25866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.998919][T25866] RSP: 002b:00007f51432570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1771.007370][T25866] RAX: ffffffffffffffda RBX: 00007f5142625fa8 RCX: 00007f514239fb19 [ 1771.015375][T25866] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5142625fa8 [ 1771.023375][T25866] RBP: 00007f5142625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1771.031379][T25866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1771.039555][T25866] R13: 00007f5142626038 R14: 00007fffbde08b20 R15: 00007fffbde08c08 [ 1771.047664][T25866] [ 1773.590771][T25881] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL) [ 1773.600177][T25881] device-mapper: ioctl: error adding target to table [ 1786.126895][T25954] loop6: detected capacity change from 0 to 16 [ 1786.146967][T25954] erofs: (device loop6): mounted with root inode @ nid 36. [ 1786.899276][T25961] loop6: detected capacity change from 0 to 512 [ 1787.014172][T25961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1787.088029][T25961] System zones: 1-12 [ 1787.154959][T25961] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.5452: missing EA_INODE flag [ 1787.196574][T25965] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1787.249514][T25961] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.5452: error while reading EA inode 12 err=-117 [ 1788.391190][T25961] EXT4-fs (loop6): 1 orphan inode deleted [ 1788.459639][T25961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1788.515363][T25969] xt_CT: No such helper "netbios-ns" [ 1789.816267][ T27] audit: type=1804 audit(1793894006.429:892): pid=25961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5452" name="/newroot/419/file0/bus" dev="loop6" ino=18 res=1 errno=0 [ 1790.185629][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5457'. [ 1790.210760][T19909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.801756][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.809166][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.846350][T26003] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1793.010491][T26000] loop3: detected capacity change from 0 to 8192 [ 1793.079071][T26000] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1796.579268][ T5854] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1796.640129][ T5854] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1797.855106][T22131] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1801.467527][T26063] lwtunnel_output(): recursion limit reached on datapath [ 1801.582105][T26065] Bluetooth: MGMT ver 1.22 [ 1801.597183][T26065] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 1801.763286][T26069] loop3: detected capacity change from 0 to 512 [ 1801.795645][T26069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1801.821100][T26069] System zones: 1-12 [ 1802.631791][T26069] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.5483: missing EA_INODE flag [ 1802.645502][T26069] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5483: error while reading EA inode 12 err=-117 [ 1802.694727][T26069] EXT4-fs (loop3): 1 orphan inode deleted [ 1802.729991][T26069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1802.747495][T26071] xt_CT: No such helper "netbios-ns" [ 1802.832605][ T27] audit: type=1804 audit(1793894019.439:893): pid=26069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5483" name="/newroot/174/file0/bus" dev="loop3" ino=15 res=1 errno=0 [ 1802.977085][T26080] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1803.270547][T23239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1805.993515][ T6513] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1806.224903][ T6513] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1806.243619][ T6513] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1806.285007][ T6513] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1806.326766][ T6513] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1806.354190][ T6513] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1807.306235][ T6513] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1807.388588][ T6513] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1807.405502][ T6513] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1807.444651][ T6513] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1808.244448][ T6513] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1808.252493][ T6513] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1808.274605][ T6513] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1808.299362][ T6513] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1808.316313][ T6513] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1808.327510][ T6513] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1808.350256][ T6513] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1808.366205][ T6513] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1808.380666][ T6513] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1808.392232][T26111] xt_CT: No such helper "netbios-ns" [ 1808.494118][ T6513] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1808.564171][ T6513] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1808.584887][ T6513] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1808.634311][ T6513] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1808.689531][ T6513] usb 7-1: unable to read config index 7 descriptor/start: -71 [ 1808.734150][ T6513] usb 7-1: can't read configurations, error -71 [ 1809.225939][T26122] lwtunnel_output(): recursion limit reached on datapath [ 1811.919022][T26135] loop9: detected capacity change from 0 to 512 [ 1812.002255][T26135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1812.031339][T26135] System zones: 1-12 [ 1812.075599][T26135] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #12: comm syz.9.5494: missing EA_INODE flag [ 1812.143562][T26135] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.5494: error while reading EA inode 12 err=-117 [ 1812.197174][T26135] EXT4-fs (loop9): 1 orphan inode deleted [ 1812.206795][T26135] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1812.264790][ T27] audit: type=1804 audit(1793894028.879:894): pid=26135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.5494" name="/newroot/81/file0/bus" dev="loop9" ino=15 res=1 errno=0 [ 1812.650698][T10900] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1812.685086][T10900] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1812.827395][T24524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1813.891275][T26143] fido_id[26143]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1814.884721][T26154] xt_CT: No such helper "netbios-ns" [ 1818.840137][T13310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1818.859090][T13310] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1819.021101][T26179] lwtunnel_output(): recursion limit reached on datapath [ 1819.146170][T26177] fido_id[26177]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1819.290834][T26186] loop3: detected capacity change from 0 to 512 [ 1819.379172][T26186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1819.424294][T26186] System zones: 1-12 [ 1820.298772][T26186] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.5510: missing EA_INODE flag [ 1820.341346][T26186] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5510: error while reading EA inode 12 err=-117 [ 1821.157798][T26186] EXT4-fs (loop3): 1 orphan inode deleted [ 1821.187036][T26186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1821.252403][T26199] xt_CT: No such helper "netbios-ns" [ 1821.416539][ T27] audit: type=1804 audit(1793894038.029:895): pid=26186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5510" name="/newroot/181/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 1821.879770][T23239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1822.584495][T26218] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1826.870328][ T5854] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1826.912671][ T5854] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1826.951982][T26247] loop4: detected capacity change from 0 to 512 [ 1827.072800][T26247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1827.080971][T26247] System zones: 1-12 [ 1827.088145][T26247] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.5530: missing EA_INODE flag [ 1827.106836][T26247] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5530: error while reading EA inode 12 err=-117 [ 1827.143689][T26247] EXT4-fs (loop4): 1 orphan inode deleted [ 1827.153883][T26247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1827.172541][ T27] audit: type=1804 audit(1793894043.779:896): pid=26247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5530" name="/newroot/281/file0/bus" dev="loop4" ino=15 res=1 errno=0 [ 1828.107026][T26248] fido_id[26248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1828.267437][T22044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.424898][T26260] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5532'. [ 1828.451766][T26260] lwtunnel_output(): recursion limit reached on datapath [ 1829.799783][T26273] loop3: detected capacity change from 0 to 4096 [ 1829.828240][T26273] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1832.000175][T26294] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5542'. [ 1832.032230][T26294] lwtunnel_output(): recursion limit reached on datapath [ 1836.212508][T26319] loop4: detected capacity change from 0 to 512 [ 1836.264185][T26319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1836.272276][T26319] System zones: 1-12 [ 1836.334585][T26319] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.5541: missing EA_INODE flag [ 1836.385885][T26317] loop3: detected capacity change from 0 to 4096 [ 1836.405808][T26319] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5541: error while reading EA inode 12 err=-117 [ 1836.427546][T26317] EXT4-fs: Ignoring removed nobh option [ 1836.464185][T26317] EXT4-fs: Ignoring removed bh option [ 1836.472733][T26319] EXT4-fs (loop4): 1 orphan inode deleted [ 1836.491740][T26319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1836.516902][T26317] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1836.537559][T26317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1836.641377][ T27] audit: type=1804 audit(1793894053.249:897): pid=26319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5541" name="/newroot/287/file0/bus" dev="loop4" ino=15 res=1 errno=0 [ 1838.015903][T22044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1838.189984][T23239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1838.986337][T26341] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5551'. [ 1841.344037][T26351] xt_CT: No such helper "netbios-ns" [ 1841.607934][T26350] loop9: detected capacity change from 0 to 256 [ 1841.708551][T26350] FAT-fs (loop9): Directory bread(block 64) failed [ 1841.738329][T26350] FAT-fs (loop9): Directory bread(block 65) failed [ 1841.784346][T26350] FAT-fs (loop9): Directory bread(block 66) failed [ 1841.814426][T26350] FAT-fs (loop9): Directory bread(block 67) failed [ 1841.821119][T26350] FAT-fs (loop9): Directory bread(block 68) failed [ 1841.858950][T26350] FAT-fs (loop9): Directory bread(block 69) failed [ 1841.884453][T26350] FAT-fs (loop9): Directory bread(block 70) failed [ 1841.928953][T26350] FAT-fs (loop9): Directory bread(block 71) failed [ 1842.024634][T26350] FAT-fs (loop9): Directory bread(block 72) failed [ 1842.089044][T26350] FAT-fs (loop9): Directory bread(block 73) failed [ 1843.079719][T26363] loop4: detected capacity change from 0 to 512 [ 1843.131518][T26363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1843.166248][T26363] System zones: 1-12 [ 1843.215608][T26363] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.5559: missing EA_INODE flag [ 1844.136098][T26363] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5559: error while reading EA inode 12 err=-117 [ 1844.179460][T26363] EXT4-fs (loop4): 1 orphan inode deleted [ 1844.199968][T26363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1844.251150][ T27] audit: type=1804 audit(1793894060.859:898): pid=26363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5559" name="/newroot/290/file0/bus" dev="loop4" ino=15 res=1 errno=0 [ 1845.756321][T22044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.593328][T26391] FAULT_INJECTION: forcing a failure. [ 1848.593328][T26391] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1848.625407][T26391] CPU: 0 PID: 26391 Comm: syz.9.5561 Not tainted syzkaller #0 [ 1848.632932][T26391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1848.643012][T26391] Call Trace: [ 1848.646346][T26391] [ 1848.649293][T26391] dump_stack_lvl+0x18c/0x250 [ 1848.654001][T26391] ? show_regs_print_info+0x20/0x20 [ 1848.659228][T26391] ? load_image+0x420/0x420 [ 1848.663751][T26391] ? rcu_read_lock_sched_held+0x8a/0x110 [ 1848.669447][T26391] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 1848.675630][T26391] ? __update_load_avg_cfs_rq+0x689/0xa80 [ 1848.681382][T26391] should_fail_ex+0x394/0x4c0 [ 1848.686091][T26391] get_futex_key+0x134/0xf40 [ 1848.690703][T26391] ? futex_setup_timer+0xc0/0xc0 [ 1848.695653][T26391] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1848.701654][T26391] ? __lock_acquire+0x7eb0/0x7eb0 [ 1848.706700][T26391] ? lock_chain_count+0x20/0x20 [ 1848.711576][T26391] futex_wait_setup+0xbc/0x270 [ 1848.716371][T26391] ? futex_wait_multiple+0x970/0x970 [ 1848.721676][T26391] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1848.727592][T26391] ? _raw_spin_unlock+0x40/0x40 [ 1848.732472][T26391] futex_wait+0x1cf/0x640 [ 1848.736838][T26391] ? futex_wait_setup+0x270/0x270 [ 1848.741913][T26391] do_futex+0x2ff/0x3e0 [ 1848.746099][T26391] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1848.752030][T26391] __se_sys_futex+0x3a9/0x440 [ 1848.756742][T26391] ? __x64_sys_futex+0xf0/0xf0 [ 1848.761545][T26391] ? __x64_sys_futex+0x21/0xf0 [ 1848.766341][T26391] do_syscall_64+0x55/0xb0 [ 1848.770786][T26391] ? clear_bhb_loop+0x40/0x90 [ 1848.775491][T26391] ? clear_bhb_loop+0x40/0x90 [ 1848.780198][T26391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1848.786125][T26391] RIP: 0033:0x7f514239fb19 [ 1848.790562][T26391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1848.810197][T26391] RSP: 002b:00007f51432570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1848.818641][T26391] RAX: ffffffffffffffda RBX: 00007f5142625fa8 RCX: 00007f514239fb19 [ 1848.826637][T26391] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5142625fa8 [ 1848.834630][T26391] RBP: 00007f5142625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1848.842621][T26391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1848.850611][T26391] R13: 00007f5142626038 R14: 00007fffbde08b20 R15: 00007fffbde08c08 [ 1848.858624][T26391] [ 1849.868974][T26397] loop3: detected capacity change from 0 to 16 [ 1850.003515][T26397] erofs: (device loop3): mounted with root inode @ nid 36. [ 1850.170839][T26403] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1851.359521][T26415] loop6: detected capacity change from 0 to 512 [ 1851.476925][T26415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1851.489713][T26415] System zones: 1-12 [ 1851.505126][T26415] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.5571: missing EA_INODE flag [ 1851.520632][T26415] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.5571: error while reading EA inode 12 err=-117 [ 1851.536628][T26415] EXT4-fs (loop6): 1 orphan inode deleted [ 1851.571979][T26415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1851.680025][ T27] audit: type=1804 audit(1793894068.289:899): pid=26415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5571" name="/newroot/440/file0/bus" dev="loop6" ino=15 res=1 errno=0 [ 1852.568260][T26426] xt_CT: No such helper "netbios-ns" [ 1852.678979][T19909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.685553][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.982473][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.994092][T22131] Bluetooth: hci0: command 0x0406 tx timeout [ 1858.047089][T26464] xt_CT: No such helper "netbios-ns" [ 1858.255382][T26468] loop6: detected capacity change from 0 to 1024 [ 1861.983529][T26483] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1864.611395][T26508] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1868.729662][T26525] IPv6: NLM_F_CREATE should be specified when creating new route [ 1868.738357][T26525] netlink: 'syz.3.5598': attribute type 1 has an invalid length. [ 1871.267901][T26540] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1874.131486][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1874.149498][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1874.356191][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1874.403421][T26559] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1874.470666][T26559] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1875.976043][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1876.025829][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1876.033412][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1876.113882][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1876.158138][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1876.312242][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1876.986098][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1877.001873][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1877.015112][T26559] erspan0 speed is unknown, defaulting to 1000 [ 1878.821806][T26582] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1879.926381][T26584] loop9: detected capacity change from 0 to 16 [ 1879.976604][T26584] erofs: (device loop9): mounted with root inode @ nid 36. [ 1880.434231][T26587] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1884.412013][T26613] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1885.897866][T26627] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1886.787627][T26634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5628'. [ 1888.457409][T26643] FAULT_INJECTION: forcing a failure. [ 1888.457409][T26643] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.507313][T26643] CPU: 1 PID: 26643 Comm: syz.4.5630 Not tainted syzkaller #0 [ 1888.514834][T26643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1888.524910][T26643] Call Trace: [ 1888.528203][T26643] [ 1888.531141][T26643] dump_stack_lvl+0x18c/0x250 [ 1888.535831][T26643] ? show_regs_print_info+0x20/0x20 [ 1888.541031][T26643] ? load_image+0x420/0x420 [ 1888.545533][T26643] ? __might_sleep+0xe0/0xe0 [ 1888.550120][T26643] ? __lock_acquire+0x7eb0/0x7eb0 [ 1888.555163][T26643] should_fail_ex+0x394/0x4c0 [ 1888.559867][T26643] should_failslab+0x9/0x20 [ 1888.564377][T26643] slab_pre_alloc_hook+0x59/0x300 [ 1888.569404][T26643] ? sk_prot_alloc+0xe7/0x210 [ 1888.574083][T26643] ? sk_prot_alloc+0xe7/0x210 [ 1888.578764][T26643] __kmem_cache_alloc_node+0x53/0x260 [ 1888.584145][T26643] ? sk_prot_alloc+0xe7/0x210 [ 1888.588819][T26643] __kmalloc+0xa7/0x240 [ 1888.592973][T26643] ? bpf_lsm_inode_alloc_security+0x9/0x10 [ 1888.598809][T26643] sk_prot_alloc+0xe7/0x210 [ 1888.603312][T26643] ? sk_alloc+0x24/0x350 [ 1888.607558][T26643] sk_alloc+0x3a/0x350 [ 1888.611635][T26643] __netlink_create+0x6c/0x290 [ 1888.616408][T26643] __netlink_kernel_create+0x148/0x7b0 [ 1888.621912][T26643] ? netlink_set_err+0x3b0/0x3b0 [ 1888.626868][T26643] ? rtnetlink_net_init+0xa5/0x140 [ 1888.631994][T26643] rtnetlink_net_init+0xb4/0x140 [ 1888.636940][T26643] ? nlmsg_populate_fdb_fill+0x620/0x620 [ 1888.642578][T26643] ? rtnetlink_net_exit+0x60/0x60 [ 1888.647599][T26643] ? rtnetlink_rcv+0x20/0x20 [ 1888.652187][T26643] ? __raw_spin_lock_init+0x45/0x100 [ 1888.657475][T26643] ? debug_mutex_init+0x38/0x70 [ 1888.662324][T26643] ops_init+0x391/0x640 [ 1888.666485][T26643] setup_net+0x3b6/0xa20 [ 1888.670723][T26643] ? copy_net_ns+0x530/0x530 [ 1888.675310][T26643] ? copy_net_ns+0x347/0x530 [ 1888.679897][T26643] ? down_read_killable+0x1d0/0x340 [ 1888.685096][T26643] copy_net_ns+0x361/0x530 [ 1888.689508][T26643] create_new_namespaces+0x3ce/0x700 [ 1888.694800][T26643] unshare_nsproxy_namespaces+0x11a/0x160 [ 1888.700521][T26643] ksys_unshare+0x4fa/0x8f0 [ 1888.705028][T26643] ? sighand_ctor+0x50/0x50 [ 1888.709527][T26643] ? lock_chain_count+0x20/0x20 [ 1888.714378][T26643] ? syscall_enter_from_user_mode+0x25/0x80 [ 1888.720267][T26643] __x64_sys_unshare+0x38/0x40 [ 1888.725033][T26643] do_syscall_64+0x55/0xb0 [ 1888.729444][T26643] ? clear_bhb_loop+0x40/0x90 [ 1888.734124][T26643] ? clear_bhb_loop+0x40/0x90 [ 1888.738811][T26643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1888.744702][T26643] RIP: 0033:0x7f3d7df9fb19 [ 1888.749127][T26643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.768744][T26643] RSP: 002b:00007f3d7ee6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1888.777158][T26643] RAX: ffffffffffffffda RBX: 00007f3d7e225fa0 RCX: 00007f3d7df9fb19 [ 1888.785133][T26643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1888.793098][T26643] RBP: 00007f3d7e037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1888.801069][T26643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1888.809036][T26643] R13: 00007f3d7e226038 R14: 00007f3d7e225fa0 R15: 00007ffd4ab40c68 [ 1888.817022][T26643] [ 1890.930076][T26652] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5633'. [ 1893.562068][T26674] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1897.297161][T26707] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1897.835535][T26708] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1899.314231][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1899.970888][T26725] block device autoloading is deprecated and will be removed. [ 1901.961400][T26743] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1903.051802][T26745] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1910.408309][T26812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5679'. [ 1910.619175][T26820] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1910.995926][T26825] FAULT_INJECTION: forcing a failure. [ 1910.995926][T26825] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.044148][T26825] CPU: 0 PID: 26825 Comm: syz.4.5682 Not tainted syzkaller #0 [ 1911.051666][T26825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1911.061758][T26825] Call Trace: [ 1911.065059][T26825] [ 1911.068010][T26825] dump_stack_lvl+0x18c/0x250 [ 1911.072726][T26825] ? show_regs_print_info+0x20/0x20 [ 1911.077977][T26825] ? load_image+0x420/0x420 [ 1911.082514][T26825] ? __lock_acquire+0x7eb0/0x7eb0 [ 1911.087580][T26825] should_fail_ex+0x394/0x4c0 [ 1911.092297][T26825] should_failslab+0x9/0x20 [ 1911.096831][T26825] slab_pre_alloc_hook+0x59/0x300 [ 1911.101928][T26825] kmem_cache_alloc_lru+0x4d/0x2c0 [ 1911.107067][T26825] ? sock_alloc_inode+0x28/0xc0 [ 1911.111961][T26825] sock_alloc_inode+0x28/0xc0 [ 1911.116678][T26825] ? sockfs_init_fs_context+0xb0/0xb0 [ 1911.120932][T26816] loop6: detected capacity change from 0 to 32768 [ 1911.122062][T26825] new_inode_pseudo+0x63/0x1d0 [ 1911.122096][T26825] __sock_create+0x12d/0x940 [ 1911.137875][T26825] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1911.143893][T26825] __sys_socket+0xd7/0x1b0 [ 1911.148347][T26825] __x64_sys_socket+0x7a/0x90 [ 1911.153053][T26825] do_syscall_64+0x55/0xb0 [ 1911.155345][T26816] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.5666 (26816) [ 1911.157477][T26825] ? clear_bhb_loop+0x40/0x90 [ 1911.157511][T26825] ? clear_bhb_loop+0x40/0x90 [ 1911.179202][T26825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1911.185133][T26825] RIP: 0033:0x7f3d7df9fb19 [ 1911.189580][T26825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1911.209213][T26825] RSP: 002b:00007f3d7ee6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1911.217651][T26825] RAX: ffffffffffffffda RBX: 00007f3d7e225fa0 RCX: 00007f3d7df9fb19 [ 1911.225635][T26825] RDX: 0000000000000262 RSI: 000000000000000a RDI: 0000000000000002 [ 1911.233599][T26825] RBP: 00007f3d7e037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1911.241565][T26825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1911.249528][T26825] R13: 00007f3d7e226038 R14: 00007f3d7e225fa0 R15: 00007ffd4ab40c68 [ 1911.257607][T26825] [ 1911.412892][T26816] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1911.446925][T26816] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 1911.471127][T26816] BTRFS info (device loop6): use zlib compression, level 3 [ 1911.491961][T26816] BTRFS info (device loop6): using free space tree [ 1911.534067][T26825] socket: no more sockets [ 1911.756804][T26816] BTRFS info (device loop6): enabling ssd optimizations [ 1911.890925][T26816] BTRFS info (device loop6): auto enabling async discard [ 1912.308869][T26852] loop3: detected capacity change from 0 to 16 [ 1912.411820][T26852] erofs: (device loop3): mounted with root inode @ nid 36. [ 1913.613724][T19909] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1915.043887][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.050268][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.170124][T26863] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1915.569724][T26870] FAULT_INJECTION: forcing a failure. [ 1915.569724][T26870] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.630630][T26870] CPU: 0 PID: 26870 Comm: syz.3.5692 Not tainted syzkaller #0 [ 1915.638152][T26870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1915.648318][T26870] Call Trace: [ 1915.651618][T26870] [ 1915.654566][T26870] dump_stack_lvl+0x18c/0x250 [ 1915.659271][T26870] ? show_regs_print_info+0x20/0x20 [ 1915.664496][T26870] ? load_image+0x420/0x420 [ 1915.669024][T26870] ? __lock_acquire+0x7eb0/0x7eb0 [ 1915.674080][T26870] should_fail_ex+0x394/0x4c0 [ 1915.678787][T26870] should_failslab+0x9/0x20 [ 1915.683310][T26870] slab_pre_alloc_hook+0x59/0x300 [ 1915.688366][T26870] kmem_cache_alloc_lru+0x4d/0x2c0 [ 1915.693506][T26870] ? sock_alloc_inode+0x28/0xc0 [ 1915.698387][T26870] sock_alloc_inode+0x28/0xc0 [ 1915.703091][T26870] ? sockfs_init_fs_context+0xb0/0xb0 [ 1915.708489][T26870] new_inode_pseudo+0x63/0x1d0 [ 1915.713284][T26870] __sock_create+0x12d/0x940 [ 1915.717909][T26870] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1915.723928][T26870] __sys_socket+0xd7/0x1b0 [ 1915.728372][T26870] __x64_sys_socket+0x7a/0x90 [ 1915.733072][T26870] do_syscall_64+0x55/0xb0 [ 1915.737518][T26870] ? clear_bhb_loop+0x40/0x90 [ 1915.742223][T26870] ? clear_bhb_loop+0x40/0x90 [ 1915.746929][T26870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1915.752885][T26870] RIP: 0033:0x7f1675f9fb19 [ 1915.757328][T26870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1915.776968][T26870] RSP: 002b:00007f1676d89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1915.785416][T26870] RAX: ffffffffffffffda RBX: 00007f1676225fa0 RCX: 00007f1675f9fb19 [ 1915.793425][T26870] RDX: 0000000000000262 RSI: 000000000000000a RDI: 0000000000000002 [ 1915.802418][T26870] RBP: 00007f1676037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1915.811123][T26870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1915.819136][T26870] R13: 00007f1676226038 R14: 00007f1676225fa0 R15: 00007ffe282330a8 [ 1915.827153][T26870] [ 1915.952609][T26870] socket: no more sockets [ 1916.041214][T26875] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1919.834720][T26898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5691'. [ 1920.403354][T26909] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1927.195683][T26943] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1930.719858][T26959] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1930.844735][T26963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5709'. [ 1932.222424][T26971] loop9: detected capacity change from 0 to 16 [ 1932.271254][T26971] erofs: (device loop9): mounted with root inode @ nid 36. [ 1933.137538][T26978] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1949.027253][T27051] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1949.554049][T27057] jffs2: notice: (27057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1951.444074][ T2203] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1952.904103][ T2203] usb 10-1: Using ep0 maxpacket: 8 [ 1952.980995][ T2203] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1953.021014][ T2203] usb 10-1: config 0 has no interface number 0 [ 1953.061588][ T2203] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1953.144072][ T2203] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1953.196727][ T2203] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1953.254252][ T2203] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1953.263431][ T2203] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.328225][ T2203] usb 10-1: config 0 descriptor?? [ 1953.348548][ T2203] ldusb 10-1:0.55: Interrupt in endpoint not found [ 1953.600405][ T2203] usb 10-1: USB disconnect, device number 2 [ 1955.856466][T27095] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1956.268550][T27102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5742'. [ 1956.609284][T27108] loop3: detected capacity change from 0 to 16 [ 1956.636269][T27108] erofs: (device loop3): mounted with root inode @ nid 36. [ 1963.738535][T27150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5763'. [ 1963.950001][T27154] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1968.190978][T27184] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1974.053385][T27223] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5776'. [ 1974.579663][T27230] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1976.135705][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.142072][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.029710][T27258] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1982.718163][T27279] xt_CT: No such helper "netbios-ns" [ 1982.933093][T27290] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1983.137637][T27294] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1984.329913][T27309] loop4: detected capacity change from 0 to 16 [ 1984.488595][T27309] erofs: (device loop4): mounted with root inode @ nid 36. [ 1986.331697][T27323] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1987.611297][T27326] xt_CT: No such helper "netbios-ns" [ 1987.994507][T27333] ceph: No source [ 1996.681189][T27386] loop6: detected capacity change from 0 to 16 [ 1996.733061][T27386] erofs: (device loop6): mounted with root inode @ nid 36. [ 2000.301922][T27403] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2002.970276][T27419] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2003.225747][T27431] loop3: detected capacity change from 0 to 16 [ 2003.265010][T27431] erofs: (device loop3): mounted with root inode @ nid 36. [ 2008.599692][T27452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5847'. [ 2009.997143][T27457] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2013.552932][T27481] xt_CT: No such helper "netbios-ns" [ 2016.924970][T27505] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2017.815437][T27521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5862'. [ 2022.210319][T27564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5874'. [ 2023.171396][T27554] xt_CT: No such helper "netbios-ns" [ 2023.278249][T27576] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2024.685968][T27587] autofs4:pid:27587:autofs_fill_super: called with bogus options [ 2028.134931][T27608] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2028.433091][T27610] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2030.999879][T27618] xt_CT: No such helper "netbios-ns" [ 2032.795626][T27640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5892'. [ 2033.078917][T27647] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2034.340755][T27665] FAULT_INJECTION: forcing a failure. [ 2034.340755][T27665] name failslab, interval 1, probability 0, space 0, times 10000 [ 2034.394396][T27665] CPU: 0 PID: 27665 Comm: syz.9.5899 Not tainted syzkaller #0 [ 2034.401886][T27665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2034.411954][T27665] Call Trace: [ 2034.415244][T27665] [ 2034.418166][T27665] dump_stack_lvl+0x18c/0x250 [ 2034.422841][T27665] ? show_regs_print_info+0x20/0x20 [ 2034.428060][T27665] ? load_image+0x420/0x420 [ 2034.432575][T27665] ? __lock_acquire+0x7eb0/0x7eb0 [ 2034.437602][T27665] should_fail_ex+0x394/0x4c0 [ 2034.442274][T27665] should_failslab+0x9/0x20 [ 2034.446765][T27665] slab_pre_alloc_hook+0x59/0x300 [ 2034.451783][T27665] kmem_cache_alloc_lru+0x4d/0x2c0 [ 2034.456882][T27665] ? sock_alloc_inode+0x28/0xc0 [ 2034.461747][T27665] sock_alloc_inode+0x28/0xc0 [ 2034.466420][T27665] ? sockfs_init_fs_context+0xb0/0xb0 [ 2034.471781][T27665] new_inode_pseudo+0x63/0x1d0 [ 2034.476539][T27665] __sock_create+0x12d/0x940 [ 2034.481142][T27665] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2034.487119][T27665] __sys_socket+0xd7/0x1b0 [ 2034.491530][T27665] __x64_sys_socket+0x7a/0x90 [ 2034.496208][T27665] do_syscall_64+0x55/0xb0 [ 2034.500626][T27665] ? clear_bhb_loop+0x40/0x90 [ 2034.505294][T27665] ? clear_bhb_loop+0x40/0x90 [ 2034.509962][T27665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2034.515845][T27665] RIP: 0033:0x7f514239fb19 [ 2034.520247][T27665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2034.539854][T27665] RSP: 002b:00007f5143257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2034.548271][T27665] RAX: ffffffffffffffda RBX: 00007f5142625fa0 RCX: 00007f514239fb19 [ 2034.556258][T27665] RDX: 0000000000000262 RSI: 000000000000000a RDI: 0000000000000002 [ 2034.564218][T27665] RBP: 00007f5142437b70 R08: 0000000000000000 R09: 0000000000000000 [ 2034.572178][T27665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2034.580162][T27665] R13: 00007f5142626038 R14: 00007f5142625fa0 R15: 00007fffbde08c08 [ 2034.588148][T27665] [ 2034.671404][T27665] socket: no more sockets [ 2036.279362][T27687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5905'. [ 2036.430400][T27693] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2036.528781][T27697] loop4: detected capacity change from 0 to 16 [ 2036.646939][T27697] erofs: (device loop4): mounted with root inode @ nid 36. [ 2037.634661][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.641009][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.404721][T27714] FAULT_INJECTION: forcing a failure. [ 2038.404721][T27714] name failslab, interval 1, probability 0, space 0, times 9999 [ 2038.461041][T27714] CPU: 1 PID: 27714 Comm: syz.3.5911 Not tainted syzkaller #0 [ 2038.468558][T27714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2038.478637][T27714] Call Trace: [ 2038.481936][T27714] [ 2038.484883][T27714] dump_stack_lvl+0x18c/0x250 [ 2038.489593][T27714] ? show_regs_print_info+0x20/0x20 [ 2038.494804][T27714] ? load_image+0x420/0x420 [ 2038.499308][T27714] ? __lock_acquire+0x7eb0/0x7eb0 [ 2038.504334][T27714] ? lock_chain_count+0x20/0x20 [ 2038.509187][T27714] should_fail_ex+0x394/0x4c0 [ 2038.513868][T27714] should_failslab+0x9/0x20 [ 2038.518368][T27714] slab_pre_alloc_hook+0x59/0x300 [ 2038.523392][T27714] kmem_cache_alloc_lru+0x4d/0x2c0 [ 2038.528496][T27714] ? sock_alloc_inode+0x28/0xc0 [ 2038.533348][T27714] sock_alloc_inode+0x28/0xc0 [ 2038.538039][T27714] ? sockfs_init_fs_context+0xb0/0xb0 [ 2038.543434][T27714] new_inode_pseudo+0x63/0x1d0 [ 2038.548206][T27714] __sock_create+0x12d/0x940 [ 2038.552814][T27714] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2038.558797][T27714] __sys_socket+0xd7/0x1b0 [ 2038.563225][T27714] __x64_sys_socket+0x7a/0x90 [ 2038.567901][T27714] do_syscall_64+0x55/0xb0 [ 2038.572320][T27714] ? clear_bhb_loop+0x40/0x90 [ 2038.577002][T27714] ? clear_bhb_loop+0x40/0x90 [ 2038.581676][T27714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2038.587571][T27714] RIP: 0033:0x7f1675f9fb19 [ 2038.591985][T27714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2038.611603][T27714] RSP: 002b:00007f1676d89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2038.620019][T27714] RAX: ffffffffffffffda RBX: 00007f1676225fa0 RCX: 00007f1675f9fb19 [ 2038.628021][T27714] RDX: 0000000000000262 RSI: 000000000000000a RDI: 0000000000000002 [ 2038.636001][T27714] RBP: 00007f1676037b70 R08: 0000000000000000 R09: 0000000000000000 [ 2038.643978][T27714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2038.651949][T27714] R13: 00007f1676226038 R14: 00007f1676225fa0 R15: 00007ffe282330a8 [ 2038.659940][T27714] [ 2039.130458][T27714] socket: no more sockets [ 2041.679423][T27737] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2047.240089][T27784] loop3: detected capacity change from 0 to 128 [ 2047.439583][ T27] audit: type=1804 audit(1793894264.049:900): pid=27784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5930" name="/newroot/277/file0/bus" dev="loop3" ino=1048776 res=1 errno=0 [ 2047.635693][T27790] FAULT_INJECTION: forcing a failure. [ 2047.635693][T27790] name failslab, interval 1, probability 0, space 0, times 9998 [ 2048.187619][T27790] CPU: 1 PID: 27790 Comm: syz.6.5925 Not tainted syzkaller #0 [ 2048.195126][T27790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2048.205206][T27790] Call Trace: [ 2048.208487][T27790] [ 2048.211417][T27790] dump_stack_lvl+0x18c/0x250 [ 2048.216117][T27790] ? show_regs_print_info+0x20/0x20 [ 2048.221366][T27790] ? load_image+0x420/0x420 [ 2048.225889][T27790] ? __lock_acquire+0x7eb0/0x7eb0 [ 2048.230946][T27790] should_fail_ex+0x394/0x4c0 [ 2048.235626][T27790] should_failslab+0x9/0x20 [ 2048.240144][T27790] slab_pre_alloc_hook+0x59/0x300 [ 2048.245187][T27790] kmem_cache_alloc_lru+0x4d/0x2c0 [ 2048.250320][T27790] ? sock_alloc_inode+0x28/0xc0 [ 2048.255190][T27790] sock_alloc_inode+0x28/0xc0 [ 2048.259868][T27790] ? sockfs_init_fs_context+0xb0/0xb0 [ 2048.265252][T27790] new_inode_pseudo+0x63/0x1d0 [ 2048.270043][T27790] __sock_create+0x12d/0x940 [ 2048.274641][T27790] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2048.280649][T27790] __sys_socket+0xd7/0x1b0 [ 2048.285259][T27790] __x64_sys_socket+0x7a/0x90 [ 2048.289950][T27790] do_syscall_64+0x55/0xb0 [ 2048.294398][T27790] ? clear_bhb_loop+0x40/0x90 [ 2048.299079][T27790] ? clear_bhb_loop+0x40/0x90 [ 2048.303764][T27790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2048.309670][T27790] RIP: 0033:0x7f7862b9fb19 [ 2048.314082][T27790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2048.333711][T27790] RSP: 002b:00007f7863a58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2048.342129][T27790] RAX: ffffffffffffffda RBX: 00007f7862e25fa0 RCX: 00007f7862b9fb19 [ 2048.350097][T27790] RDX: 0000000000000262 RSI: 000000000000000a RDI: 0000000000000002 [ 2048.358089][T27790] RBP: 00007f7862c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2048.366088][T27790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2048.374078][T27790] R13: 00007f7862e26038 R14: 00007f7862e25fa0 R15: 00007fff63534a98 [ 2048.382075][T27790] [ 2048.497384][T27790] socket: no more sockets [ 2055.806331][T27839] xt_CT: No such helper "netbios-ns" [ 2056.348714][T27848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5940'. [ 2057.854442][T27856] FAULT_INJECTION: forcing a failure. [ 2057.854442][T27856] name failslab, interval 1, probability 0, space 0, times 9997 [ 2058.005501][T27856] CPU: 0 PID: 27856 Comm: syz.9.5949 Not tainted syzkaller #0 [ 2058.013022][T27856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2058.023074][T27856] Call Trace: [ 2058.026343][T27856] [ 2058.029282][T27856] dump_stack_lvl+0x18c/0x250 [ 2058.033970][T27856] ? show_regs_print_info+0x20/0x20 [ 2058.039183][T27856] ? load_image+0x420/0x420 [ 2058.043745][T27856] ? __lock_acquire+0x7eb0/0x7eb0 [ 2058.048796][T27856] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2058.054872][T27856] should_fail_ex+0x394/0x4c0 [ 2058.059553][T27856] should_failslab+0x9/0x20 [ 2058.064078][T27856] slab_pre_alloc_hook+0x59/0x300 [ 2058.069132][T27856] ? kobject_get_path+0xc3/0x2c0 [ 2058.074077][T27856] ? kobject_get_path+0xc3/0x2c0 [ 2058.079014][T27856] __kmem_cache_alloc_node+0x53/0x260 [ 2058.084407][T27856] ? kobject_get_path+0xc3/0x2c0 [ 2058.089345][T27856] __kmalloc+0xa7/0x240 [ 2058.093506][T27856] kobject_get_path+0xc3/0x2c0 [ 2058.098307][T27856] kobject_uevent_env+0x291/0x890 [ 2058.103337][T27856] ? rpc_sysfs_client_setup+0x1f7/0x310 [ 2058.108896][T27856] rpc_sysfs_client_setup+0x26b/0x310 [ 2058.114282][T27856] ? __lock_acquire+0x7eb0/0x7eb0 [ 2058.119314][T27856] ? rpc_sysfs_exit+0x30/0x30 [ 2058.124004][T27856] ? rpc_net_ns+0x1e/0x230 [ 2058.128441][T27856] rpc_new_client+0x715/0xc20 [ 2058.133130][T27856] rpc_create_xprt+0x2a0/0xa10 [ 2058.137952][T27856] ? rpc_create+0x8a0/0x8a0 [ 2058.142478][T27856] ? __kmem_cache_alloc_node+0x197/0x260 [ 2058.148209][T27856] ? xprt_create_transport+0x384/0x5b0 [ 2058.153686][T27856] ? rcu_is_watching+0x15/0xb0 [ 2058.158482][T27856] ? kstrdup+0x65/0x80 [ 2058.162565][T27856] ? __asan_memcpy+0x40/0x70 [ 2058.167173][T27856] ? xprt_create_transport+0x421/0x5b0 [ 2058.172639][T27856] rpc_create+0x61f/0x8a0 [ 2058.176981][T27856] ? rpc_cleanup_clids+0x20/0x20 [ 2058.181925][T27856] ? mutex_lock_nested+0x20/0x20 [ 2058.186877][T27856] ? net_generic+0x1e/0x240 [ 2058.191381][T27856] ? net_generic+0x1e/0x240 [ 2058.195882][T27856] set_gssp_clnt+0x189/0x2d0 [ 2058.200475][T27856] ? read_gss_krb5_enctypes+0x180/0x180 [ 2058.206033][T27856] ? kstrtoull+0x130/0x1d0 [ 2058.210448][T27856] write_gssp+0x1fc/0x2b0 [ 2058.214782][T27856] ? read_gssp+0x310/0x310 [ 2058.219197][T27856] ? rcu_read_lock_any_held+0xb4/0x140 [ 2058.224673][T27856] ? rcu_read_lock_bh_held+0x100/0x100 [ 2058.230136][T27856] ? read_gssp+0x310/0x310 [ 2058.234562][T27856] proc_reg_write+0x1e4/0x2d0 [ 2058.239244][T27856] ? proc_reg_llseek+0x280/0x280 [ 2058.244196][T27856] vfs_write+0x299/0x9a0 [ 2058.248544][T27856] ? file_end_write+0x250/0x250 [ 2058.253406][T27856] ? __fget_files+0x28/0x460 [ 2058.258002][T27856] ? __fget_files+0x3fc/0x460 [ 2058.262684][T27856] ? __fdget_pos+0x2a3/0x330 [ 2058.267378][T27856] ? ksys_write+0x74/0x260 [ 2058.271809][T27856] ksys_write+0x151/0x260 [ 2058.276167][T27856] ? __ia32_sys_read+0x90/0x90 [ 2058.280953][T27856] ? lockdep_hardirqs_on+0x98/0x150 [ 2058.286162][T27856] do_syscall_64+0x55/0xb0 [ 2058.290584][T27856] ? clear_bhb_loop+0x40/0x90 [ 2058.295300][T27856] ? clear_bhb_loop+0x40/0x90 [ 2058.300016][T27856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2058.306006][T27856] RIP: 0033:0x7f514239fb19 [ 2058.310424][T27856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2058.330061][T27856] RSP: 002b:00007f5143257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2058.338476][T27856] RAX: ffffffffffffffda RBX: 00007f5142625fa0 RCX: 00007f514239fb19 [ 2058.346447][T27856] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 2058.354431][T27856] RBP: 00007f5142437b70 R08: 0000000000000000 R09: 0000000000000000 [ 2058.362422][T27856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2058.370392][T27856] R13: 00007f5142626038 R14: 00007f5142625fa0 R15: 00007fffbde08c08 [ 2058.378379][T27856] [ 2058.735198][T27862] FAULT_INJECTION: forcing a failure. [ 2058.735198][T27862] name failslab, interval 1, probability 0, space 0, times 9996 [ 2058.797026][T27862] CPU: 1 PID: 27862 Comm: syz.4.5945 Not tainted syzkaller #0 [ 2058.804524][T27862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2058.814601][T27862] Call Trace: [ 2058.817878][T27862] [ 2058.820818][T27862] dump_stack_lvl+0x18c/0x250 [ 2058.825505][T27862] ? show_regs_print_info+0x20/0x20 [ 2058.830696][T27862] ? load_image+0x420/0x420 [ 2058.835277][T27862] ? __lock_acquire+0x7eb0/0x7eb0 [ 2058.840301][T27862] should_fail_ex+0x394/0x4c0 [ 2058.845088][T27862] should_failslab+0x9/0x20 [ 2058.849620][T27862] slab_pre_alloc_hook+0x59/0x300 [ 2058.854657][T27862] kmem_cache_alloc_lru+0x4d/0x2c0 [ 2058.859789][T27862] ? sock_alloc_inode+0x28/0xc0 [ 2058.864663][T27862] sock_alloc_inode+0x28/0xc0 [ 2058.869349][T27862] ? sockfs_init_fs_context+0xb0/0xb0 [ 2058.874716][T27862] new_inode_pseudo+0x63/0x1d0 [ 2058.879493][T27862] __sock_create+0x12d/0x940 [ 2058.884083][T27862] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2058.890059][T27862] __sys_socket+0xd7/0x1b0 [ 2058.894470][T27862] __x64_sys_socket+0x7a/0x90 [ 2058.899154][T27862] do_syscall_64+0x55/0xb0 [ 2058.903562][T27862] ? clear_bhb_loop+0x40/0x90 [ 2058.908319][T27862] ? clear_bhb_loop+0x40/0x90 [ 2058.912992][T27862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2058.918983][T27862] RIP: 0033:0x7f3d7df9fb19 [ 2058.923387][T27862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2058.943014][T27862] RSP: 002b:00007f3d7ee6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2058.951431][T27862] RAX: ffffffffffffffda RBX: 00007f3d7e225fa0 RCX: 00007f3d7df9fb19 [ 2058.959416][T27862] RDX: 0000000000000262 RSI: 000000000000000a RDI: 0000000000000002 [ 2058.967383][T27862] RBP: 00007f3d7e037b70 R08: 0000000000000000 R09: 0000000000000000 [ 2058.975349][T27862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2058.983307][T27862] R13: 00007f3d7e226038 R14: 00007f3d7e225fa0 R15: 00007ffd4ab40c68 [ 2058.991282][T27862] [ 2059.073963][T27862] socket: no more sockets [ 2061.632122][T27886] IPv6: NLM_F_CREATE should be specified when creating new route [ 2061.678045][T27887] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL) [ 2061.694398][T27886] netlink: 'syz.9.5957': attribute type 1 has an invalid length. [ 2061.764105][T27887] device-mapper: ioctl: error adding target to table [ 2061.883851][T27892] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2066.050462][T27917] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2067.794436][T27928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5969'. [ 2072.777195][T27958] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2079.474635][T27990] loop4: detected capacity change from 0 to 256 [ 2079.649642][T27990] FAT-fs (loop4): Directory bread(block 64) failed [ 2079.849107][T27990] FAT-fs (loop4): Directory bread(block 65) failed [ 2079.859791][T27990] FAT-fs (loop4): Directory bread(block 66) failed [ 2079.867917][T27990] FAT-fs (loop4): Directory bread(block 67) failed [ 2079.936606][T27990] FAT-fs (loop4): Directory bread(block 68) failed [ 2080.364419][T27990] FAT-fs (loop4): Directory bread(block 69) failed [ 2080.681460][T27990] FAT-fs (loop4): Directory bread(block 70) failed [ 2081.517264][T27990] FAT-fs (loop4): Directory bread(block 71) failed [ 2081.655332][T27990] FAT-fs (loop4): Directory bread(block 72) failed [ 2081.661924][T27990] FAT-fs (loop4): Directory bread(block 73) failed [ 2081.680405][T28010] loop6: detected capacity change from 0 to 512 [ 2081.704833][T28010] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2081.764775][T28008] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL) [ 2081.775628][T28010] EXT4-fs (loop6): 1 truncate cleaned up [ 2081.813528][T28008] device-mapper: ioctl: error adding target to table [ 2081.831923][T28010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2083.276351][T28028] loop3: detected capacity change from 0 to 256 [ 2083.490484][T19909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2088.141252][T28070] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2088.164441][T28069] loop4: detected capacity change from 0 to 512 [ 2088.292199][T28069] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 2088.621329][T28069] EXT4-fs (loop4): 1 truncate cleaned up [ 2088.970437][T28069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2090.266886][T22044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2091.816810][T28092] xt_CT: No such helper "netbios-ns" [ 2092.789082][T28107] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL) [ 2092.814480][T28107] device-mapper: ioctl: error adding target to table [ 2093.075080][T28112] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2094.443385][T28126] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2096.497308][T28132] IPv6: NLM_F_CREATE should be specified when creating new route [ 2096.505605][T28132] netlink: 'syz.6.6027': attribute type 1 has an invalid length. [ 2098.082147][T28143] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2098.843595][T28157] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2099.030891][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.037460][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.945085][T28164] xt_CT: No such helper "netbios-ns" [ 2101.694634][T28174] IPv6: NLM_F_CREATE should be specified when creating new route [ 2101.703052][T28174] netlink: 'syz.4.6030': attribute type 1 has an invalid length. [ 2103.182210][T28182] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2104.114600][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2104.114678][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 2105.106680][T28189] loop9: detected capacity change from 0 to 256 [ 2105.282328][T28189] FAT-fs (loop9): Directory bread(block 64) failed [ 2105.296352][T28189] FAT-fs (loop9): Directory bread(block 65) failed [ 2105.313670][T28189] FAT-fs (loop9): Directory bread(block 66) failed [ 2105.344143][T28189] FAT-fs (loop9): Directory bread(block 67) failed [ 2105.350845][T28189] FAT-fs (loop9): Directory bread(block 68) failed [ 2105.378378][T28189] FAT-fs (loop9): Directory bread(block 69) failed [ 2105.400961][T28189] FAT-fs (loop9): Directory bread(block 70) failed [ 2105.429652][T28189] FAT-fs (loop9): Directory bread(block 71) failed [ 2105.449999][T28189] FAT-fs (loop9): Directory bread(block 72) failed [ 2105.464126][T28189] FAT-fs (loop9): Directory bread(block 73) failed [ 2107.490628][T28215] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2109.198403][T28227] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2113.053560][T28256] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2114.176363][T28264] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2118.808148][T28294] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2120.692929][T28303] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2122.210513][T28314] loop3: detected capacity change from 0 to 256 [ 2124.218685][T28326] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2126.563123][T28337] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2127.599512][T28341] loop6: detected capacity change from 0 to 256 [ 2127.751853][T28341] FAT-fs (loop6): Directory bread(block 64) failed [ 2127.779034][T28341] FAT-fs (loop6): Directory bread(block 65) failed [ 2127.817275][T28341] FAT-fs (loop6): Directory bread(block 66) failed [ 2128.753972][T28341] FAT-fs (loop6): Directory bread(block 67) failed [ 2128.801440][T28341] FAT-fs (loop6): Directory bread(block 68) failed [ 2128.854209][T28341] FAT-fs (loop6): Directory bread(block 69) failed [ 2128.860927][T28341] FAT-fs (loop6): Directory bread(block 70) failed [ 2128.886849][T28341] FAT-fs (loop6): Directory bread(block 71) failed [ 2128.893560][T28341] FAT-fs (loop6): Directory bread(block 72) failed [ 2128.945336][T28341] FAT-fs (loop6): Directory bread(block 73) failed [ 2129.508578][T28349] loop6: detected capacity change from 0 to 256 [ 2130.671619][T28353] netlink: 'syz.4.6075': attribute type 1 has an invalid length. [ 2133.054010][T28367] xt_CT: No such helper "netbios-ns" [ 2133.646312][T28375] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2134.221208][T28382] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2142.003034][T28419] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2144.301473][T28425] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2146.557312][T28437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6099'. [ 2150.512366][T28458] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2151.660357][T28467] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2154.294158][T28485] loop9: detected capacity change from 0 to 256 [ 2154.322511][T28488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6110'. [ 2154.400826][T28489] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2156.506232][T28493] block device autoloading is deprecated and will be removed. [ 2156.617169][T28485] FAT-fs (loop9): Directory bread(block 64) failed [ 2156.634036][T28485] FAT-fs (loop9): Directory bread(block 65) failed [ 2156.640822][T28485] FAT-fs (loop9): Directory bread(block 66) failed [ 2156.729966][T28485] FAT-fs (loop9): Directory bread(block 67) failed [ 2156.785882][T28485] FAT-fs (loop9): Directory bread(block 68) failed [ 2156.823928][T28485] FAT-fs (loop9): Directory bread(block 69) failed [ 2156.830646][T28485] FAT-fs (loop9): Directory bread(block 70) failed [ 2156.913929][T28485] FAT-fs (loop9): Directory bread(block 71) failed [ 2156.920642][T28485] FAT-fs (loop9): Directory bread(block 72) failed [ 2156.998871][T28485] FAT-fs (loop9): Directory bread(block 73) failed [ 2158.280131][T28511] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2160.456303][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.462717][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.495299][T28530] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2163.337726][T28545] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2165.022381][T28560] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2165.554836][T28558] block device autoloading is deprecated and will be removed. [ 2165.815820][T28562] loop4: detected capacity change from 0 to 16 [ 2165.886531][T28562] erofs: (device loop4): mounted with root inode @ nid 36. [ 2168.645184][T28587] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2170.641705][T28594] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2171.257081][T28601] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2174.343181][T28619] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2174.593686][T28621] loop6: detected capacity change from 0 to 256 [ 2174.745734][T28621] FAT-fs (loop6): Directory bread(block 64) failed [ 2174.781091][T28621] FAT-fs (loop6): Directory bread(block 65) failed [ 2174.799316][T28621] FAT-fs (loop6): Directory bread(block 66) failed [ 2174.834006][T28621] FAT-fs (loop6): Directory bread(block 67) failed [ 2174.893613][T28621] FAT-fs (loop6): Directory bread(block 68) failed [ 2174.934181][T28621] FAT-fs (loop6): Directory bread(block 69) failed [ 2174.941205][T28621] FAT-fs (loop6): Directory bread(block 70) failed [ 2174.984270][T28621] FAT-fs (loop6): Directory bread(block 71) failed [ 2175.024156][T28621] FAT-fs (loop6): Directory bread(block 72) failed [ 2175.030735][T28621] FAT-fs (loop6): Directory bread(block 73) failed [ 2176.566687][T28633] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2182.698271][T28660] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2183.216541][T28666] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2188.209670][T28691] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2191.938081][T27723] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2192.016952][T28709] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2193.965827][T28716] loop6: detected capacity change from 0 to 16 [ 2194.004348][T28716] erofs: (device loop6): mounted with root inode @ nid 36. [ 2196.715901][T28728] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2203.930861][T28760] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2204.922176][T28765] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2215.705826][T28824] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2222.805575][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.812877][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.224268][T28852] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2226.994594][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2228.997728][T27723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2229.015289][T27723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2229.030688][T27723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2229.046304][T27723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2229.054379][T27723] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2229.065914][T27723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2229.121420][T28881] rxe_eth0 speed is unknown, defaulting to 1000 [ 2229.494296][T28890] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2230.463109][T28881] erspan0 speed is unknown, defaulting to 1000 [ 2231.898048][T27723] Bluetooth: hci4: command tx timeout [ 2233.172878][T28881] chnl_net:caif_netlink_parms(): no params data found [ 2233.471300][T28910] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2233.665130][T26740] syz_tun (unregistering): left allmulticast mode [ 2233.961786][T27723] Bluetooth: hci4: command tx timeout [ 2234.442521][T28881] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.481918][T28881] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.953382][T28881] bridge_slave_0: entered allmulticast mode [ 2235.113518][T28881] bridge_slave_0: entered promiscuous mode [ 2235.168409][T28881] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.204303][T28881] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.211825][T28881] bridge_slave_1: entered allmulticast mode [ 2235.257497][T28881] bridge_slave_1: entered promiscuous mode [ 2235.341315][T28881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2236.533527][T27723] Bluetooth: hci4: command tx timeout [ 2236.546794][T28881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2236.711422][T28881] team0: Port device team_slave_0 added [ 2236.746876][T28881] team0: Port device team_slave_1 added [ 2237.508338][T28881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2237.610607][T28881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2237.704211][T28881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2237.736784][T28881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2237.753974][T28881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2237.894021][T28881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2239.219339][T27723] Bluetooth: hci4: command tx timeout [ 2239.362164][T28881] hsr_slave_0: entered promiscuous mode [ 2239.384834][T28881] hsr_slave_1: entered promiscuous mode [ 2239.391673][T28881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2239.408444][T28881] Cannot create hsr debugfs directory [ 2240.610713][T28935] xt_CT: No such helper "netbios-ns" [ 2240.982973][T28881] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.244723][T28945] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2241.769507][T28881] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.167002][T28881] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.956446][T28881] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.119105][T28881] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2247.177536][T28881] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2247.207453][T28881] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2247.227989][T28881] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2247.499229][T28881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2247.557642][T28881] 8021q: adding VLAN 0 to HW filter on device team0 [ 2247.617582][T23041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2247.624766][T23041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2247.685491][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 2247.692690][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2247.806576][T28881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2248.280887][T28977] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2248.843684][T28881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2251.464519][T28999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6238'. [ 2251.573758][T28980] xt_CT: No such helper "netbios-ns" [ 2251.733646][T28881] veth0_vlan: entered promiscuous mode [ 2251.821003][T28881] veth1_vlan: entered promiscuous mode [ 2253.135580][T28881] veth0_macvtap: entered promiscuous mode [ 2253.146501][T28881] veth1_macvtap: entered promiscuous mode [ 2253.217204][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.230108][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.253267][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.264668][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.274929][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.285761][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.303949][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.326166][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.346257][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.375054][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.394197][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.423970][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.443950][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.466916][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.503923][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.524363][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.555731][T28881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2253.580821][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.621147][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.653914][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.675471][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.703959][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.733951][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.753875][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.773951][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.794303][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.833877][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.863913][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.904170][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.928643][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.954543][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.968288][T28881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.983877][T28881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.997211][T28881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2254.020095][T28881] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.720909][T28881] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.822906][T28881] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.958350][T28881] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.467074][ T5023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2255.504000][ T5023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2255.605005][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2255.625723][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2257.195430][T29022] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2259.392901][T29029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6247'. [ 2261.439636][T29052] lwtunnel_output(): recursion limit reached on datapath [ 2261.790571][T29056] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2262.777085][T20694] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 2262.827764][T20694] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2266.668137][T29078] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6258'. [ 2266.922850][T29081] lwtunnel_output(): recursion limit reached on datapath [ 2268.073729][T29087] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2269.984301][T29095] xt_CT: No such helper "netbios-ns" [ 2274.461966][T29121] FAULT_INJECTION: forcing a failure. [ 2274.461966][T29121] name failslab, interval 1, probability 0, space 0, times 10000 [ 2274.495373][T29123] lwtunnel_output(): recursion limit reached on datapath [ 2274.533514][T29121] CPU: 0 PID: 29121 Comm: syz.4.6270 Not tainted syzkaller #0 [ 2274.541202][T29121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2274.551288][T29121] Call Trace: [ 2274.554595][T29121] [ 2274.557549][T29121] dump_stack_lvl+0x18c/0x250 [ 2274.562266][T29121] ? show_regs_print_info+0x20/0x20 [ 2274.567510][T29121] ? load_image+0x420/0x420 [ 2274.572054][T29121] ? __might_sleep+0xe0/0xe0 [ 2274.576684][T29121] ? __lock_acquire+0x7eb0/0x7eb0 [ 2274.581739][T29121] should_fail_ex+0x394/0x4c0 [ 2274.586457][T29121] should_failslab+0x9/0x20 [ 2274.590988][T29121] slab_pre_alloc_hook+0x59/0x300 [ 2274.596049][T29121] ? x509_cert_parse+0x15c/0x7b0 [ 2274.601020][T29121] __kmem_cache_alloc_node+0x53/0x260 [ 2274.606512][T29121] ? x509_cert_parse+0x15c/0x7b0 [ 2274.611478][T29121] kmalloc_trace+0x2a/0xe0 [ 2274.615936][T29121] x509_cert_parse+0x15c/0x7b0 [ 2274.620730][T29121] x509_key_preparse+0x64/0x6c0 [ 2274.625623][T29121] ? down_read+0x1ac/0x2e0 [ 2274.630158][T29121] asymmetric_key_preparse+0xa9/0x140 [ 2274.635569][T29121] __key_create_or_update+0x362/0xa80 [ 2274.641080][T29121] ? key_create_or_update+0x60/0x60 [ 2274.646338][T29121] ? search_process_keyrings_rcu+0x360/0x360 [ 2274.652371][T29121] ? __virt_addr_valid+0x10c/0x380 [ 2274.657522][T29121] ? __virt_addr_valid+0x10c/0x380 [ 2274.662674][T29121] key_create_or_update+0x42/0x60 [ 2274.667744][T29121] __se_sys_add_key+0x34f/0x410 [ 2274.672633][T29121] ? __x64_sys_add_key+0xc0/0xc0 [ 2274.677626][T29121] ? lockdep_hardirqs_on+0x98/0x150 [ 2274.684704][T29121] ? __x64_sys_add_key+0x20/0xc0 [ 2274.689699][T29121] do_syscall_64+0x55/0xb0 [ 2274.694146][T29121] ? clear_bhb_loop+0x40/0x90 [ 2274.698858][T29121] ? clear_bhb_loop+0x40/0x90 [ 2274.703586][T29121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2274.709554][T29121] RIP: 0033:0x7f3d7df9fb19 [ 2274.714274][T29121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2274.733937][T29121] RSP: 002b:00007f3d7ee6f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2274.742481][T29121] RAX: ffffffffffffffda RBX: 00007f3d7e225fa0 RCX: 00007f3d7df9fb19 [ 2274.750484][T29121] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 2274.758484][T29121] RBP: 00007f3d7e037b70 R08: ffffffffffffffff R09: 0000000000000000 [ 2274.766486][T29121] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 2274.774487][T29121] R13: 00007f3d7e226038 R14: 00007f3d7e225fa0 R15: 00007ffd4ab40c68 [ 2274.782513][T29121] [ 2279.697801][ T2203] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 2279.752649][ T2203] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2281.756062][T29170] FAULT_INJECTION: forcing a failure. [ 2281.756062][T29170] name failslab, interval 1, probability 0, space 0, times 9999 [ 2281.853756][T29170] CPU: 0 PID: 29170 Comm: syz.6.6282 Not tainted syzkaller #0 [ 2281.861573][T29170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2281.871659][T29170] Call Trace: [ 2281.874936][T29170] [ 2281.877860][T29170] dump_stack_lvl+0x18c/0x250 [ 2281.882543][T29170] ? show_regs_print_info+0x20/0x20 [ 2281.887750][T29170] ? load_image+0x420/0x420 [ 2281.892274][T29170] ? __might_sleep+0xe0/0xe0 [ 2281.896898][T29170] ? __lock_acquire+0x7eb0/0x7eb0 [ 2281.901934][T29170] should_fail_ex+0x394/0x4c0 [ 2281.906700][T29170] should_failslab+0x9/0x20 [ 2281.911220][T29170] slab_pre_alloc_hook+0x59/0x300 [ 2281.916240][T29170] ? x509_cert_parse+0x15c/0x7b0 [ 2281.921175][T29170] __kmem_cache_alloc_node+0x53/0x260 [ 2281.926552][T29170] ? x509_cert_parse+0x15c/0x7b0 [ 2281.931492][T29170] kmalloc_trace+0x2a/0xe0 [ 2281.935914][T29170] x509_cert_parse+0x15c/0x7b0 [ 2281.940681][T29170] x509_key_preparse+0x64/0x6c0 [ 2281.945539][T29170] ? down_read+0x1ac/0x2e0 [ 2281.949951][T29170] asymmetric_key_preparse+0xa9/0x140 [ 2281.955331][T29170] __key_create_or_update+0x362/0xa80 [ 2281.960709][T29170] ? key_create_or_update+0x60/0x60 [ 2281.965918][T29170] ? search_process_keyrings_rcu+0x360/0x360 [ 2281.971909][T29170] ? __virt_addr_valid+0x10c/0x380 [ 2281.977024][T29170] ? __virt_addr_valid+0x10c/0x380 [ 2281.982162][T29170] key_create_or_update+0x42/0x60 [ 2281.987212][T29170] __se_sys_add_key+0x34f/0x410 [ 2281.992083][T29170] ? __x64_sys_add_key+0xc0/0xc0 [ 2281.997029][T29170] ? lockdep_hardirqs_on+0x98/0x150 [ 2282.002220][T29170] ? __x64_sys_add_key+0x20/0xc0 [ 2282.007169][T29170] do_syscall_64+0x55/0xb0 [ 2282.011588][T29170] ? clear_bhb_loop+0x40/0x90 [ 2282.016277][T29170] ? clear_bhb_loop+0x40/0x90 [ 2282.020957][T29170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2282.026857][T29170] RIP: 0033:0x7fbd33f9fb19 [ 2282.031301][T29170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2282.050916][T29170] RSP: 002b:00007fbd34ec2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2282.059495][T29170] RAX: ffffffffffffffda RBX: 00007fbd34225fa0 RCX: 00007fbd33f9fb19 [ 2282.067477][T29170] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 2282.075465][T29170] RBP: 00007fbd34037b70 R08: ffffffffffffffff R09: 0000000000000000 [ 2282.083552][T29170] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 2282.091531][T29170] R13: 00007fbd34226038 R14: 00007fbd34225fa0 R15: 00007ffd3b7cb5c8 [ 2282.099517][T29170] [ 2283.766531][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.774449][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.584593][T29198] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2288.842057][T29203] FAULT_INJECTION: forcing a failure. [ 2288.842057][T29203] name failslab, interval 1, probability 0, space 0, times 9998 [ 2288.924100][T29203] CPU: 1 PID: 29203 Comm: syz.9.6296 Not tainted syzkaller #0 [ 2288.931639][T29203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2288.941795][T29203] Call Trace: [ 2288.945228][T29203] [ 2288.948244][T29203] dump_stack_lvl+0x18c/0x250 [ 2288.952962][T29203] ? show_regs_print_info+0x20/0x20 [ 2288.958203][T29203] ? load_image+0x420/0x420 [ 2288.962857][T29203] ? __might_sleep+0xe0/0xe0 [ 2288.967499][T29203] ? __lock_acquire+0x7eb0/0x7eb0 [ 2288.972555][T29203] should_fail_ex+0x394/0x4c0 [ 2288.977243][T29203] should_failslab+0x9/0x20 [ 2288.981752][T29203] slab_pre_alloc_hook+0x59/0x300 [ 2288.986824][T29203] ? x509_cert_parse+0x15c/0x7b0 [ 2288.991889][T29203] __kmem_cache_alloc_node+0x53/0x260 [ 2288.997286][T29203] ? x509_cert_parse+0x15c/0x7b0 [ 2289.002249][T29203] kmalloc_trace+0x2a/0xe0 [ 2289.006694][T29203] x509_cert_parse+0x15c/0x7b0 [ 2289.011573][T29203] x509_key_preparse+0x64/0x6c0 [ 2289.016452][T29203] ? down_read+0x1ac/0x2e0 [ 2289.020895][T29203] asymmetric_key_preparse+0xa9/0x140 [ 2289.026270][T29203] __key_create_or_update+0x362/0xa80 [ 2289.031660][T29203] ? key_create_or_update+0x60/0x60 [ 2289.036875][T29203] ? search_process_keyrings_rcu+0x360/0x360 [ 2289.042865][T29203] ? __virt_addr_valid+0x10c/0x380 [ 2289.047981][T29203] ? __virt_addr_valid+0x10c/0x380 [ 2289.053110][T29203] key_create_or_update+0x42/0x60 [ 2289.058164][T29203] __se_sys_add_key+0x34f/0x410 [ 2289.063037][T29203] ? __x64_sys_add_key+0xc0/0xc0 [ 2289.067993][T29203] ? lockdep_hardirqs_on+0x98/0x150 [ 2289.073200][T29203] ? __x64_sys_add_key+0x20/0xc0 [ 2289.078162][T29203] do_syscall_64+0x55/0xb0 [ 2289.082612][T29203] ? clear_bhb_loop+0x40/0x90 [ 2289.087297][T29203] ? clear_bhb_loop+0x40/0x90 [ 2289.091981][T29203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2289.097889][T29203] RIP: 0033:0x7f514239fb19 [ 2289.102304][T29203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2289.121915][T29203] RSP: 002b:00007f5143257028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2289.130363][T29203] RAX: ffffffffffffffda RBX: 00007f5142625fa0 RCX: 00007f514239fb19 [ 2289.138342][T29203] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 2289.146412][T29203] RBP: 00007f5142437b70 R08: ffffffffffffffff R09: 0000000000000000 [ 2289.154392][T29203] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 2289.162385][T29203] R13: 00007f5142626038 R14: 00007f5142625fa0 R15: 00007fffbde08c08 [ 2289.170375][T29203] [ 2289.294520][T29205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6297'. [ 2299.240005][T29249] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2300.506118][T29257] FAULT_INJECTION: forcing a failure. [ 2300.506118][T29257] name failslab, interval 1, probability 0, space 0, times 9997 [ 2300.604114][T29257] CPU: 0 PID: 29257 Comm: syz.3.6306 Not tainted syzkaller #0 [ 2300.611648][T29257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2300.621740][T29257] Call Trace: [ 2300.625048][T29257] [ 2300.628089][T29257] dump_stack_lvl+0x18c/0x250 [ 2300.632815][T29257] ? show_regs_print_info+0x20/0x20 [ 2300.638057][T29257] ? load_image+0x420/0x420 [ 2300.642607][T29257] ? __might_sleep+0xe0/0xe0 [ 2300.647251][T29257] ? __lock_acquire+0x7eb0/0x7eb0 [ 2300.652419][T29257] should_fail_ex+0x394/0x4c0 [ 2300.657141][T29257] should_failslab+0x9/0x20 [ 2300.661680][T29257] slab_pre_alloc_hook+0x59/0x300 [ 2300.667098][T29257] ? x509_cert_parse+0x15c/0x7b0 [ 2300.672080][T29257] __kmem_cache_alloc_node+0x53/0x260 [ 2300.677481][T29257] ? x509_cert_parse+0x15c/0x7b0 [ 2300.682449][T29257] kmalloc_trace+0x2a/0xe0 [ 2300.686895][T29257] x509_cert_parse+0x15c/0x7b0 [ 2300.691761][T29257] x509_key_preparse+0x64/0x6c0 [ 2300.696641][T29257] ? down_read+0x1ac/0x2e0 [ 2300.701061][T29257] asymmetric_key_preparse+0xa9/0x140 [ 2300.706439][T29257] __key_create_or_update+0x362/0xa80 [ 2300.711831][T29257] ? key_create_or_update+0x60/0x60 [ 2300.717059][T29257] ? search_process_keyrings_rcu+0x360/0x360 [ 2300.723066][T29257] ? __virt_addr_valid+0x10c/0x380 [ 2300.728196][T29257] ? __virt_addr_valid+0x10c/0x380 [ 2300.733321][T29257] key_create_or_update+0x42/0x60 [ 2300.738364][T29257] __se_sys_add_key+0x34f/0x410 [ 2300.743237][T29257] ? __x64_sys_add_key+0xc0/0xc0 [ 2300.748192][T29257] ? lockdep_hardirqs_on+0x98/0x150 [ 2300.753419][T29257] ? __x64_sys_add_key+0x20/0xc0 [ 2300.758483][T29257] do_syscall_64+0x55/0xb0 [ 2300.762966][T29257] ? clear_bhb_loop+0x40/0x90 [ 2300.767673][T29257] ? clear_bhb_loop+0x40/0x90 [ 2300.772367][T29257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2300.778366][T29257] RIP: 0033:0x7f1675f9fb19 [ 2300.782797][T29257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2300.803392][T29257] RSP: 002b:00007f1676d89028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2300.811846][T29257] RAX: ffffffffffffffda RBX: 00007f1676225fa0 RCX: 00007f1675f9fb19 [ 2300.820374][T29257] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 2300.828355][T29257] RBP: 00007f1676037b70 R08: ffffffffffffffff R09: 0000000000000000 [ 2300.836331][T29257] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2300.844308][T29257] R13: 00007f1676226038 R14: 00007f1676225fa0 R15: 00007ffe282330a8 [ 2300.852298][T29257] [ 2305.074507][T29280] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6308'. [ 2305.561107][T29283] loop9: detected capacity change from 0 to 16 [ 2305.604684][T29283] erofs: (device loop9): mounted with root inode @ nid 36. [ 2307.188509][T29294] FAULT_INJECTION: forcing a failure. [ 2307.188509][T29294] name failslab, interval 1, probability 0, space 0, times 9996 [ 2308.456674][T29294] CPU: 1 PID: 29294 Comm: syz.9.6322 Not tainted syzkaller #0 [ 2308.464210][T29294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2308.474296][T29294] Call Trace: [ 2308.477595][T29294] [ 2308.480549][T29294] dump_stack_lvl+0x18c/0x250 [ 2308.485244][T29294] ? show_regs_print_info+0x20/0x20 [ 2308.490449][T29294] ? load_image+0x420/0x420 [ 2308.494958][T29294] ? __might_sleep+0xe0/0xe0 [ 2308.499547][T29294] ? __lock_acquire+0x7eb0/0x7eb0 [ 2308.504580][T29294] should_fail_ex+0x394/0x4c0 [ 2308.509267][T29294] should_failslab+0x9/0x20 [ 2308.513767][T29294] slab_pre_alloc_hook+0x59/0x300 [ 2308.518805][T29294] ? x509_cert_parse+0x15c/0x7b0 [ 2308.523749][T29294] __kmem_cache_alloc_node+0x53/0x260 [ 2308.529149][T29294] ? x509_cert_parse+0x15c/0x7b0 [ 2308.534110][T29294] kmalloc_trace+0x2a/0xe0 [ 2308.538533][T29294] x509_cert_parse+0x15c/0x7b0 [ 2308.543303][T29294] x509_key_preparse+0x64/0x6c0 [ 2308.548162][T29294] ? down_read+0x1ac/0x2e0 [ 2308.552574][T29294] asymmetric_key_preparse+0xa9/0x140 [ 2308.557945][T29294] __key_create_or_update+0x362/0xa80 [ 2308.563321][T29294] ? key_create_or_update+0x60/0x60 [ 2308.568524][T29294] ? search_process_keyrings_rcu+0x360/0x360 [ 2308.574508][T29294] ? __virt_addr_valid+0x10c/0x380 [ 2308.579616][T29294] ? __virt_addr_valid+0x10c/0x380 [ 2308.584728][T29294] key_create_or_update+0x42/0x60 [ 2308.589757][T29294] __se_sys_add_key+0x34f/0x410 [ 2308.594640][T29294] ? __x64_sys_add_key+0xc0/0xc0 [ 2308.599579][T29294] ? lockdep_hardirqs_on+0x98/0x150 [ 2308.604771][T29294] ? __x64_sys_add_key+0x20/0xc0 [ 2308.609727][T29294] do_syscall_64+0x55/0xb0 [ 2308.614579][T29294] ? clear_bhb_loop+0x40/0x90 [ 2308.619258][T29294] ? clear_bhb_loop+0x40/0x90 [ 2308.623950][T29294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2308.629848][T29294] RIP: 0033:0x7f514239fb19 [ 2308.634259][T29294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2308.653880][T29294] RSP: 002b:00007f5143257028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2308.662353][T29294] RAX: ffffffffffffffda RBX: 00007f5142625fa0 RCX: 00007f514239fb19 [ 2308.670339][T29294] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 2308.678328][T29294] RBP: 00007f5142437b70 R08: ffffffffffffffff R09: 0000000000000000 [ 2308.686301][T29294] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2308.694363][T29294] R13: 00007f5142626038 R14: 00007f5142625fa0 R15: 00007fffbde08c08 [ 2308.702344][T29294] [ 2315.194137][T29320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6326'. [ 2317.482616][T29328] xt_CT: No such helper "netbios-ns" [ 2320.668672][T29350] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6340'. [ 2320.847197][T29352] FAULT_INJECTION: forcing a failure. [ 2320.847197][T29352] name failslab, interval 1, probability 0, space 0, times 9995 [ 2320.875996][T29352] CPU: 1 PID: 29352 Comm: syz.9.6341 Not tainted syzkaller #0 [ 2320.883529][T29352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2320.893615][T29352] Call Trace: [ 2320.896918][T29352] [ 2320.899860][T29352] dump_stack_lvl+0x18c/0x250 [ 2320.904574][T29352] ? show_regs_print_info+0x20/0x20 [ 2320.909810][T29352] ? load_image+0x420/0x420 [ 2320.914345][T29352] ? __might_sleep+0xe0/0xe0 [ 2320.918994][T29352] ? __lock_acquire+0x7eb0/0x7eb0 [ 2320.924111][T29352] should_fail_ex+0x394/0x4c0 [ 2320.928834][T29352] should_failslab+0x9/0x20 [ 2320.933375][T29352] slab_pre_alloc_hook+0x59/0x300 [ 2320.938440][T29352] ? x509_cert_parse+0x15c/0x7b0 [ 2320.943416][T29352] __kmem_cache_alloc_node+0x53/0x260 [ 2320.948805][T29352] ? x509_cert_parse+0x15c/0x7b0 [ 2320.953750][T29352] kmalloc_trace+0x2a/0xe0 [ 2320.958206][T29352] x509_cert_parse+0x15c/0x7b0 [ 2320.962982][T29352] x509_key_preparse+0x64/0x6c0 [ 2320.967844][T29352] ? down_read+0x1ac/0x2e0 [ 2320.972279][T29352] asymmetric_key_preparse+0xa9/0x140 [ 2320.977663][T29352] __key_create_or_update+0x362/0xa80 [ 2320.983042][T29352] ? key_create_or_update+0x60/0x60 [ 2320.988280][T29352] ? search_process_keyrings_rcu+0x360/0x360 [ 2320.994282][T29352] ? __virt_addr_valid+0x10c/0x380 [ 2320.999420][T29352] ? __virt_addr_valid+0x10c/0x380 [ 2321.004549][T29352] key_create_or_update+0x42/0x60 [ 2321.009581][T29352] __se_sys_add_key+0x34f/0x410 [ 2321.014458][T29352] ? __x64_sys_add_key+0xc0/0xc0 [ 2321.019407][T29352] ? lockdep_hardirqs_on+0x98/0x150 [ 2321.024605][T29352] ? __x64_sys_add_key+0x20/0xc0 [ 2321.029548][T29352] do_syscall_64+0x55/0xb0 [ 2321.034243][T29352] ? clear_bhb_loop+0x40/0x90 [ 2321.038940][T29352] ? clear_bhb_loop+0x40/0x90 [ 2321.043634][T29352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2321.049538][T29352] RIP: 0033:0x7f514239fb19 [ 2321.053955][T29352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2321.073573][T29352] RSP: 002b:00007f5143257028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2321.081996][T29352] RAX: ffffffffffffffda RBX: 00007f5142625fa0 RCX: 00007f514239fb19 [ 2321.089977][T29352] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 2321.097950][T29352] RBP: 00007f5142437b70 R08: ffffffffffffffff R09: 0000000000000000 [ 2321.105915][T29352] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2321.113900][T29352] R13: 00007f5142626038 R14: 00007f5142625fa0 R15: 00007fffbde08c08 [ 2321.121903][T29352] [ 2327.261781][T29372] xt_CT: No such helper "netbios-ns" [ 2336.546399][T29425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6349'. [ 2339.306161][T29437] loop3: detected capacity change from 0 to 16 [ 2339.379394][T29437] erofs: (device loop3): mounted with root inode @ nid 36. [ 2343.553853][ T27] audit: type=1800 audit(1793894560.149:901): pid=29459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6359" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 2344.761439][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.768949][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.797773][T29469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6371'. [ 2352.163997][T29493] Bluetooth: hci4: command 0x0406 tx timeout [ 2353.145597][T29509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6383'. [ 2360.032960][T28961] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 2360.138513][T28961] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2371.239036][T29600] IPv6: NLM_F_CREATE should be specified when creating new route [ 2371.247069][T29600] netlink: 'syz.6.6406': attribute type 1 has an invalid length. [ 2376.822394][T27472] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 2376.869151][T27472] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2379.319851][T29639] netlink: 'syz.4.6417': attribute type 1 has an invalid length. [ 2384.483578][T13310] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 2384.514269][T13310] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2388.079837][T29691] loop3: detected capacity change from 0 to 512 [ 2388.129618][T29691] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2389.088833][T29691] EXT4-fs (loop3): 1 truncate cleaned up [ 2389.314468][T29691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2390.067296][T23239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2390.257265][T27472] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 2390.294636][T27472] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2390.826459][T29714] netlink: 'syz.6.6442': attribute type 1 has an invalid length. [ 2406.244838][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.251473][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.536790][T29790] loop9: detected capacity change from 0 to 512 [ 2406.611945][T29790] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 2406.777270][T29790] EXT4-fs (loop9): 1 truncate cleaned up [ 2406.807555][T29790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2408.712356][T24524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2414.547899][T29828] netlink: 'syz.4.6474': attribute type 1 has an invalid length. [ 2422.835435][T29868] netlink: 'syz.6.6483': attribute type 1 has an invalid length. [ 2424.413180][T29880] loop3: detected capacity change from 0 to 512 [ 2424.503867][T29880] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2424.635824][T29880] EXT4-fs (loop3): 1 truncate cleaned up [ 2424.695552][T29880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2426.301437][T23239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2431.194019][T29922] lwtunnel_output(): recursion limit reached on datapath [ 2436.259346][T29942] loop9: detected capacity change from 0 to 16 [ 2436.288606][T29942] erofs: (device loop9): mounted with root inode @ nid 36. [ 2439.617525][T29959] lwtunnel_output(): recursion limit reached on datapath [ 2444.932122][T29990] lwtunnel_output(): recursion limit reached on datapath [ 2445.442585][T29995] netlink: 'syz.4.6516': attribute type 1 has an invalid length. [ 2446.689054][T30001] FAULT_INJECTION: forcing a failure. [ 2446.689054][T30001] name failslab, interval 1, probability 5, space 0, times 9994 [ 2446.798295][T30001] CPU: 1 PID: 30001 Comm: syz.9.6519 Not tainted syzkaller #0 [ 2446.805825][T30001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2446.815906][T30001] Call Trace: [ 2446.819287][T30001] [ 2446.822237][T30001] dump_stack_lvl+0x18c/0x250 [ 2446.826955][T30001] ? show_regs_print_info+0x20/0x20 [ 2446.832199][T30001] ? load_image+0x420/0x420 [ 2446.836829][T30001] ? __lock_acquire+0x7eb0/0x7eb0 [ 2446.841909][T30001] ? kasan_set_track+0x5f/0x70 [ 2446.846715][T30001] ? __kasan_kmalloc+0x8f/0xa0 [ 2446.851598][T30001] ? __kmalloc+0xb7/0x240 [ 2446.855946][T30001] ? __se_sys_memfd_create+0x25a/0x660 [ 2446.861443][T30001] should_fail_ex+0x394/0x4c0 [ 2446.866167][T30001] should_failslab+0x9/0x20 [ 2446.870701][T30001] slab_pre_alloc_hook+0x59/0x300 [ 2446.875765][T30001] kmem_cache_alloc_lru+0x4d/0x2c0 [ 2446.880993][T30001] ? shmem_alloc_inode+0x28/0x40 [ 2446.885969][T30001] shmem_alloc_inode+0x28/0x40 [ 2446.890761][T30001] ? shmem_match+0x160/0x160 [ 2446.895381][T30001] new_inode_pseudo+0x63/0x1d0 [ 2446.900182][T30001] new_inode+0x22/0x1d0 [ 2446.904378][T30001] shmem_get_inode+0x34d/0xcd0 [ 2446.909174][T30001] __shmem_file_setup+0x167/0x2c0 [ 2446.914227][T30001] __se_sys_memfd_create+0x357/0x660 [ 2446.919550][T30001] do_syscall_64+0x55/0xb0 [ 2446.923978][T30001] ? clear_bhb_loop+0x40/0x90 [ 2446.928665][T30001] ? clear_bhb_loop+0x40/0x90 [ 2446.933348][T30001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2446.939249][T30001] RIP: 0033:0x7f514239fb19 [ 2446.943669][T30001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2446.963294][T30001] RSP: 002b:00007f5143256e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 2446.971755][T30001] RAX: ffffffffffffffda RBX: 0000000000009606 RCX: 00007f514239fb19 [ 2446.979735][T30001] RDX: 00007f5143256ee0 RSI: 0000000000000000 RDI: 00007f5142437d63 [ 2446.987739][T30001] RBP: 0000200000000900 R08: 00000000ffffffff R09: 0000000000000000 [ 2446.995747][T30001] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000880 [ 2447.003721][T30001] R13: 00007f5143256ee0 R14: 00007f5143256ea0 R15: 00002000000008c0 [ 2447.011714][T30001] [ 2447.992757][T30001] zpool: couldn't create zpool - out of memory [ 2448.013796][T30001] zswap: zbud zpool not available [ 2450.141853][T30022] netlink: 'syz.4.6525': attribute type 1 has an invalid length. [ 2454.596631][T30039] lwtunnel_output(): recursion limit reached on datapath [ 2456.614122][T30057] netlink: 'syz.4.6535': attribute type 1 has an invalid length. [ 2457.526282][T30043] FAULT_INJECTION: forcing a failure. [ 2457.526282][T30043] name failslab, interval 1, probability 5, space 0, times 9989 [ 2457.550415][T30043] CPU: 0 PID: 30043 Comm: syz.6.6529 Not tainted syzkaller #0 [ 2457.558121][T30043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2457.568204][T30043] Call Trace: [ 2457.571507][T30043] [ 2457.574461][T30043] dump_stack_lvl+0x18c/0x250 [ 2457.579167][T30043] ? show_regs_print_info+0x20/0x20 [ 2457.584375][T30043] ? load_image+0x420/0x420 [ 2457.588905][T30043] ? __might_sleep+0xe0/0xe0 [ 2457.593533][T30043] ? __lock_acquire+0x7eb0/0x7eb0 [ 2457.598579][T30043] should_fail_ex+0x394/0x4c0 [ 2457.603275][T30043] should_failslab+0x9/0x20 [ 2457.607808][T30043] slab_pre_alloc_hook+0x59/0x300 [ 2457.612839][T30043] ? __lock_acquire+0x7eb0/0x7eb0 [ 2457.617876][T30043] kmem_cache_alloc_lru+0x4d/0x2c0 [ 2457.622988][T30043] ? xas_nomem+0x14a/0x1e0 [ 2457.627411][T30043] xas_nomem+0x14a/0x1e0 [ 2457.631658][T30043] shmem_add_to_page_cache+0xa41/0x1b80 [ 2457.637299][T30043] ? xas_load+0x11d/0x140 [ 2457.641638][T30043] ? shmem_alloc_folio+0x2a0/0x2a0 [ 2457.646762][T30043] ? page_copy_sane+0x4e/0x270 [ 2457.651544][T30043] shmem_get_folio_gfp+0x1037/0x2b40 [ 2457.656867][T30043] shmem_write_begin+0xf2/0x430 [ 2457.661756][T30043] generic_perform_write+0x2fe/0x5c0 [ 2457.667073][T30043] ? generic_file_direct_write+0x3e0/0x3e0 [ 2457.672891][T30043] ? file_update_time+0x192/0x1a0 [ 2457.677920][T30043] shmem_file_write_iter+0xfb/0x120 [ 2457.683127][T30043] vfs_write+0x474/0x9a0 [ 2457.687388][T30043] ? file_end_write+0x250/0x250 [ 2457.692265][T30043] ? __fget_files+0x3fc/0x460 [ 2457.696952][T30043] ? __fdget_pos+0x1d8/0x330 [ 2457.701550][T30043] ? ksys_write+0x74/0x260 [ 2457.705970][T30043] ksys_write+0x151/0x260 [ 2457.710411][T30043] ? __ia32_sys_read+0x90/0x90 [ 2457.715185][T30043] ? lockdep_hardirqs_on+0x98/0x150 [ 2457.720535][T30043] do_syscall_64+0x55/0xb0 [ 2457.725009][T30043] ? clear_bhb_loop+0x40/0x90 [ 2457.729710][T30043] ? clear_bhb_loop+0x40/0x90 [ 2457.734402][T30043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2457.740299][T30043] RIP: 0033:0x7fbd33f6034e [ 2457.744712][T30043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2457.764345][T30043] RSP: 002b:00007fbd34ec1da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2457.772846][T30043] RAX: ffffffffffffffda RBX: 00007fbd34ec26c0 RCX: 00007fbd33f6034e [ 2457.780812][T30043] RDX: 0000000001000000 RSI: 00007fbd29df7000 RDI: 0000000000000007 [ 2457.788784][T30043] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2457.796751][T30043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2457.804803][T30043] R13: 00007fbd34ec1ee0 R14: 00007fbd34ec1ea0 R15: 00007fbd29df7000 [ 2457.812784][T30043] [ 2459.750809][T30071] loop6: detected capacity change from 0 to 512 [ 2459.840166][T30071] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2459.934881][T30071] EXT4-fs (loop6): 1 truncate cleaned up [ 2459.941751][T30071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2461.508173][T28881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2464.412391][T30099] FAULT_INJECTION: forcing a failure. [ 2464.412391][T30099] name failslab, interval 1, probability 5, space 0, times 9985 [ 2464.483926][T30099] CPU: 0 PID: 30099 Comm: syz.4.6546 Not tainted syzkaller #0 [ 2464.491458][T30099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2464.501628][T30099] Call Trace: [ 2464.504931][T30099] [ 2464.507881][T30099] dump_stack_lvl+0x18c/0x250 [ 2464.512602][T30099] ? show_regs_print_info+0x20/0x20 [ 2464.517833][T30099] ? load_image+0x420/0x420 [ 2464.522359][T30099] ? __might_sleep+0xe0/0xe0 [ 2464.526971][T30099] ? __lock_acquire+0x7eb0/0x7eb0 [ 2464.532026][T30099] should_fail_ex+0x394/0x4c0 [ 2464.536730][T30099] should_failslab+0x9/0x20 [ 2464.541252][T30099] slab_pre_alloc_hook+0x59/0x300 [ 2464.546300][T30099] ? __lock_acquire+0x7eb0/0x7eb0 [ 2464.551352][T30099] kmem_cache_alloc_lru+0x4d/0x2c0 [ 2464.556495][T30099] ? xas_nomem+0x14a/0x1e0 [ 2464.560937][T30099] xas_nomem+0x14a/0x1e0 [ 2464.565210][T30099] shmem_add_to_page_cache+0xa41/0x1b80 [ 2464.570779][T30099] ? xas_load+0x11d/0x140 [ 2464.575149][T30099] ? shmem_alloc_folio+0x2a0/0x2a0 [ 2464.580299][T30099] ? page_copy_sane+0x4e/0x270 [ 2464.585094][T30099] shmem_get_folio_gfp+0x1037/0x2b40 [ 2464.590436][T30099] shmem_write_begin+0xf2/0x430 [ 2464.595320][T30099] generic_perform_write+0x2fe/0x5c0 [ 2464.600647][T30099] ? generic_file_direct_write+0x3e0/0x3e0 [ 2464.606492][T30099] ? file_update_time+0x192/0x1a0 [ 2464.611550][T30099] shmem_file_write_iter+0xfb/0x120 [ 2464.616782][T30099] vfs_write+0x474/0x9a0 [ 2464.619512][T30110] Bluetooth: hci0: unsupported parameter 255 [ 2464.621073][T30099] ? file_end_write+0x250/0x250 [ 2464.631914][T30099] ? __fget_files+0x3fc/0x460 [ 2464.636645][T30099] ? __fdget_pos+0x1d8/0x330 [ 2464.641270][T30099] ? ksys_write+0x74/0x260 [ 2464.643818][T30110] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2464.645743][T30099] ksys_write+0x151/0x260 [ 2464.656853][T30099] ? __ia32_sys_read+0x90/0x90 [ 2464.661652][T30099] ? lockdep_hardirqs_on+0x98/0x150 [ 2464.666878][T30099] do_syscall_64+0x55/0xb0 [ 2464.671333][T30099] ? clear_bhb_loop+0x40/0x90 [ 2464.676041][T30099] ? clear_bhb_loop+0x40/0x90 [ 2464.680752][T30099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2464.686685][T30099] RIP: 0033:0x7f3d7df6034e [ 2464.691119][T30099] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2464.710782][T30099] RSP: 002b:00007f3d7ee4dda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2464.719235][T30099] RAX: ffffffffffffffda RBX: 00007f3d7ee4e6c0 RCX: 00007f3d7df6034e [ 2464.727238][T30099] RDX: 0000000001000000 RSI: 00007f3d73df7000 RDI: 0000000000000006 [ 2464.735233][T30099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2464.743192][T30099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2464.751157][T30099] R13: 00007f3d7ee4dee0 R14: 00007f3d7ee4dea0 R15: 00007f3d73df7000 [ 2464.759134][T30099] [ 2467.429137][T30139] loop6: detected capacity change from 0 to 256 [ 2467.694557][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.724584][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.427101][T30142] netlink: 'syz.4.6556': attribute type 1 has an invalid length. [ 2474.367425][T30176] loop9: detected capacity change from 0 to 512 [ 2474.420860][T30176] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 2474.510078][T30176] EXT4-fs (loop9): 1 truncate cleaned up [ 2474.537246][T30176] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2475.381463][T30181] FAULT_INJECTION: forcing a failure. [ 2475.381463][T30181] name failslab, interval 1, probability 5, space 0, times 9984 [ 2475.416704][T30181] CPU: 0 PID: 30181 Comm: syz.3.6562 Not tainted syzkaller #0 [ 2475.424230][T30181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2475.434317][T30181] Call Trace: [ 2475.437618][T30181] [ 2475.440565][T30181] dump_stack_lvl+0x18c/0x250 [ 2475.445275][T30181] ? show_regs_print_info+0x20/0x20 [ 2475.450500][T30181] ? load_image+0x420/0x420 [ 2475.455034][T30181] ? __might_sleep+0xe0/0xe0 [ 2475.459657][T30181] ? __lock_acquire+0x7eb0/0x7eb0 [ 2475.464715][T30181] should_fail_ex+0x394/0x4c0 [ 2475.469430][T30181] should_failslab+0x9/0x20 [ 2475.473954][T30181] slab_pre_alloc_hook+0x59/0x300 [ 2475.479004][T30181] ? __se_sys_memfd_create+0x25a/0x660 [ 2475.484487][T30181] ? __se_sys_memfd_create+0x25a/0x660 [ 2475.490063][T30181] __kmem_cache_alloc_node+0x53/0x260 [ 2475.495479][T30181] ? __se_sys_memfd_create+0x25a/0x660 [ 2475.500967][T30181] __kmalloc+0xa7/0x240 [ 2475.505162][T30181] __se_sys_memfd_create+0x25a/0x660 [ 2475.510825][T30181] do_syscall_64+0x55/0xb0 [ 2475.515289][T30181] ? clear_bhb_loop+0x40/0x90 [ 2475.520001][T30181] ? clear_bhb_loop+0x40/0x90 [ 2475.524713][T30181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2475.530642][T30181] RIP: 0033:0x7f1675f9fb19 [ 2475.535080][T30181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2475.554711][T30181] RSP: 002b:00007f1676d88e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 2475.563150][T30181] RAX: ffffffffffffffda RBX: 0000000000009606 RCX: 00007f1675f9fb19 [ 2475.571144][T30181] RDX: 00007f1676d88ee0 RSI: 0000000000000000 RDI: 00007f1676037d63 [ 2475.579149][T30181] RBP: 0000200000000900 R08: 00000000ffffffff R09: 0000000000000000 [ 2475.587150][T30181] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000880 [ 2475.595146][T30181] R13: 00007f1676d88ee0 R14: 00007f1676d88ea0 R15: 00002000000008c0 [ 2475.603161][T30181] [ 2476.950138][T30181] zpool: couldn't create zbud pool [ 2477.038033][T24524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2477.073980][T30181] zswap: zbud zpool not available [ 2482.531336][T30239] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2485.762658][T30263] loop9: detected capacity change from 0 to 512 [ 2485.903872][T30263] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 2486.095944][T30268] loop3: detected capacity change from 0 to 256 [ 2486.147504][T30263] EXT4-fs (loop9): 1 truncate cleaned up [ 2486.207627][T30263] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2486.633570][T24524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2486.911147][T30283] lwtunnel_output(): recursion limit reached on datapath [ 2489.938826][T30306] loop6: detected capacity change from 0 to 512 [ 2489.965465][T30306] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2490.045723][T30306] EXT4-fs (loop6): 1 truncate cleaned up [ 2490.052666][T30306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2491.330839][T28881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2491.345440][T30316] loop3: detected capacity change from 0 to 256 [ 2493.094249][T30337] bridge0: port 3(team0) entered blocking state [ 2493.100622][T30337] bridge0: port 3(team0) entered disabled state [ 2493.139864][T30339] loop6: detected capacity change from 0 to 16 [ 2493.148764][T30337] team0: entered allmulticast mode [ 2493.160633][T30339] erofs: (device loop6): mounted with root inode @ nid 36. [ 2493.183953][T30337] team_slave_0: entered allmulticast mode [ 2493.190584][T30337] team_slave_1: entered allmulticast mode [ 2493.344458][T30337] team0: entered promiscuous mode [ 2493.515720][T30337] team_slave_0: entered promiscuous mode [ 2493.609976][T30337] team_slave_1: entered promiscuous mode [ 2493.725113][T30337] bridge0: port 3(team0) entered blocking state [ 2493.731707][T30337] bridge0: port 3(team0) entered forwarding state [ 2494.115536][T30347] lwtunnel_output(): recursion limit reached on datapath [ 2495.187518][T30355] loop3: detected capacity change from 0 to 256 [ 2496.608663][T30358] netlink: 'syz.6.6618': attribute type 1 has an invalid length. [ 2496.714494][T30373] lwtunnel_output(): recursion limit reached on datapath [ 2497.088863][T30380] loop9: detected capacity change from 0 to 512 [ 2497.125246][T30380] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 2497.225746][T30380] EXT4-fs (loop9): 1 truncate cleaned up [ 2497.232085][T30380] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2498.465589][T24524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2498.547205][T30391] loop6: detected capacity change from 0 to 256 [ 2499.904525][T30403] loop4: detected capacity change from 0 to 256 [ 2502.406479][T30421] loop6: detected capacity change from 0 to 256 [ 2502.596266][T30426] lwtunnel_output(): recursion limit reached on datapath [ 2502.893947][T30432] Ù: renamed from bond_slave_1 (while UP) [ 2503.200940][T30437] loop4: detected capacity change from 0 to 16 [ 2503.235930][T30437] erofs: (device loop4): mounted with root inode @ nid 36. [ 2508.370449][T30469] loop4: detected capacity change from 0 to 16 [ 2508.414262][T30469] erofs: (device loop4): mounted with root inode @ nid 36. [ 2513.305367][T30506] loop9: detected capacity change from 0 to 256 [ 2513.442840][T30508] loop4: detected capacity change from 0 to 16 [ 2513.467390][T30508] erofs: (device loop4): mounted with root inode @ nid 36. [ 2513.474708][ T5854] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2513.663906][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 2513.679963][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2513.691592][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2513.746434][ T5854] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2513.759197][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2513.814859][ T5854] usb 4-1: config 0 descriptor?? [ 2514.361276][T30501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2514.405108][T30501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2514.441410][ T5854] HID 045e:07da: Invalid code 65791 type 1 [ 2514.483977][ T5854] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0014/input/input23 [ 2514.694608][ T5854] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 2515.556722][T27472] usb 4-1: USB disconnect, device number 28 [ 2516.955575][T30532] loop6: detected capacity change from 0 to 512 [ 2516.981866][T30532] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 2517.052055][T30532] EXT4-fs (loop6): 1 truncate cleaned up [ 2517.064467][T30532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2518.021766][T28881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2520.272506][T30567] loop9: detected capacity change from 0 to 256 [ 2528.909636][T30602] loop6: detected capacity change from 0 to 16 [ 2529.060605][T30602] erofs: (device loop6): mounted with root inode @ nid 36. [ 2529.079247][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.094172][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2532.134484][T30621] loop9: detected capacity change from 0 to 164 [ 2533.530319][T30629] loop3: detected capacity change from 0 to 512 [ 2533.648770][T30631] loop9: detected capacity change from 0 to 8 [ 2534.370128][T30631] SQUASHFS error: zlib decompression failed, data probably corrupt [ 2534.378415][T30631] SQUASHFS error: Failed to read block 0x9b: -5 [ 2534.384830][T30631] SQUASHFS error: Unable to read metadata cache entry [99] [ 2534.392032][T30631] SQUASHFS error: Unable to read inode 0x127 [ 2534.536915][T30629] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 2534.582099][T30603] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2534.673904][T30629] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.6709: invalid indirect mapped block 256 (level 1) [ 2534.716622][T30629] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.6709: invalid indirect mapped block 2683928664 (level 1) [ 2535.562627][T30629] EXT4-fs (loop3): 1 truncate cleaned up [ 2535.605367][T30629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2535.650195][T30645] loop9: detected capacity change from 0 to 1024 [ 2535.780734][T30645] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2535.816501][T30645] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 2535.907982][T30645] EXT4-fs (loop9): invalid journal inode [ 2535.949532][T30645] EXT4-fs (loop9): can't get journal size [ 2536.095908][T30645] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2536.709680][T23239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2537.355955][T24524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2537.423907][ T5854] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2537.656331][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 2537.719964][ T5854] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2537.776736][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2538.442049][ T5854] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 2538.529598][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2538.588834][ T5854] usb 4-1: SerialNumber: syz [ 2538.622279][ T5854] usb 4-1: 0:2 : does not exist [ 2538.793958][T30670] netlink: 'syz.6.6721': attribute type 1 has an invalid length. [ 2538.884938][T27472] usb 4-1: USB disconnect, device number 29 [ 2538.924600][T30671] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6721'. [ 2542.881257][T30707] veth0: entered promiscuous mode [ 2542.895407][T30707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6735'. [ 2543.175219][T30713] loop3: detected capacity change from 0 to 512 [ 2543.286922][T30713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2543.344807][T30713] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2543.501133][T30722] loop9: detected capacity change from 0 to 16 [ 2543.556064][T30722] erofs: (device loop9): mounted with root inode @ nid 36. [ 2543.577622][T23239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2548.373973][T30757] loop9: detected capacity change from 0 to 16 [ 2548.435938][T30757] erofs: (device loop9): mounted with root inode @ nid 36. [ 2550.734346][ T6516] kworker/dying (6516) used greatest stack depth: 19560 bytes left [ 2552.394359][T30778] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6753'. [ 2554.253160][T30789] loop4: detected capacity change from 0 to 128 [ 2554.329159][T30789] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2554.424305][T30789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2554.702293][T30793] loop9: detected capacity change from 0 to 16 [ 2554.745831][T30793] erofs: (device loop9): mounted with root inode @ nid 36. [ 2557.819517][T30806] loop4: detected capacity change from 0 to 16 [ 2557.862608][T30806] erofs: (device loop4): mounted with root inode @ nid 36. [ 2558.965363][T30813] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2559.137052][T30816] 9pnet_fd: Insufficient options for proto=fd [ 2561.249600][T30830] loop3: detected capacity change from 0 to 8192 [ 2571.038867][T30891] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6785'. [ 2575.701413][T30925] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 2579.797740][T30952] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 2589.444780][T31000] printk: syz.9.6819 (31000): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 2590.944291][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.950673][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.821545][T27472] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2591.894659][T27472] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2591.902142][T27472] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2591.979839][T27472] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2592.034943][T27472] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2592.067639][T27472] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2592.093079][T27472] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2592.119719][T27472] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2592.193731][T27472] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2592.242048][T27472] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2592.531413][T27472] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2593.310185][T31028] fido_id[31028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2596.974513][T31056] loop9: detected capacity change from 0 to 2048 [ 2597.167980][T31060] loop4: detected capacity change from 0 to 1024 [ 2597.264518][T31059] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2597.561983][T31065] loop9: detected capacity change from 0 to 1024 [ 2599.302791][ T27] audit: type=1800 audit(1793894815.909:902): pid=31079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6844" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 2600.813494][T31087] loop9: detected capacity change from 0 to 128 [ 2602.281095][T31087] FAT-fs (loop9): Directory bread(block 32) failed [ 2602.300702][T31087] FAT-fs (loop9): Directory bread(block 33) failed [ 2602.345380][T31087] FAT-fs (loop9): Directory bread(block 34) failed [ 2602.351974][T31087] FAT-fs (loop9): Directory bread(block 35) failed [ 2602.463187][T31087] FAT-fs (loop9): Directory bread(block 36) failed [ 2602.477028][T31087] FAT-fs (loop9): Directory bread(block 37) failed [ 2602.513864][T31087] FAT-fs (loop9): Directory bread(block 38) failed [ 2602.520454][T31087] FAT-fs (loop9): Directory bread(block 39) failed [ 2602.575445][T31087] FAT-fs (loop9): Directory bread(block 40) failed [ 2602.602419][T31087] FAT-fs (loop9): Directory bread(block 41) failed [ 2603.131613][T31087] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 2603.178409][T31087] FAT-fs (loop9): Filesystem has been set read-only [ 2605.019089][T31105] No such timeout policy "syz1" [ 2605.318800][T31113] loop3: detected capacity change from 0 to 256 [ 2606.813766][T31122] serio: Serial port ttyS3 [ 2608.401846][T31135] loop4: detected capacity change from 0 to 1024 [ 2609.371921][T31135] hfsplus: invalid length 32517 has been corrected to 255 [ 2609.422924][ T27] audit: type=1800 audit(1793894826.029:903): pid=31135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6852" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 2609.450146][T31135] hfsplus: b-tree write err: -5, ino 20 [ 2609.558979][ T5023] hfsplus: b-tree write err: -5, ino 20 [ 2610.401534][T31156] loop3: detected capacity change from 0 to 1024 [ 2610.473349][T31156] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 2611.631575][T29493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2611.648639][T29493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2611.658142][T29493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2611.687224][T29493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2611.696237][T29493] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2611.712214][T29493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2613.407522][T31162] rxe_eth0 speed is unknown, defaulting to 1000 [ 2613.677700][ T3536] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2613.761996][T31162] erspan0 speed is unknown, defaulting to 1000 [ 2613.794594][T27723] Bluetooth: hci3: command tx timeout [ 2613.936612][ T3536] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2615.472054][ T3536] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2616.328265][T27723] Bluetooth: hci3: command tx timeout [ 2616.530787][ T3536] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2616.585005][T31198] bridge0: port 3(syz_tun) entered blocking state [ 2616.599992][T31198] bridge0: port 3(syz_tun) entered disabled state [ 2616.614100][T31198] syz_tun: entered allmulticast mode [ 2616.640955][T31198] syz_tun: entered promiscuous mode [ 2616.652645][T31198] bridge0: port 3(syz_tun) entered blocking state [ 2616.659344][T31198] bridge0: port 3(syz_tun) entered listening state [ 2616.725149][ T5023] bridge0: port 3(syz_tun) entered disabled state [ 2616.885149][T31203] loop3: detected capacity change from 0 to 2048 [ 2616.977865][T31203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2617.181007][T31162] chnl_net:caif_netlink_parms(): no params data found [ 2617.438460][T31209] rxe_eth0 speed is unknown, defaulting to 1000 [ 2617.793568][T31209] erspan0 speed is unknown, defaulting to 1000 [ 2618.636966][T27723] Bluetooth: hci3: command tx timeout [ 2618.713876][T31162] bridge0: port 1(bridge_slave_0) entered blocking state [ 2618.751698][T31162] bridge0: port 1(bridge_slave_0) entered disabled state [ 2618.782510][T31162] bridge_slave_0: entered allmulticast mode [ 2618.807888][T31162] bridge_slave_0: entered promiscuous mode [ 2618.825486][T31162] bridge0: port 2(bridge_slave_1) entered blocking state [ 2618.833031][T31162] bridge0: port 2(bridge_slave_1) entered disabled state [ 2618.850951][T31162] bridge_slave_1: entered allmulticast mode [ 2618.874450][T31162] bridge_slave_1: entered promiscuous mode [ 2619.159708][T31162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2619.288527][T31162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2620.490125][T31162] team0: Port device team_slave_0 added [ 2620.518875][T31162] team0: Port device team_slave_1 added [ 2620.676373][T27723] Bluetooth: hci3: command tx timeout [ 2620.844760][T31162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2620.873195][T31162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2620.922737][T31162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2620.978312][ T5854] infiniband syz0: ib_query_port failed (-19) [ 2620.991080][T31162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2621.002006][T31162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2621.059273][T31162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2621.433151][T31162] hsr_slave_0: entered promiscuous mode [ 2621.504288][T31162] hsr_slave_1: entered promiscuous mode [ 2621.569477][T31162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2621.607940][T31162] Cannot create hsr debugfs directory [ 2624.384465][ T3536] hsr_slave_0: left promiscuous mode [ 2624.441740][ T3536] hsr_slave_1: left promiscuous mode [ 2624.505369][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2624.543524][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2624.598735][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2624.627493][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2624.654526][ T3536] team0: left allmulticast mode [ 2624.664080][ T3536] team_slave_0: left allmulticast mode [ 2624.682995][ T3536] team_slave_1: left allmulticast mode [ 2624.711839][ T3536] team0: left promiscuous mode [ 2624.721758][ T3536] team_slave_0: left promiscuous mode [ 2624.738735][ T3536] team_slave_1: left promiscuous mode [ 2624.747327][ T3536] bridge0: port 3(team0) entered disabled state [ 2624.794908][ T3536] bridge_slave_1: left allmulticast mode [ 2624.811812][ T3536] bridge_slave_1: left promiscuous mode [ 2624.843957][ T27] audit: type=1800 audit(1793894841.449:904): pid=31290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6896" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 2624.877758][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 2624.918570][ T3536] bridge_slave_0: left allmulticast mode [ 2625.174730][ T3536] bridge_slave_0: left promiscuous mode [ 2625.187136][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 2625.771164][T31297] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6900'. [ 2625.813037][ T3536] veth1_macvtap: left promiscuous mode [ 2625.834002][ T3536] veth0_macvtap: left promiscuous mode [ 2625.864464][ T3536] veth1_vlan: left promiscuous mode [ 2625.869856][ T3536] veth0_vlan: left promiscuous mode [ 2627.461253][ T3536] bond3 (unregistering): Released all slaves [ 2627.506925][ T3536] bond2 (unregistering): Released all slaves [ 2627.550706][ T3536] bond1 (unregistering): Released all slaves [ 2629.983075][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 2630.099002][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 2630.258802][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2630.390158][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2630.709469][T31325] fuse: Bad value for 'fd' [ 2632.665757][ T3536] bond0 (unregistering): Released all slaves [ 2634.358855][T28179] bridge0: port 3(syz_tun) entered disabled state [ 2634.496267][T28179] syz_tun (unregistering): left allmulticast mode [ 2634.543792][T28179] syz_tun (unregistering): left promiscuous mode [ 2634.585519][T28179] bridge0: port 3(syz_tun) entered disabled state [ 2634.844711][T27723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2634.859794][T27723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2634.870242][T27723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2634.880373][T27723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2634.888673][T27723] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2634.896071][T27723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2635.045481][T31353] rxe_eth0 speed is unknown, defaulting to 1000 [ 2635.826838][T31162] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2635.910661][T31162] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2635.990002][T31162] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2636.089038][T31162] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2636.659713][ T3536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2636.993894][T29493] Bluetooth: hci1: command tx timeout [ 2637.086011][ T3536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2637.200553][T31360] rxe_eth0 speed is unknown, defaulting to 1000 [ 2637.392649][ T3536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2637.708886][ T3536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2637.806656][T31353] chnl_net:caif_netlink_parms(): no params data found [ 2638.189880][T31162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2638.502455][T31162] 8021q: adding VLAN 0 to HW filter on device team0 [ 2638.551509][T31353] bridge0: port 1(bridge_slave_0) entered blocking state [ 2638.598045][T31353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2638.625133][T31353] bridge_slave_0: entered allmulticast mode [ 2638.643336][T31353] bridge_slave_0: entered promiscuous mode [ 2638.666779][T31353] bridge0: port 2(bridge_slave_1) entered blocking state [ 2638.733861][T31353] bridge0: port 2(bridge_slave_1) entered disabled state [ 2638.741125][T31353] bridge_slave_1: entered allmulticast mode [ 2638.813894][T31353] bridge_slave_1: entered promiscuous mode [ 2639.073889][T29493] Bluetooth: hci1: command tx timeout [ 2639.122770][T31353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2639.162104][T23038] bridge0: port 1(bridge_slave_0) entered blocking state [ 2639.169249][T23038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2639.336128][T31353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2639.435558][T23038] bridge0: port 2(bridge_slave_1) entered blocking state [ 2639.442676][T23038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2639.677332][T31353] team0: Port device team_slave_0 added [ 2640.106817][T31353] team0: Port device team_slave_1 added [ 2641.341608][T29493] Bluetooth: hci1: command tx timeout [ 2641.446775][T31353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2641.495457][T31353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2641.603776][T31353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2641.687861][T31353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2641.703974][T31353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2641.785301][T31353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2642.320035][T31353] hsr_slave_0: entered promiscuous mode [ 2642.334893][T31353] hsr_slave_1: entered promiscuous mode [ 2642.394152][T31353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2642.401783][T31353] Cannot create hsr debugfs directory [ 2642.978331][T31442] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.6928'. [ 2643.076695][T31162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2643.393998][T29493] Bluetooth: hci1: command tx timeout [ 2643.405990][T31452] kvm: emulating exchange as write [ 2644.414478][T28860] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2644.520719][T31162] veth0_vlan: entered promiscuous mode [ 2644.681235][T28860] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2644.694990][T28860] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2644.725724][T28860] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2644.753802][T28860] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 2644.799766][T28860] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 2644.909185][T28860] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2644.982473][T28860] usb 10-1: config 1 interface 1 has no altsetting 0 [ 2645.014529][T28860] usb 10-1: string descriptor 0 read error: -22 [ 2645.043132][T28860] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 2645.105200][T28860] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.315623][T31162] veth1_vlan: entered promiscuous mode [ 2645.473751][T29493] Bluetooth: hci1: command tx timeout [ 2645.755403][T28860] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 2645.828466][T28860] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 2645.883941][T28860] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 2645.944841][T28860] usb 10-1: USB disconnect, device number 3 [ 2646.084847][ T3536] hsr_slave_0: left promiscuous mode [ 2646.104202][ T3536] hsr_slave_1: left promiscuous mode [ 2646.124575][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2646.132647][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2646.194915][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2646.224445][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2646.274157][ T3536] bridge_slave_1: left allmulticast mode [ 2646.285140][ T3536] bridge_slave_1: left promiscuous mode [ 2646.304919][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 2646.370734][ T3536] bridge_slave_0: left allmulticast mode [ 2646.376747][ T3536] bridge_slave_0: left promiscuous mode [ 2646.390690][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 2646.557528][ T3536] veth1_macvtap: left promiscuous mode [ 2646.563215][ T3536] veth0_macvtap: left promiscuous mode [ 2646.577971][ T3536] veth1_vlan: left promiscuous mode [ 2646.595618][ T3536] veth0_vlan: left promiscuous mode [ 2646.793074][T31502] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[28881] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[31502] [ 2646.940907][T31506] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6942'. [ 2646.966234][T31506] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6942'. [ 2646.991459][T31506] netlink: 'syz.9.6942': attribute type 5 has an invalid length. [ 2647.024640][T31506] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6942'. [ 2650.569560][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 2650.674580][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 2651.982812][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.989264][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.075280][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2652.180745][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2653.122197][ T3536] bond0 (unregistering): Released all slaves [ 2653.182714][T31556] loop9: detected capacity change from 0 to 2048 [ 2653.236667][T31556] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2653.274891][T31556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2653.299126][T31531] rxe_eth0 speed is unknown, defaulting to 1000 [ 2653.390503][T31162] veth0_macvtap: entered promiscuous mode [ 2653.492421][T31162] veth1_macvtap: entered promiscuous mode [ 2653.726321][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2653.753753][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.773769][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2653.803986][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.823837][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2653.841235][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.863703][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2653.882952][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.904077][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2653.928309][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.943806][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2653.968591][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.980717][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2653.991353][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2654.022000][T31162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2654.119308][T31533] rxe_eth0 speed is unknown, defaulting to 1000 [ 2654.147967][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2654.174394][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2654.213810][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2654.251246][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2654.266544][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2654.291349][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2654.316204][T31577] loop9: detected capacity change from 0 to 512 [ 2654.318488][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2654.363676][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2654.384143][T31577] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2654.393856][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2654.414238][T31577] EXT4-fs (loop9): 1 truncate cleaned up [ 2654.421184][T31577] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2654.423657][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2654.468569][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2654.523969][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2654.570749][T31162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2654.604146][T31162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2654.645122][T31162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2654.685789][T31534] rxe_eth0 speed is unknown, defaulting to 1000 [ 2654.761541][T24524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2654.831083][T31162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2654.866037][T31162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2654.894131][T31162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2654.902889][T31162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2654.975259][T31353] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2655.032627][T31589] loop9: detected capacity change from 0 to 2048 [ 2655.052359][T31353] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2655.063314][T31589] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2655.096716][T31589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2655.257958][T31353] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2655.284493][T31353] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2655.438198][T31595] loop9: detected capacity change from 0 to 512 [ 2655.498084][T31595] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2655.514757][T31595] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2655.535566][ T5023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2655.553717][ T5023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2655.584833][T31595] EXT4-fs error (device loop9): ext4_find_dest_de:2117: inode #2: block 3: comm syz.9.6968: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 2655.621058][T31595] EXT4-fs error (device loop9): ext4_find_dest_de:2117: inode #2: block 3: comm syz.9.6968: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 2655.687680][T24524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2655.798150][ T5023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2655.824556][ T5023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2656.464768][T31353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2656.977198][T31609] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 2657.100394][T31353] 8021q: adding VLAN 0 to HW filter on device team0 [ 2657.250413][T23582] bridge0: port 1(bridge_slave_0) entered blocking state [ 2657.257638][T23582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2657.288956][T23582] bridge0: port 2(bridge_slave_1) entered blocking state [ 2657.296217][T23582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2657.511285][T31626] loop4: detected capacity change from 0 to 512 [ 2657.534424][T31626] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2657.563557][T31626] EXT4-fs (loop4): 1 truncate cleaned up [ 2657.614600][T31626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2657.866962][T31162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2659.125596][T29493] Bluetooth: hci0: command 0x0406 tx timeout [ 2659.428172][T31353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2659.599017][T31353] veth0_vlan: entered promiscuous mode [ 2659.631293][T31353] veth1_vlan: entered promiscuous mode [ 2659.746694][T31353] veth0_macvtap: entered promiscuous mode [ 2659.806594][T31353] veth1_macvtap: entered promiscuous mode [ 2659.857381][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2659.884147][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2659.923915][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2659.973684][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2659.983569][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2660.023566][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2660.056198][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2660.123788][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2660.164245][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2660.224153][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2660.253162][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2660.281378][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.564576][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2661.575720][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.613773][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2661.656696][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.696436][T31353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2661.727798][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2661.769867][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.793907][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2661.817877][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.843678][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2661.862201][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.883067][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2661.913713][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.933761][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2661.946863][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.957676][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2661.968617][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2661.982155][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2661.993381][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.012266][T31353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2662.023312][T31353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.059617][T31353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2662.105898][T31353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.128802][T31353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.149796][T31353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.159080][T31353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.410481][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2662.435905][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2662.529145][T23582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2662.545125][T23582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2713.398298][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.406113][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2735.953918][T27723] Bluetooth: hci3: command 0x0406 tx timeout [ 2761.554192][T27723] Bluetooth: hci1: command 0x0406 tx timeout [ 2774.839320][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.845861][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.281599][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.291838][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2841.393876][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2897.731043][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.737647][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.157790][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.165463][ T1291] ieee802154 phy1 wpan1: encryption failed: -22