last executing test programs: 1m36.034142553s ago: executing program 1 (id=17): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r2, r1, 0x0, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 1m35.760556019s ago: executing program 1 (id=21): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m35.540202854s ago: executing program 1 (id=24): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000780)={0x526, 0x7d, 0x0, {{0x0, 0x4ec, 0x6f4, 0x5, {0x0, 0x1, 0x5}, 0x4300000, 0x100, 0x7, 0xa4, 0x248, '\x85u\xbak\x10\xf7x\xee\xdb\xd5\xa6\xd2\xd5\xfb\x8a:Q\xc7\x8e\xb8\xdb\x06S\x16B|VY\x98\xa2M5MJ\xba\xfc\xef\x96\xe8J\xe5\xb1W\x18\xc2J/\xfd\tGg\x8d\xc7>,T\x8b\x15\r\xc3u\xe6\xed\xc06~C^a\x8b@\"\xb3\xff\xe9yvR\v\xf2\xdfZG\xce2\xfc\xe3\xd1j\xf6\xedR\f\r%gz#\xd96D\xaf$n\xc4\xe5\x16\x9f\xae/\xd0\xa8\x88\x125rZG\xc9L\x17H\x981[\xe90\x1b(e\xbcdv\x86\x90\xf7\x15t\xac\x8e\xb0\xd3\x98\a2\x7f\xeb]\xaeD\x11\xb1\x96\xb1d\xe5\x87\x9c\x05\x9ab\xf4\x16\"\x95\'8\xc1\xa8\a\xceJ\xf5\x193\xa0\x05D\xec&j\xb6\xd9u\xf3lD\xfd(\x02\xd1Zx\xe8\x00Q\xf3R\x1a\xf1\v <\xff\xfa\xb4\x11J\xcd\xc4\xc7\xdc\xf2\x11\xa4\xbe\xbcn\xedK\xa0\xc3[p\xa8\xe3e7S\x01\x89\x18*\x1b\x1b\xd7\xa1+\x99\x911\xd3\x95 J\xf3\x93<\x9e\"\x86\xf2\xe9d\xf7\x95\xc1\xd0\xcc3\xbaF\xca\rd\xca\x8eCO\x13\x96L\r\xec1\x11\xf2\x86\xb9j\x03ciS\x15\xa0\x9d\n\x92\x92\xb2~\xcf\x1b\xed\x9f\xc6\xa4\xa1\xce\x85\xd7\x86\xf1S\xda\xd5A\xef\x9a\x95=\xb5\xfb\xba\xd6\xd6\xf4=\x8f\xcb\x13O\xbf\xa3\"\xdf\xd7\xbc\x0e_\x7fSf\x00\x1c\"\xbbM<\xcf\xe2Z\xb8d>\xf9\x055VXp\x91n\xaat\xbb\x06^\xcf\x14F\xed\xda\xc7?\xf9}\x00\'\xbc\x11\xff\xa5U$\xbc\xa9\x11F?O`\x9ca\xd3\xe8\xf6\xa3\x9d\x12\xadX\x89\xfb\x836P\x98+Gtc\xfeN\xdea`+4kBn\xcf[709\x0fv\xce\x00\x85\f\xe6\xb6\xd7\xe9\xa2\x7fxm_\xed\x03\xa3k\xb91\xe3\f3\xfbe\'\x8a\x03S\x92\xae2\xb3\xd2\"\xef\x17\x8f]*7G\xa6\x99x\xbe\x05\xb4\x9d\xb2+\xe0\xb7\xd6\xbb,\'i\\\xc2\x95\xb7LF}Q\xb1U!By \xbbP\xaaL\xdd*\xe7\xa4\xa4\x81\xdc\x16!\a+\x90\x01\xe7\xa7\xc6\x8b\xf6*\x93\xec\xc3\xf4\xaa\xfb\xb7\xf3`\x96\x1a\xa6g\xfd\xb8\tZ\xfbz\xda\x86Y\xe9m\xf2%\r\xa0\xf4/\xd3\x9f\xd8,6\xb6\x16\x7f\x1fK\xb7\xf9\xbe%\xddT~>\xdc\t\xea\xe4\x1a\x85_\'\xae.\x10\xc19B\x0e\xdb^\xb0\xd2r7\x10', 0xc, 'w\x1c\xeb\x93d1\xef\x94d\xf2\x12\xc6', 0x12d, '\x17\xe0_\x00\x00\x00\x00\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0PI\xff\x02)\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xf0|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x93#s\xbf\xfc\x12\xa2\xd6\xf3\x1bv\xbc6\x04\x8c\x10No\xb5\xe5\x82\xd1^f\xd3\x8bs\x91\x8d@.1mT>\xca\xf0\'\xb9\xf7\xb5K]\'\xda\x0fp\xca\x94\xe7\xe9{W0\x12\xa0\x90\x1b\xadB\xeaW\x14G4)\xf8\x1eP\xa69\xb0\xab\x96\x15\xdc\xdf\xc2\xf4\xe31!wG\x86\xa9Y;:\x93\x94KS\x16\xa7R\x11\xb6\xd6?\x9e\xac:\xf2\xd74\xa2dE\xfc\x1b;8\xca|<\xd9\x97h^mK\vF\xf5\xe2\xd3\x83bn\xbaQt\xfc\xf6\xbeI\x9awZ\x91\xf5\xc8yP\xef\t\xaaY\xb7f\x12\xc5zfz>R\xee\xc8\x16n.\xcd\xb1\x89@v5\x1d30\x00\xb5.\xf1\xd7\x03\x04&\xe197Jd\x85', 0x138, '\x8fE\x88i\xa1\xda}\xeaO\x1c\xbf\xbb\xde\x95V$\xdc\xb1\x1a\xfc\xa0\xd7R\x80!\x1aA|\'\x8d\xc2\x80?\xa4\x13\xd0@\xcb$\xc6\xf4\x14\x9aEQ\'Ku\xec59\xbc\x06\x8f\x1bE\x00\x04\xad\xf3\xcfIb\xbd\x14\xa9\x0e\x92\xc1\xcb\xe71\xdc\xe4\xb2\x820\xf9Q\xbb\xdd\x80\x13[\xeb=\t\xddnV\x1a\x96\xb1?\x0f\x8b\xbe\x03M~\xb1\x14c\xa6\x89\n{\xfd\xa9O\x00\x88\xbb2\xd4\x15\x85\x03\xe2\xda\xbb\xf61\xb5\xf8\xc3\xfa\xa7\x90\x1f\x90\xf3\xd8\xc0\xb3\x83IUH`AAb\x19I<\x17Wu\x06\x0f\xcd\xe7)\xf34?\xa3\xf6\xc5\xfd\x15Q\t$$\"k]\xce\xf5\n\xf0\x13\xf9\xf2g\xa0\x84\x10\\\xf0+f\x02-\v5vP\xcbs)\xfd\x1bt\x85p\xd7M6\x8c\xea\x80\xed\xa5$\xce\x8d\x9d\xb6\xd9\xe7J\"N\\\xc7\x19\b\x15\x02\x14\xb9\x14\xac\xaa3Q\'\x02f\xc8[u\xf5\xbe\x94\xe1\xc47W04\xf9=\xbc\xe5\xc6\xb4\x87\x14\xa7\t\xdb\x8d\x0e]\x7f0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 1m34.317109144s ago: executing program 1 (id=34): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x10c8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m33.828356006s ago: executing program 32 (id=34): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x10c8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 47.01445236s ago: executing program 4 (id=325): bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000180), 0x1004002, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000b00)={0x50, 0x0, 0x5070, {0x7, 0x29, 0x1, 0x24ff87198976dd75, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002a00)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43c554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4c9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce64e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a0d000000e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909190000000000000000c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9ef7d5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5e666c438f5d0f40f911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfd00d9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6eafaf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f00064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b2e4e552cc9e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a456281d18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4ed8830d00008998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd59fde0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb890d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab53391af2fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc75949424310dff81116b8f2076b8ecace84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a70bed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815d928bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4260093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a3cfafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8a3f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x4, 0x1, 0x0, {0xffdfffffffffffff, 0x0, 0x8000000000000001, 0x80000001, 0x0, 0x80200000000001, 0x9e9, 0xc9, 0x3, 0x8000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 45.907384687s ago: executing program 4 (id=332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000080)=""/170, 0xaa}], 0x2}, 0x2001) 43.781145828s ago: executing program 4 (id=344): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_kvm_add_vcpu$x86(r0, &(0x7f00000001c0)={0x0, 0x0}) 42.819120561s ago: executing program 4 (id=352): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0x1, 0xc34, &(0x7f0000001080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x5, {0x7, 0x29, 0x2, 0x1122070, 0x9, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0xf, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x403, 0x9117, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) 41.782957446s ago: executing program 4 (id=360): openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 41.355157596s ago: executing program 4 (id=362): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x24, 0xfffffffffffffe31, 0x0, 0x1f00, 0x41, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 40.857991578s ago: executing program 33 (id=362): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x24, 0xfffffffffffffe31, 0x0, 0x1f00, 0x41, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.220236256s ago: executing program 0 (id=556): rseq(&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 12.0326139s ago: executing program 0 (id=559): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) 11.886363223s ago: executing program 0 (id=560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @multicast2}}}}}, 0x0) 11.62130873s ago: executing program 0 (id=562): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 11.342473297s ago: executing program 0 (id=565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0xc}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x800}, {0x200, 0x1e7, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9}, {0x2, 0x3, 0x6}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 11.014487284s ago: executing program 0 (id=568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) shutdown(r0, 0x1) 10.488738157s ago: executing program 34 (id=568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) shutdown(r0, 0x1) 6.298524748s ago: executing program 5 (id=595): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) 5.280981602s ago: executing program 5 (id=600): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) sched_getaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2.735971174s ago: executing program 2 (id=609): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2c1, &(0x7f0000000740)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0xc094) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) 2.406405441s ago: executing program 3 (id=610): r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0xffffffa8, 0x0, 0x0, 0x0, 0x7c}, 0x3ff}], 0x1, 0x2000, 0x0) 2.101154319s ago: executing program 3 (id=611): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1008c54, &(0x7f0000000600)={[{@utf8}, {@utf8no}, {@utf8no}, {@shortname_mixed}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@check_normal}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe11}}, {@rodir}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0x66}}, {@shortname_lower}]}, 0x85, 0x2ff, &(0x7f0000000200)="$eJzs3c9rG0cUwPG3kmVJdl3pUEopLQwulJbixRL01kNNsaFU0GJbhTgQWMfrRGgtGa0wKIRYh0CuOQfiQ44hEAK55RJCrr7kL8ivmy++xRCTCavdlWVJVqQk/hV/Pwfv8755OyPtyj/G3tHWHzdXisuu+VZrEX1bRKQuO4akJSJR8dXl16cbL36ce/KV/7lSM1PzmaxSERE5f/Xe+OPq6P8Pv34Ul830ha3t7OvNH+ZF3s1fLriq4KqS1spSi+Vy1fCKlwpu0VTqP8e2XFsVSq5dqQZ5a9Gx1bJTXl2tKau0NDayWrFdV1mlmiraNVUtq2qlpqxLVqGkTNNUYyMCEUk3o0hHzhBJHFiYv7ujtWxrrXW8Llpro7NNPQxiwTb+yePFidF2/nu27bg4ooc5MhyFHT3U9/nHl8d//b+8xfk/m+bOLfwzlctNzyqVEFm5sZZfy/tbP/98VAriiC0bs78t7Ip3jQTE8D7O/J2bnlQNafl5ZT2oX1/L+98cppaD+oykvJ9TWuolrM/49cqv1+t+zzEZaa3PSkq+6V6fDesl0tL/sPzyU0u9KSl5dlHK4siSeLV79dcySv31b07tH3+y0Q4AAAAAAAAAgNPIVCqq2ufvjb0/9ZpmvPEfH8180tvrtfPzzfn1SUnJbvf5+cl98/vh/PqQfD90fI8bAAAAAICzxK1dKVqOY1cOJ4jeSfboIiYiXiByfdwbTM8DfhuMuL/eh0WkMxXt3UUjCG94SP7ub+/PBgOTw3yiPlMQ3qxRtJwHYSop3RpHBroAJoa7PvOJI32A0k/j8G6XQbuI931ptQfGbrjnu65ttPHh42jLiQ3W+58DvRwODBK6bc/EK/+4To8vGm+aU3wAAAAATpGWX5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAx+ajFw8J1+/enJHiL+M4l2drfJ551/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcQO8DAAD//wBpt2U=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2000029, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0x10000, 0xa0) getdents(r0, &(0x7f00000007c0)=""/4096, 0x1000) 2.06695909s ago: executing program 2 (id=612): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x5d41, 0xfdeb) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x39}], 0xaaaaaaaaaaaad33, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.673865789s ago: executing program 3 (id=613): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0xfffffffffffffffe, {0x9, 0xb, 0x0, '\x00', {0x1, 0x0, 0x1, 0x7fff, r2, r3, 0xc000, '\x00', 0x2, 0xffffffffffffffff, 0xffffffdfffffffff, 0x8000000004, {0x3, 0x3}, {0x1, 0x7}, {0x2000001, 0x20000e}, {0xb009, 0xa}, 0x2, 0x80000006, 0x200fff, 0x7}}}}) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x29, 0x4, 0xa2d10b5405a1b8c9, 0x0, 0x2000}}, 0x50) 1.550663762s ago: executing program 2 (id=614): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(0x4) 1.450089244s ago: executing program 5 (id=615): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x6aed, &(0x7f0000000200)={0x0, 0x595f, 0x10180, 0x4, 0x51}, 0x0, 0x0, 0x0) 988.829196ms ago: executing program 3 (id=616): nanosleep(0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb}, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) 873.973768ms ago: executing program 5 (id=617): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x24048825) r2 = accept(r1, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1003) 712.791172ms ago: executing program 3 (id=618): socket$inet_tcp(0x2, 0x1, 0x0) mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000780)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 510.457627ms ago: executing program 5 (id=621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc4, 0x0, 0x0}, &(0x7f0000000100)=0x35) 329.973641ms ago: executing program 2 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 195.183055ms ago: executing program 5 (id=623): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 0s ago: executing program 2 (id=624): syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000040)=""/107, 0x6b, 0xab7f) read$ptp(r0, &(0x7f00000000c0)=""/15, 0xf) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 82.939812][ T5761] cgroup: Unknown subsys name 'net' [ 83.089044][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.830125][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.826969][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.838148][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.846610][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.854835][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.863197][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.880045][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.900424][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.925015][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.933286][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.940477][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.943717][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.948948][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.959054][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.964587][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.976355][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.981369][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.985431][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.993225][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.000648][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.012030][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.019061][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.039009][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.061329][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.069073][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.673582][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.819719][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.836784][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.880047][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.971081][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.978631][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.986092][ T5773] bridge_slave_0: entered allmulticast mode [ 87.994532][ T5773] bridge_slave_0: entered promiscuous mode [ 88.036082][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.043586][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.051297][ T5773] bridge_slave_1: entered allmulticast mode [ 88.058939][ T5773] bridge_slave_1: entered promiscuous mode [ 88.192870][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.202358][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.210139][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.217692][ T5776] bridge_slave_0: entered allmulticast mode [ 88.225086][ T5776] bridge_slave_0: entered promiscuous mode [ 88.233566][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.244464][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.252246][ T5775] bridge_slave_0: entered allmulticast mode [ 88.259625][ T5775] bridge_slave_0: entered promiscuous mode [ 88.266957][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.277093][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.284523][ T5774] bridge_slave_0: entered allmulticast mode [ 88.292213][ T5774] bridge_slave_0: entered promiscuous mode [ 88.301894][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.313777][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.321118][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.328503][ T5776] bridge_slave_1: entered allmulticast mode [ 88.336005][ T5776] bridge_slave_1: entered promiscuous mode [ 88.343210][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.353588][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.361214][ T5775] bridge_slave_1: entered allmulticast mode [ 88.368234][ T5775] bridge_slave_1: entered promiscuous mode [ 88.385695][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.393598][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.401029][ T5774] bridge_slave_1: entered allmulticast mode [ 88.408095][ T5774] bridge_slave_1: entered promiscuous mode [ 88.463995][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.497782][ T5773] team0: Port device team_slave_0 added [ 88.507079][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.544019][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.557190][ T5773] team0: Port device team_slave_1 added [ 88.589602][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.602515][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.613991][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.638083][ T5775] team0: Port device team_slave_0 added [ 88.649941][ T5775] team0: Port device team_slave_1 added [ 88.706911][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.714157][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.740638][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.767727][ T5776] team0: Port device team_slave_0 added [ 88.777362][ T5776] team0: Port device team_slave_1 added [ 88.796388][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.805699][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.832181][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.846512][ T5774] team0: Port device team_slave_0 added [ 88.856304][ T5774] team0: Port device team_slave_1 added [ 88.893332][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.900683][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.926927][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.945739][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.955208][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.981349][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.010949][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.017940][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.047093][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.051306][ T5785] Bluetooth: hci2: command tx timeout [ 89.090306][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.097318][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.123511][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.123677][ T5785] Bluetooth: hci1: command tx timeout [ 89.134123][ T5780] Bluetooth: hci3: command tx timeout [ 89.134342][ T5780] Bluetooth: hci0: command tx timeout [ 89.153630][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.162148][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.189064][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.212780][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.219977][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.246015][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.295233][ T5775] hsr_slave_0: entered promiscuous mode [ 89.302109][ T5775] hsr_slave_1: entered promiscuous mode [ 89.316050][ T5773] hsr_slave_0: entered promiscuous mode [ 89.323375][ T5773] hsr_slave_1: entered promiscuous mode [ 89.329957][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.338003][ T5773] Cannot create hsr debugfs directory [ 89.478063][ T5776] hsr_slave_0: entered promiscuous mode [ 89.485259][ T5776] hsr_slave_1: entered promiscuous mode [ 89.491900][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.500234][ T5776] Cannot create hsr debugfs directory [ 89.519977][ T5774] hsr_slave_0: entered promiscuous mode [ 89.527414][ T5774] hsr_slave_1: entered promiscuous mode [ 89.536528][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.544278][ T5774] Cannot create hsr debugfs directory [ 89.969177][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.989950][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.003280][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.014100][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.092698][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.112654][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.128682][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.162690][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.223322][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.252319][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.265923][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.277702][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.394624][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.433337][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.445950][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.474179][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.484940][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.519666][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.577681][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.585114][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.606852][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.614089][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.651697][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.692537][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.751341][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.775247][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.799046][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.806197][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.826572][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.833805][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.911343][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.918684][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.937469][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.944756][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.993537][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.098590][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.109364][ T5780] Bluetooth: hci2: command tx timeout [ 91.157574][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.164806][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.192874][ T5780] Bluetooth: hci0: command tx timeout [ 91.198941][ T5785] Bluetooth: hci1: command tx timeout [ 91.198966][ T5781] Bluetooth: hci3: command tx timeout [ 91.225484][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.232702][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.437601][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.584825][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.612689][ T5773] veth0_vlan: entered promiscuous mode [ 91.637406][ T5773] veth1_vlan: entered promiscuous mode [ 91.770198][ T5774] veth0_vlan: entered promiscuous mode [ 91.776795][ T5773] veth0_macvtap: entered promiscuous mode [ 91.820543][ T5774] veth1_vlan: entered promiscuous mode [ 91.836309][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.846776][ T5773] veth1_macvtap: entered promiscuous mode [ 91.932466][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.955689][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.977102][ T5774] veth0_macvtap: entered promiscuous mode [ 91.996179][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.005767][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.015238][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.025118][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.042020][ T5774] veth1_macvtap: entered promiscuous mode [ 92.055870][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.112734][ T5775] veth0_vlan: entered promiscuous mode [ 92.140414][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.155535][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.168033][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.198297][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.213859][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.234724][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.235023][ T8] cfg80211: failed to load regulatory.db [ 92.247187][ T5775] veth1_vlan: entered promiscuous mode [ 92.282066][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.293776][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.303572][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.314375][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.473438][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.494375][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.495804][ T5775] veth0_macvtap: entered promiscuous mode [ 92.517233][ T5776] veth0_vlan: entered promiscuous mode [ 92.532711][ T5775] veth1_macvtap: entered promiscuous mode [ 92.552979][ T5776] veth1_vlan: entered promiscuous mode [ 92.609746][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.617655][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.657664][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.665992][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.726866][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.742569][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.758719][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.770400][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.781999][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.793640][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.810461][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.829425][ T5776] veth0_macvtap: entered promiscuous mode [ 92.840524][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.852725][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.864313][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.885265][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.899302][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.929060][ T5776] veth1_macvtap: entered promiscuous mode [ 92.964206][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.973540][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.982704][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.992338][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.056578][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.101644][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.138422][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.154165][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.175571][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.188654][ T5847] syz.2.3[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.198544][ T5781] Bluetooth: hci2: command tx timeout [ 93.218558][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.231585][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.269097][ T5781] Bluetooth: hci1: command tx timeout [ 93.278496][ T5781] Bluetooth: hci3: command tx timeout [ 93.283984][ T5781] Bluetooth: hci0: command tx timeout [ 93.301782][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.345401][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.388166][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.408751][ T970] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.432097][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.458510][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.481699][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.493760][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.508038][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.518277][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.527221][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.536843][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.625822][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.661770][ T970] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 93.679675][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.694153][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.726615][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.741638][ T970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 93.773631][ T970] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 93.783449][ T970] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 93.792857][ T970] usb 1-1: Manufacturer: syz [ 93.817156][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.828131][ T970] usb 1-1: config 0 descriptor?? [ 93.848550][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.880352][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.896175][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.984212][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.012174][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.354477][ T970] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 94.376978][ T970] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 94.446442][ T970] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 95.268666][ T5780] Bluetooth: hci2: command tx timeout [ 95.349226][ T5780] Bluetooth: hci0: command tx timeout [ 95.354823][ T5785] Bluetooth: hci1: command tx timeout [ 95.360575][ T5781] Bluetooth: hci3: command tx timeout [ 96.101119][ T5889] Illegal XDP return value 4294967274 on prog (id 5) dev syz_tun, expect packet loss! [ 96.300365][ T5887] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 96.568613][ T5841] usb 1-1: USB disconnect, device number 2 [ 96.792249][ T5908] FAULT_INJECTION: forcing a failure. [ 96.792249][ T5908] name failslab, interval 1, probability 0, space 0, times 1 [ 96.838508][ T5908] CPU: 0 PID: 5908 Comm: syz.2.25 Not tainted syzkaller #0 [ 96.845811][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.855944][ T5908] Call Trace: [ 96.859260][ T5908] [ 96.862225][ T5908] dump_stack_lvl+0x18c/0x250 [ 96.866980][ T5908] ? show_regs_print_info+0x20/0x20 [ 96.872212][ T5908] ? load_image+0x420/0x420 [ 96.876744][ T5908] ? __might_sleep+0xe0/0xe0 [ 96.881371][ T5908] ? __lock_acquire+0x7d80/0x7d80 [ 96.886435][ T5908] should_fail_ex+0x394/0x4c0 [ 96.891334][ T5908] should_failslab+0x9/0x20 [ 96.895877][ T5908] slab_pre_alloc_hook+0x59/0x300 [ 96.900951][ T5908] ? key_put+0x9c/0xc0 [ 96.905065][ T5908] kmem_cache_alloc+0x5a/0x2c0 [ 96.909870][ T5908] ? prepare_creds+0x30/0x5d0 [ 96.914588][ T5908] prepare_creds+0x30/0x5d0 [ 96.919177][ T5908] join_session_keyring+0x1b/0x440 [ 96.924341][ T5908] lookup_user_key+0x4e6/0x1140 [ 96.929233][ T5908] ? lookup_user_key_possessed+0x40/0x40 [ 96.934926][ T5908] ? do_futex+0x2ff/0x3e0 [ 96.939313][ T5908] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 96.945349][ T5908] ? strncpy_from_user+0x1a1/0x2f0 [ 96.950512][ T5908] __se_sys_add_key+0x315/0x410 [ 96.955406][ T5908] ? __x64_sys_add_key+0xc0/0xc0 [ 96.960383][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 96.965639][ T5908] ? __x64_sys_add_key+0x20/0xc0 [ 96.970625][ T5908] do_syscall_64+0x55/0xb0 [ 96.975074][ T5908] ? clear_bhb_loop+0x40/0x90 [ 96.979782][ T5908] ? clear_bhb_loop+0x40/0x90 [ 96.984490][ T5908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.990410][ T5908] RIP: 0033:0x7f076c99e159 [ 96.994868][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.014504][ T5908] RSP: 002b:00007f076d858028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 97.022950][ T5908] RAX: ffffffffffffffda RBX: 00007f076cc25fa0 RCX: 00007f076c99e159 [ 97.030949][ T5908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 97.038948][ T5908] RBP: 00007f076ca3503b R08: fffffffffffffffd R09: 0000000000000000 [ 97.046945][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.054946][ T5908] R13: 00007f076cc26038 R14: 00007f076cc25fa0 R15: 00007ffe9a19a618 [ 97.062958][ T5908] [ 97.157530][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.594308][ T5921] loop2: detected capacity change from 0 to 512 [ 97.718190][ T5921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.754522][ T5921] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.983810][ T1146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.031689][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.171362][ T1146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.284255][ T1146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.406062][ T1146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.547832][ T5926] loop3: detected capacity change from 0 to 32768 [ 98.613856][ T5926] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.32 (5926) [ 98.764266][ T5926] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.806748][ T5926] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 98.849006][ T5926] BTRFS info (device loop3): using free space tree [ 99.068596][ T5842] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.223084][ T5926] BTRFS info (device loop3): enabling ssd optimizations [ 99.242774][ T5926] BTRFS info (device loop3): auto enabling async discard [ 99.295236][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.305056][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.315878][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.323833][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 99.337188][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.358652][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.366694][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.400504][ T5842] usb 1-1: config 0 has no interfaces? [ 99.440508][ T5842] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 99.476174][ T5842] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 99.518806][ T5842] usb 1-1: Product: syz [ 99.523066][ T5842] usb 1-1: Manufacturer: syz [ 99.527714][ T5842] usb 1-1: SerialNumber: syz [ 99.596162][ T5842] usb 1-1: config 0 descriptor?? [ 99.691354][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.899202][ T5841] usb 1-1: USB disconnect, device number 3 [ 100.086919][ T5848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5848) [ 100.930878][ T5993] loop2: detected capacity change from 0 to 8192 [ 101.007092][ T5993] netlink: 68 bytes leftover after parsing attributes in process `syz.2.46'. [ 101.016996][ T5993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.46'. [ 101.026329][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 101.120812][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 101.120894][ T6000] bond0: option downdelay: invalid value (18446744073675997440) [ 101.120914][ T6000] bond0: option downdelay: allowed values 0 - 2147483647 [ 101.428876][ T5780] Bluetooth: hci0: command tx timeout [ 101.507979][ T1146] hsr_slave_0: left promiscuous mode [ 101.520665][ T1146] hsr_slave_1: left promiscuous mode [ 101.532528][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.558990][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.573535][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.590266][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.615658][ T1146] bridge_slave_1: left allmulticast mode [ 101.628474][ T1146] bridge_slave_1: left promiscuous mode [ 101.638984][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.654779][ T1146] bridge_slave_0: left allmulticast mode [ 101.661925][ T1146] bridge_slave_0: left promiscuous mode [ 101.667871][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.727498][ T1146] veth1_macvtap: left promiscuous mode [ 101.737958][ T1146] veth0_macvtap: left promiscuous mode [ 101.756937][ T1146] veth1_vlan: left promiscuous mode [ 101.770006][ T1146] veth0_vlan: left promiscuous mode [ 102.939144][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 102.997019][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 103.065830][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.143088][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.508425][ T5780] Bluetooth: hci0: command tx timeout [ 103.661305][ T1146] bond0 (unregistering): Released all slaves [ 103.858681][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 104.323600][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.355189][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.384774][ T5962] bridge_slave_0: entered allmulticast mode [ 104.429980][ T5962] bridge_slave_0: entered promiscuous mode [ 104.488584][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.496808][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.526721][ T5962] bridge_slave_1: entered allmulticast mode [ 104.557315][ T5962] bridge_slave_1: entered promiscuous mode [ 104.702843][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.754453][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.920793][ T5962] team0: Port device team_slave_0 added [ 104.939932][ T5962] team0: Port device team_slave_1 added [ 105.052019][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.061596][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.118029][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.144245][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.159437][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.192706][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.366464][ T5962] hsr_slave_0: entered promiscuous mode [ 105.377384][ T5962] hsr_slave_1: entered promiscuous mode [ 105.588749][ T5780] Bluetooth: hci0: command tx timeout [ 106.152221][ T5962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.213067][ T5962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.266745][ T5962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.295444][ T5962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.603738][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.670988][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.736923][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.744187][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.811213][ T2921] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.818499][ T2921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.668655][ T5780] Bluetooth: hci0: command tx timeout [ 107.771994][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.010175][ T6158] loop2: detected capacity change from 0 to 2048 [ 108.032813][ T6158] ======================================================= [ 108.032813][ T6158] WARNING: The mand mount option has been deprecated and [ 108.032813][ T6158] and is ignored by this kernel. Remove the mand [ 108.032813][ T6158] option from the mount to silence this warning. [ 108.032813][ T6158] ======================================================= [ 108.076175][ T6158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.133628][ T6158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.506887][ T6158] EXT4-fs warning (device loop2): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 377176470361903727 [ 108.652151][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.696396][ T5962] veth0_vlan: entered promiscuous mode [ 108.751603][ T5962] veth1_vlan: entered promiscuous mode [ 108.824795][ T5962] veth0_macvtap: entered promiscuous mode [ 108.895276][ T5962] veth1_macvtap: entered promiscuous mode [ 109.002106][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.042797][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.053036][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.068232][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.084592][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.107009][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.127887][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.183089][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.228597][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.248387][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.273307][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.307408][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.339161][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.390688][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.431083][ T5962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.474089][ T5962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.507062][ T5962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.522470][ T5962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.688279][ T6201] loop0: detected capacity change from 0 to 1024 [ 109.833340][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.862935][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.969208][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 109.992071][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.010358][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.033872][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 111.687060][ T6253] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 112.013433][ T6263] Zero length message leads to an empty skb [ 113.100966][ T6270] synth uevent: /bus/acpi: unknown uevent action string [ 113.189858][ T6293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.122'. [ 113.822029][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'. [ 113.874596][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 113.986375][ T6310] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.996950][ T6310] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.005812][ T6310] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.015468][ T6310] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.122434][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'. [ 114.200318][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 114.708182][ T5816] IPVS: starting estimator thread 0... [ 114.819607][ T6337] IPVS: using max 17 ests per chain, 40800 per kthread [ 115.381833][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.391284][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.448586][ T5816] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.658778][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.691394][ T5816] usb 4-1: string descriptor 0 read error: -22 [ 115.709849][ T5816] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 115.738406][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.816419][ T5816] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 116.070817][ T5816] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 116.380102][ T5816] usb 4-1: USB disconnect, device number 2 [ 116.482490][ T6347] loop4: detected capacity change from 0 to 1024 [ 116.484917][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.499483][ T6347] EXT4-fs: inline encryption not supported [ 116.526738][ T6347] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.552191][ T6347] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 116.552191][ T6347] [ 116.650022][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.626679][ T6326] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.639799][ T6326] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.650101][ T6326] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.668703][ T6326] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.908619][ T6362] process 'syz.3.143' launched './file1' with NULL argv: empty string added [ 119.080629][ T6381] syz.3.150 uses obsolete (PF_INET,SOCK_PACKET) [ 120.298834][ T6375] netlink: 'syz.2.148': attribute type 4 has an invalid length. [ 120.328603][ T6375] netlink: 17 bytes leftover after parsing attributes in process `syz.2.148'. [ 121.049200][ T5817] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.106259][ T6402] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 121.280208][ T5817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.298450][ T5817] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 121.356294][ T5817] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 121.382410][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.424594][ T5817] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 121.451854][ T5817] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 121.540753][ T6413] netlink: 'syz.0.159': attribute type 2 has an invalid length. [ 121.558438][ T6413] netlink: 'syz.0.159': attribute type 9 has an invalid length. [ 121.570138][ T6413] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 121.578048][ T6413] netlink: 'syz.0.159': attribute type 11 has an invalid length. [ 121.586647][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.159'. [ 121.869156][ T6399] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 121.880581][ T6399] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 121.905905][ T6399] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 121.973697][ T6399] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 122.113305][ T6398] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 122.175022][ T5817] usb 3-1: USB disconnect, device number 2 [ 122.199162][ T6431] ªªªªªª: renamed from vlan0 (while UP) [ 122.229579][ T5817] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 122.242912][ T5817] spcp8x5 3-1:1.0: device disconnected [ 122.781587][ T6445] FAULT_INJECTION: forcing a failure. [ 122.781587][ T6445] name failslab, interval 1, probability 0, space 0, times 0 [ 122.832343][ T6445] CPU: 1 PID: 6445 Comm: syz.3.170 Not tainted syzkaller #0 [ 122.839735][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.849849][ T6445] Call Trace: [ 122.853159][ T6445] [ 122.856110][ T6445] dump_stack_lvl+0x18c/0x250 [ 122.860822][ T6445] ? show_regs_print_info+0x20/0x20 [ 122.866054][ T6445] ? load_image+0x420/0x420 [ 122.870590][ T6445] ? __lock_acquire+0x7d80/0x7d80 [ 122.875657][ T6445] should_fail_ex+0x394/0x4c0 [ 122.880373][ T6445] should_failslab+0x9/0x20 [ 122.884911][ T6445] slab_pre_alloc_hook+0x59/0x300 [ 122.890065][ T6445] kmem_cache_alloc+0x5a/0x2c0 [ 122.894868][ T6445] ? create_new_namespaces+0x34/0x700 [ 122.900279][ T6445] create_new_namespaces+0x34/0x700 [ 122.905533][ T6445] __se_sys_setns+0x2f3/0x1740 [ 122.910336][ T6445] ? __x64_sys_setns+0x60/0x60 [ 122.915139][ T6445] ? lockdep_hardirqs_on+0x98/0x150 [ 122.920374][ T6445] do_syscall_64+0x55/0xb0 [ 122.924829][ T6445] ? clear_bhb_loop+0x40/0x90 [ 122.929596][ T6445] ? clear_bhb_loop+0x40/0x90 [ 122.934309][ T6445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.940251][ T6445] RIP: 0033:0x7f72b1d9f457 [ 122.944697][ T6445] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.964437][ T6445] RSP: 002b:00007f72b2d3bfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 122.972887][ T6445] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f72b1d9f457 [ 122.980890][ T6445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 122.988889][ T6445] RBP: 00007f72b1e3503b R08: 0000000000000000 R09: 0000000000000000 [ 122.996897][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.004896][ T6445] R13: 00007f72b2026038 R14: 00007f72b2025fa0 R15: 00007ffe4bc53108 [ 123.012914][ T6445] [ 123.761033][ T6329] libceph: connect (1)[c::]:6789 error -101 [ 123.767804][ T6329] libceph: mon0 (1)[c::]:6789 connect error [ 123.820699][ T6329] libceph: connect (1)[c::]:6789 error -101 [ 123.848248][ T6329] libceph: mon0 (1)[c::]:6789 connect error [ 123.871251][ T6469] ceph: No mds server is up or the cluster is laggy [ 124.326522][ T6486] netlink: 'syz.4.183': attribute type 1 has an invalid length. [ 124.996496][ T6506] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.191'. [ 126.126683][ T6536] loop0: detected capacity change from 0 to 1024 [ 126.162528][ T6536] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 126.189753][ T6536] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 126.234226][ T6536] EXT4-fs (loop0): invalid journal inode [ 126.272960][ T6536] EXT4-fs (loop0): can't get journal size [ 126.314910][ T6536] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 126.383045][ T6536] EXT4-fs (loop0): mount failed [ 126.492699][ T6515] loop2: detected capacity change from 0 to 32768 [ 126.651523][ T6542] FAULT_INJECTION: forcing a failure. [ 126.651523][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 126.664875][ T6542] CPU: 1 PID: 6542 Comm: syz.4.205 Not tainted syzkaller #0 [ 126.672231][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.682334][ T6542] Call Trace: [ 126.685656][ T6542] [ 126.688638][ T6542] dump_stack_lvl+0x18c/0x250 [ 126.693366][ T6542] ? show_regs_print_info+0x20/0x20 [ 126.698606][ T6542] ? load_image+0x420/0x420 [ 126.703155][ T6542] ? _raw_write_lock_irq+0xbb/0xf0 [ 126.708311][ T6542] should_fail_ex+0x394/0x4c0 [ 126.713053][ T6542] should_failslab+0x9/0x20 [ 126.717607][ T6542] slab_pre_alloc_hook+0x59/0x300 [ 126.722688][ T6542] ? netlink_table_grab+0x259/0x2e0 [ 126.727940][ T6542] ? netlink_realloc_groups+0x118/0x320 [ 126.733535][ T6542] ? netlink_realloc_groups+0x118/0x320 [ 126.739129][ T6542] __kmem_cache_alloc_node+0x53/0x250 [ 126.744564][ T6542] ? netlink_realloc_groups+0x118/0x320 [ 126.750156][ T6542] __kmalloc_node_track_caller+0xa4/0x230 [ 126.755930][ T6542] krealloc+0x86/0x120 [ 126.760051][ T6542] netlink_realloc_groups+0x118/0x320 [ 126.765471][ T6542] ? aa_sk_perm+0x83c/0x970 [ 126.770023][ T6542] netlink_bind+0x2ab/0xd30 [ 126.774572][ T6542] ? netlink_release+0x1a70/0x1a70 [ 126.779730][ T6542] ? __might_fault+0xaa/0x120 [ 126.784506][ T6542] ? bpf_lsm_socket_bind+0x9/0x10 [ 126.789587][ T6542] ? security_socket_bind+0x80/0xa0 [ 126.794849][ T6542] __sys_bind+0x2f0/0x3f0 [ 126.799225][ T6542] ? __ia32_sys_socketpair+0xb0/0xb0 [ 126.804573][ T6542] __x64_sys_bind+0x7a/0x90 [ 126.809119][ T6542] do_syscall_64+0x55/0xb0 [ 126.813577][ T6542] ? clear_bhb_loop+0x40/0x90 [ 126.818300][ T6542] ? clear_bhb_loop+0x40/0x90 [ 126.823034][ T6542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.829012][ T6542] RIP: 0033:0x7fd44e59e159 [ 126.833478][ T6542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.853131][ T6542] RSP: 002b:00007fd44c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 126.861594][ T6542] RAX: ffffffffffffffda RBX: 00007fd44e825fa0 RCX: 00007fd44e59e159 [ 126.869612][ T6542] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000003 [ 126.877712][ T6542] RBP: 00007fd44e63503b R08: 0000000000000000 R09: 0000000000000000 [ 126.885729][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.893739][ T6542] R13: 00007fd44e826038 R14: 00007fd44e825fa0 R15: 00007ffc15a3d868 [ 126.901764][ T6542] [ 126.977691][ T1146] tipc: Subscription rejected, illegal request [ 127.033703][ T6515] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 127.371008][ T6559] loop3: detected capacity change from 0 to 512 [ 127.437987][ T6559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.534770][ T6559] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.207: bg 0: block 4: invalid block bitmap [ 127.615448][ T6559] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 127.631261][ T6559] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.207: invalid indirect mapped block 1 (level 1) [ 127.644723][ T6515] XFS (loop2): Ending clean mount [ 127.671264][ T6559] EXT4-fs (loop3): 1 truncate cleaned up [ 127.680149][ T6559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.772820][ T6515] XFS (loop2): Quotacheck needed: Please wait. [ 127.955294][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.972313][ T6515] XFS (loop2): Quotacheck: Done. [ 128.573271][ T5774] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 129.455569][ T6603] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.197878][ T6624] FAULT_INJECTION: forcing a failure. [ 130.197878][ T6624] name failslab, interval 1, probability 0, space 0, times 0 [ 130.231943][ T6624] CPU: 1 PID: 6624 Comm: syz.3.230 Not tainted syzkaller #0 [ 130.239345][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.249465][ T6624] Call Trace: [ 130.252806][ T6624] [ 130.255791][ T6624] dump_stack_lvl+0x18c/0x250 [ 130.260548][ T6624] ? show_regs_print_info+0x20/0x20 [ 130.265825][ T6624] ? load_image+0x420/0x420 [ 130.270383][ T6624] ? __might_sleep+0xe0/0xe0 [ 130.275030][ T6624] ? __lock_acquire+0x7d80/0x7d80 [ 130.280115][ T6624] should_fail_ex+0x394/0x4c0 [ 130.284889][ T6624] should_failslab+0x9/0x20 [ 130.289455][ T6624] slab_pre_alloc_hook+0x59/0x300 [ 130.294544][ T6624] ? __kernfs_new_node+0xaa/0x7f0 [ 130.299630][ T6624] ? rcu_is_watching+0x15/0xb0 [ 130.304463][ T6624] kmem_cache_alloc+0x5a/0x2c0 [ 130.309292][ T6624] ? __kernfs_new_node+0xe5/0x7f0 [ 130.314389][ T6624] __kernfs_new_node+0xe5/0x7f0 [ 130.319315][ T6624] ? kernfs_new_node+0x260/0x260 [ 130.324338][ T6624] ? sysfs_do_create_link_sd+0x75/0x110 [ 130.329942][ T6624] kernfs_new_node+0x14c/0x260 [ 130.334825][ T6624] kernfs_create_link+0xa7/0x200 [ 130.339823][ T6624] sysfs_do_create_link_sd+0x83/0x110 [ 130.345264][ T6624] device_add_class_symlinks+0x1cf/0x240 [ 130.351048][ T6624] device_add+0x4f9/0xc40 [ 130.355441][ T6624] netdev_register_kobject+0x188/0x320 [ 130.360968][ T6624] register_netdevice+0x12aa/0x1ba0 [ 130.366239][ T6624] ? netif_stacked_transfer_operstate+0x210/0x210 [ 130.372709][ T6624] ? __lock_acquire+0x7d80/0x7d80 [ 130.377783][ T6624] ? kvmalloc_node+0x70/0x180 [ 130.382511][ T6624] ? rcu_is_watching+0x15/0xb0 [ 130.387343][ T6624] ? net_generic+0x1e/0x240 [ 130.391904][ T6624] vti6_tnl_create2+0x80/0x140 [ 130.396728][ T6624] vti6_locate+0x682/0x770 [ 130.401211][ T6624] ? vti6_parm_from_user+0x250/0x250 [ 130.406681][ T6624] ? __might_fault+0xaa/0x120 [ 130.411452][ T6624] ? __might_fault+0xc6/0x120 [ 130.416188][ T6624] ? __might_fault+0xaa/0x120 [ 130.420950][ T6624] ? vti6_siocdevprivate+0x6cf/0xb80 [ 130.426294][ T6624] vti6_siocdevprivate+0x82b/0xb80 [ 130.431463][ T6624] ? vti6_tnl_xmit+0x19c0/0x19c0 [ 130.436453][ T6624] ? __mutex_lock+0x30d/0xc80 [ 130.441204][ T6624] ? dev_ioctl+0x83c/0x1140 [ 130.445790][ T6624] ? dev_ifsioc+0x957/0xc40 [ 130.450365][ T6624] dev_ioctl+0x84c/0x1140 [ 130.454760][ T6624] sock_ioctl+0x74c/0x7e0 [ 130.459146][ T6624] ? sock_poll+0x3e0/0x3e0 [ 130.463637][ T6624] ? bpf_lsm_file_ioctl+0x9/0x10 [ 130.468625][ T6624] ? security_file_ioctl+0x80/0xa0 [ 130.473806][ T6624] ? sock_poll+0x3e0/0x3e0 [ 130.478281][ T6624] __se_sys_ioctl+0xfd/0x170 [ 130.482923][ T6624] do_syscall_64+0x55/0xb0 [ 130.487380][ T6624] ? clear_bhb_loop+0x40/0x90 [ 130.492095][ T6624] ? clear_bhb_loop+0x40/0x90 [ 130.496805][ T6624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.502737][ T6624] RIP: 0033:0x7f72b1d9e159 [ 130.507189][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.527011][ T6624] RSP: 002b:00007f72b2d3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.535461][ T6624] RAX: ffffffffffffffda RBX: 00007f72b2025fa0 RCX: 00007f72b1d9e159 [ 130.543464][ T6624] RDX: 0000200000000480 RSI: 00000000000089f1 RDI: 0000000000000004 [ 130.551475][ T6624] RBP: 00007f72b1e3503b R08: 0000000000000000 R09: 0000000000000000 [ 130.559477][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.567478][ T6624] R13: 00007f72b2026038 R14: 00007f72b2025fa0 R15: 00007ffe4bc53108 [ 130.575526][ T6624] [ 131.627082][ T6658] FAULT_INJECTION: forcing a failure. [ 131.627082][ T6658] name failslab, interval 1, probability 0, space 0, times 0 [ 131.662157][ T6658] CPU: 1 PID: 6658 Comm: syz.3.242 Not tainted syzkaller #0 [ 131.669561][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.679670][ T6658] Call Trace: [ 131.683000][ T6658] [ 131.685997][ T6658] dump_stack_lvl+0x18c/0x250 [ 131.690776][ T6658] ? show_regs_print_info+0x20/0x20 [ 131.696154][ T6658] ? load_image+0x420/0x420 [ 131.700724][ T6658] ? mark_lock+0x94/0x320 [ 131.705126][ T6658] should_fail_ex+0x394/0x4c0 [ 131.709868][ T6658] should_failslab+0x9/0x20 [ 131.714428][ T6658] slab_pre_alloc_hook+0x59/0x300 [ 131.719565][ T6658] ? sctp_bind_addrs_to_raw+0x10b/0x350 [ 131.725179][ T6658] ? sctp_bind_addrs_to_raw+0x10b/0x350 [ 131.730784][ T6658] __kmem_cache_alloc_node+0x53/0x250 [ 131.736222][ T6658] ? ip6_pol_route+0x171/0x1230 [ 131.741151][ T6658] ? sctp_bind_addrs_to_raw+0x10b/0x350 [ 131.746761][ T6658] __kmalloc+0xa7/0x240 [ 131.750992][ T6658] sctp_bind_addrs_to_raw+0x10b/0x350 [ 131.756444][ T6658] ? sctp_del_bind_addr+0x190/0x190 [ 131.761722][ T6658] sctp_make_init+0x164/0xf80 [ 131.766465][ T6658] ? sctp_addto_chunk+0x220/0x220 [ 131.771544][ T6658] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 131.777625][ T6658] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 131.783575][ T6658] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 131.789526][ T6658] sctp_sf_do_prm_asoc+0xcf/0x3e0 [ 131.794615][ T6658] sctp_do_sm+0x23b/0x5af0 [ 131.799087][ T6658] ? sctp_cname+0x110/0x110 [ 131.803656][ T6658] ? kasan_set_track+0x4e/0x70 [ 131.808471][ T6658] ? __kasan_kmalloc+0x8f/0xa0 [ 131.813283][ T6658] ? sctp_stream_init_ext+0x57/0x170 [ 131.818621][ T6658] ? sctp_sendmsg_to_asoc+0x12cc/0x17f0 [ 131.824223][ T6658] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 131.830174][ T6658] ? __sys_sendmmsg+0x2ca/0x510 [ 131.835080][ T6658] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 131.840159][ T6658] ? do_syscall_64+0x55/0xb0 [ 131.844804][ T6658] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.850963][ T6658] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 131.856843][ T6658] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 131.862283][ T6658] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 131.867732][ T6658] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 131.873586][ T6658] ? __sctp_connect+0xd80/0xd80 [ 131.878508][ T6658] ? __local_bh_enable_ip+0x13a/0x1c0 [ 131.883956][ T6658] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 131.889559][ T6658] ? security_sctp_bind_connect+0x89/0xb0 [ 131.895332][ T6658] sctp_sendmsg+0x1afa/0x27b0 [ 131.900083][ T6658] ? sctp_getsockopt+0xb60/0xb60 [ 131.905098][ T6658] ? aa_af_perm+0x330/0x330 [ 131.909664][ T6658] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 131.916154][ T6658] ? sock_rps_record_flow+0x19/0x3f0 [ 131.921506][ T6658] ? inet_sendmsg+0xce/0x2a0 [ 131.926156][ T6658] ? inet_send_prepare+0x250/0x250 [ 131.931323][ T6658] ____sys_sendmsg+0x61b/0x980 [ 131.936211][ T6658] ? __asan_memset+0x22/0x40 [ 131.940867][ T6658] ? __sys_sendmsg_sock+0x30/0x30 [ 131.945946][ T6658] ? __import_iovec+0x5f2/0x850 [ 131.950873][ T6658] ? import_iovec+0x73/0xa0 [ 131.955443][ T6658] ___sys_sendmsg+0x2a6/0x360 [ 131.960179][ T6658] ? __sys_sendmsg+0x2b0/0x2b0 [ 131.965023][ T6658] ? futex_setup_timer+0xc0/0xc0 [ 131.970037][ T6658] __sys_sendmmsg+0x2ca/0x510 [ 131.974772][ T6658] ? __ia32_sys_sendmsg+0x90/0x90 [ 131.979870][ T6658] ? __ia32_sys_get_robust_list+0x110/0x110 [ 131.985857][ T6658] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 131.991900][ T6658] ? lock_chain_count+0x20/0x20 [ 131.996847][ T6658] __x64_sys_sendmmsg+0xa0/0xb0 [ 132.001762][ T6658] do_syscall_64+0x55/0xb0 [ 132.006241][ T6658] ? clear_bhb_loop+0x40/0x90 [ 132.011000][ T6658] ? clear_bhb_loop+0x40/0x90 [ 132.015725][ T6658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.021673][ T6658] RIP: 0033:0x7f72b1d9e159 [ 132.026131][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.045789][ T6658] RSP: 002b:00007f72b2d3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 132.054264][ T6658] RAX: ffffffffffffffda RBX: 00007f72b2025fa0 RCX: 00007f72b1d9e159 [ 132.062285][ T6658] RDX: 0000000000000001 RSI: 0000200000000e80 RDI: 0000000000000004 [ 132.070306][ T6658] RBP: 00007f72b1e3503b R08: 0000000000000000 R09: 0000000000000000 [ 132.078327][ T6658] R10: 0000000020040055 R11: 0000000000000246 R12: 0000000000000000 [ 132.086344][ T6658] R13: 00007f72b2026038 R14: 00007f72b2025fa0 R15: 00007ffe4bc53108 [ 132.094914][ T6658] [ 132.985546][ T6680] loop0: detected capacity change from 0 to 2048 [ 133.011830][ T6680] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 133.086702][ T6680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.194216][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.207505][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.656863][ T6696] capability: warning: `syz.0.250' uses deprecated v2 capabilities in a way that may be insecure [ 134.069252][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 134.483935][ T6714] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 134.501672][ T6714] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 134.667846][ T6692] loop4: detected capacity change from 0 to 32768 [ 134.735870][ T6692] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.898496][ T6692] XFS (loop4): Ending clean mount [ 135.173022][ T6710] loop0: detected capacity change from 0 to 32768 [ 135.192494][ T6710] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.254 (6710) [ 135.246757][ T6710] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.267236][ T6710] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 135.286980][ T5962] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.297584][ T6710] BTRFS info (device loop0): setting nodatacow, compression disabled [ 135.308535][ T6710] BTRFS info (device loop0): force clearing of disk cache [ 135.318109][ T6710] BTRFS info (device loop0): setting datasum, datacow enabled [ 135.329448][ T6710] BTRFS info (device loop0): turning on sync discard [ 135.336257][ T6710] BTRFS info (device loop0): use zlib compression, level 3 [ 135.343773][ T6710] BTRFS info (device loop0): setting nodatacow, compression disabled [ 135.363974][ T6710] BTRFS info (device loop0): turning on flush-on-commit [ 135.399064][ T6710] BTRFS info (device loop0): allowing degraded mounts [ 135.419290][ T6710] BTRFS info (device loop0): using free space tree [ 135.565920][ T6710] BTRFS info (device loop0): rebuilding free space tree [ 136.137073][ T5773] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.479041][ T6749] netlink: 'syz.2.263': attribute type 4 has an invalid length. [ 136.569404][ T6762] netlink: 'syz.2.263': attribute type 4 has an invalid length. [ 137.129941][ T6792] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 137.148013][ T6792] netlink: 'syz.3.268': attribute type 4 has an invalid length. [ 137.168396][ T6792] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.268'. [ 137.185896][ T6801] netlink: 9 bytes leftover after parsing attributes in process `syz.2.270'. [ 137.195802][ T6795] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 137.242309][ T6795] netlink: 'syz.3.268': attribute type 4 has an invalid length. [ 137.268911][ T6795] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.268'. [ 137.293212][ T6808] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.319494][ T6801] netlink: 9 bytes leftover after parsing attributes in process `syz.2.270'. [ 137.732841][ T6821] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 137.772640][ T6821] CIFS: Attempting to mount //127.0.0.1/share [ 137.800182][ T6821] CIFS: VFS: Error connecting to socket. Aborting operation. [ 137.817121][ T6821] CIFS: VFS: cifs_mount failed w/return code = -101 [ 138.104714][ T6830] loop3: detected capacity change from 0 to 8192 [ 138.119666][ T6830] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 138.133467][ T6830] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 138.143118][ T6830] REISERFS (device loop3): using ordered data mode [ 138.150606][ T6830] reiserfs: using flush barriers [ 138.161439][ T6830] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.184997][ T6830] REISERFS (device loop3): checking transaction log (loop3) [ 138.394752][ T6830] REISERFS (device loop3): Using tea hash to sort names [ 138.427026][ T6830] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 138.793785][ T6845] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 139.577436][ T6877] CIFS: Attempting to mount //127.0.0.1/share [ 139.655520][ T6874] loop2: detected capacity change from 0 to 8192 [ 139.683471][ T6874] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 139.707222][ T6874] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 139.720464][ T6874] REISERFS (device loop2): using ordered data mode [ 139.727692][ T6874] reiserfs: using flush barriers [ 139.740450][ T6874] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.839704][ T6874] REISERFS (device loop2): checking transaction log (loop2) [ 140.076995][ T6874] REISERFS (device loop2): Using tea hash to sort names [ 140.099844][ T6874] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 140.412302][ T6877] CIFS: VFS: Error connecting to socket. Aborting operation. [ 140.428556][ T6877] CIFS: VFS: cifs_mount failed w/return code = -4 [ 140.576971][ T6905] loop3: detected capacity change from 0 to 512 [ 140.603489][ T6905] ext4: Unknown parameter 'uid<00000000000000000000' [ 140.711532][ T5780] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 141.664556][ T6939] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 141.713562][ T6932] loop4: detected capacity change from 0 to 8192 [ 141.737007][ T6932] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 141.781475][ T6932] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 141.814218][ T6932] REISERFS (device loop4): using ordered data mode [ 141.853983][ T6932] reiserfs: using flush barriers [ 141.928479][ T6932] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.009004][ T6932] REISERFS (device loop4): checking transaction log (loop4) [ 142.299469][ T6932] REISERFS (device loop4): Using tea hash to sort names [ 142.307049][ T6932] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 142.363645][ T6960] syzkaller1: entered allmulticast mode [ 142.669977][ T6028] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 142.885876][ T6028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.913334][ T6028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.924883][ T6028] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.940646][ T6028] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.951604][ T6028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.979344][ T6028] usb 3-1: config 0 descriptor?? [ 143.008750][ T6330] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.198437][ T6330] usb 1-1: Using ep0 maxpacket: 8 [ 143.257970][ T6330] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 143.284127][ T6330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 143.293194][ T6330] usb 1-1: Product: syz [ 143.297550][ T6330] usb 1-1: Manufacturer: syz [ 143.303700][ T6330] usb 1-1: SerialNumber: syz [ 143.319305][ T6330] usb 1-1: config 0 descriptor?? [ 143.345899][ T6330] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 143.428161][ T6028] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 143.486856][ T6028] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 143.883079][ T6330] gspca_sn9c2028: read1 error -110 [ 143.938543][ T6330] gspca_sn9c2028: read1 error -71 [ 143.962251][ T6330] gspca_sn9c2028: read1 error -71 [ 143.970106][ T6330] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 144.009935][ T6330] usb 1-1: USB disconnect, device number 4 [ 144.596459][ T7000] loop3: detected capacity change from 0 to 1024 [ 144.626743][ T7000] hfsplus: bad catalog file entry [ 144.637479][ T7000] hfsplus: failed to load root directory [ 144.657697][ T6998] loop0: detected capacity change from 0 to 8192 [ 144.726179][ T6998] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.813510][ T6998] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 144.823122][ T6998] REISERFS (device loop0): using ordered data mode [ 144.829848][ T6998] reiserfs: using flush barriers [ 144.836949][ T6998] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.854733][ T6998] REISERFS (device loop0): checking transaction log (loop0) [ 145.089715][ T6998] REISERFS (device loop0): Using tea hash to sort names [ 145.097268][ T6998] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 145.188870][ T7005] FAULT_INJECTION: forcing a failure. [ 145.188870][ T7005] name failslab, interval 1, probability 0, space 0, times 0 [ 145.254252][ T7005] CPU: 0 PID: 7005 Comm: syz.3.324 Not tainted syzkaller #0 [ 145.261696][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.271826][ T7005] Call Trace: [ 145.275165][ T7005] [ 145.278151][ T7005] dump_stack_lvl+0x18c/0x250 [ 145.282905][ T7005] ? show_regs_print_info+0x20/0x20 [ 145.288172][ T7005] ? load_image+0x420/0x420 [ 145.292750][ T7005] ? __might_sleep+0xe0/0xe0 [ 145.297420][ T7005] ? __lock_acquire+0x7d80/0x7d80 [ 145.302521][ T7005] should_fail_ex+0x394/0x4c0 [ 145.307319][ T7005] should_failslab+0x9/0x20 [ 145.311895][ T7005] slab_pre_alloc_hook+0x59/0x300 [ 145.316993][ T7005] ? rtnl_newlink+0x10d/0x2170 [ 145.321830][ T7005] __kmem_cache_alloc_node+0x53/0x250 [ 145.327278][ T7005] ? rtnl_newlink+0x10d/0x2170 [ 145.332110][ T7005] kmalloc_trace+0x2a/0xe0 [ 145.336652][ T7005] rtnl_newlink+0x10d/0x2170 [ 145.341326][ T7005] ? verify_lock_unused+0x140/0x140 [ 145.346590][ T7005] ? __mutex_trylock_common+0x160/0x270 [ 145.352193][ T7005] ? rtnl_setlink+0x4e0/0x4e0 [ 145.356934][ T7005] ? trace_raw_output_contention_end+0xd0/0xd0 [ 145.363158][ T7005] ? rcu_is_watching+0x15/0xb0 [ 145.367990][ T7005] ? trace_contention_end+0x39/0xe0 [ 145.373255][ T7005] ? __mutex_lock+0x30d/0xc80 [ 145.378008][ T7005] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 145.383190][ T7005] ? mutex_lock_nested+0x20/0x20 [ 145.388217][ T7005] ? rtnl_setlink+0x4e0/0x4e0 [ 145.392964][ T7005] rtnetlink_rcv_msg+0x843/0xf90 [ 145.397972][ T7005] ? rtnetlink_rcv_msg+0x220/0xf90 [ 145.403154][ T7005] ? rtnetlink_bind+0x80/0x80 [ 145.407891][ T7005] ? mark_lock+0x94/0x320 [ 145.412287][ T7005] ? __lock_acquire+0x1262/0x7d80 [ 145.417390][ T7005] ? mark_lock+0x94/0x320 [ 145.421792][ T7005] ? mark_lock+0x94/0x320 [ 145.426184][ T7005] ? __lock_acquire+0x1262/0x7d80 [ 145.431281][ T7005] ? kmalloc_reserve+0x95/0x240 [ 145.436195][ T7005] ? verify_lock_unused+0x140/0x140 [ 145.441461][ T7005] ? verify_lock_unused+0x140/0x140 [ 145.446738][ T7005] netlink_rcv_skb+0x235/0x4c0 [ 145.451574][ T7005] ? rtnetlink_bind+0x80/0x80 [ 145.456330][ T7005] ? netlink_ack+0x1160/0x1160 [ 145.461172][ T7005] ? __lock_acquire+0x7d80/0x7d80 [ 145.466259][ T7005] ? net_generic+0x1e/0x240 [ 145.470841][ T7005] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.476197][ T7005] netlink_unicast+0x7b1/0x930 [ 145.481078][ T7005] netlink_sendmsg+0x8d0/0xbf0 [ 145.485913][ T7005] ? netlink_getsockopt+0x590/0x590 [ 145.491180][ T7005] ? apparmor_socket_sendmsg+0x170/0x330 [ 145.496868][ T7005] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 145.502217][ T7005] ? security_socket_sendmsg+0x80/0xa0 [ 145.507743][ T7005] ? netlink_getsockopt+0x590/0x590 [ 145.513183][ T7005] ____sys_sendmsg+0x61b/0x980 [ 145.518019][ T7005] ? __asan_memset+0x22/0x40 [ 145.522679][ T7005] ? __sys_sendmsg_sock+0x30/0x30 [ 145.527784][ T7005] ? __import_iovec+0x5f2/0x850 [ 145.532711][ T7005] ? import_iovec+0x73/0xa0 [ 145.537295][ T7005] ___sys_sendmsg+0x2a6/0x360 [ 145.542038][ T7005] ? __sys_sendmsg+0x2b0/0x2b0 [ 145.546929][ T7005] __se_sys_sendmsg+0x1d0/0x2c0 [ 145.551876][ T7005] ? __x64_sys_sendmsg+0x80/0x80 [ 145.556892][ T7005] ? lockdep_hardirqs_on+0x98/0x150 [ 145.562257][ T7005] do_syscall_64+0x55/0xb0 [ 145.566745][ T7005] ? clear_bhb_loop+0x40/0x90 [ 145.571491][ T7005] ? clear_bhb_loop+0x40/0x90 [ 145.576231][ T7005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.582185][ T7005] RIP: 0033:0x7f72b1d9e159 [ 145.586703][ T7005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.606371][ T7005] RSP: 002b:00007f72b2d3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.614853][ T7005] RAX: ffffffffffffffda RBX: 00007f72b2025fa0 RCX: 00007f72b1d9e159 [ 145.622891][ T7005] RDX: 0000000020004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 145.630926][ T7005] RBP: 00007f72b1e3503b R08: 0000000000000000 R09: 0000000000000000 [ 145.638958][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.646983][ T7005] R13: 00007f72b2026038 R14: 00007f72b2025fa0 R15: 00007ffe4bc53108 [ 145.655032][ T7005] [ 145.701640][ T5817] usb 3-1: USB disconnect, device number 3 [ 147.287096][ T6330] IPVS: starting estimator thread 0... [ 147.418553][ T7033] IPVS: using max 18 ests per chain, 43200 per kthread [ 147.450515][ T7039] trusted_key: syz.4.332 sent an empty control message without MSG_MORE. [ 147.494367][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 147.678396][ T6330] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 147.868542][ T6330] usb 4-1: Using ep0 maxpacket: 8 [ 147.891711][ T6330] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 147.911414][ T6330] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.930514][ T6330] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.958373][ T6330] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.979533][ T6330] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.002048][ T6330] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.021609][ T6330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.266579][ T6330] usb 4-1: usb_control_msg returned -32 [ 148.286823][ T6330] usbtmc 4-1:16.0: can't read capabilities [ 148.500696][ T6330] usb 4-1: USB disconnect, device number 3 [ 149.451363][ T7072] loop3: detected capacity change from 0 to 1024 [ 149.524478][ T7072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 149.543385][ T7072] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.578247][ T7076] loop4: detected capacity change from 0 to 2048 [ 149.601850][ T7076] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 149.626153][ T7076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.843557][ T7071] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.351: Freeing blocks not in datazone - block = 0, count = 16 [ 149.864629][ T7071] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.351: bg 0: block 112: padding at end of block bitmap is not set [ 149.884779][ T7071] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 149.936340][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.157171][ T7087] loop2: detected capacity change from 0 to 8 [ 150.308429][ T5817] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.405436][ T5962] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 150.417459][ T5962] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 150.542304][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.588856][ T5817] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 150.606120][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.635640][ T5817] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 150.648693][ T5817] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 150.656620][ T5817] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 150.670283][ T5817] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 150.679873][ T5817] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 150.690321][ T5817] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 150.701318][ T5817] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 150.710913][ T5817] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 150.729144][ T5817] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 150.794091][ T5962] syz-executor (5962) used greatest stack depth: 20648 bytes left [ 150.933676][ T997] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.101570][ T6028] usb 4-1: USB disconnect, device number 4 [ 151.125655][ T997] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.137202][ T6028] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 151.170170][ T6028] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 151.197080][ T6028] keyspan 4-1:1.0: device disconnected [ 151.251537][ T997] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.390490][ T997] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.443055][ T7101] loop2: detected capacity change from 0 to 7 [ 151.468826][ T7101] Dev loop2: unable to read RDB block 7 [ 151.478639][ T7101] loop2: unable to read partition table [ 151.485287][ T7101] loop2: partition table beyond EOD, truncated [ 151.506559][ T7101] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 152.306714][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.325243][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.341295][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.351457][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.359852][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.367339][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.758114][ T7120] chnl_net:caif_netlink_parms(): no params data found [ 154.050937][ T997] hsr_slave_0: left promiscuous mode [ 154.060154][ T997] hsr_slave_1: left promiscuous mode [ 154.066937][ T997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.074988][ T997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.119346][ T997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.131174][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.140124][ T997] bridge_slave_1: left allmulticast mode [ 154.146021][ T997] bridge_slave_1: left promiscuous mode [ 154.156436][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.179105][ T997] bridge_slave_0: left allmulticast mode [ 154.190962][ T997] bridge_slave_0: left promiscuous mode [ 154.197066][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.270148][ T997] veth1_macvtap: left promiscuous mode [ 154.275924][ T997] veth0_macvtap: left promiscuous mode [ 154.288184][ T997] veth1_vlan: left promiscuous mode [ 154.293968][ T997] veth0_vlan: left promiscuous mode [ 154.468779][ T5781] Bluetooth: hci0: command tx timeout [ 154.682706][ T7176] Bluetooth: MGMT ver 1.22 [ 156.228187][ T997] team0 (unregistering): Port device team_slave_1 removed [ 156.366981][ T997] team0 (unregistering): Port device team_slave_0 removed [ 156.496496][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.548407][ T5781] Bluetooth: hci0: command tx timeout [ 156.600619][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.803675][ T7215] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 157.427346][ T997] bond0 (unregistering): Released all slaves [ 157.770912][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.798478][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.805800][ T7120] bridge_slave_0: entered allmulticast mode [ 157.821772][ T788] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.836134][ T7120] bridge_slave_0: entered promiscuous mode [ 157.880450][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.897916][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.928599][ T7120] bridge_slave_1: entered allmulticast mode [ 157.959416][ T7120] bridge_slave_1: entered promiscuous mode [ 158.061876][ T788] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 158.084124][ T788] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 158.113781][ T788] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 158.139982][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.153613][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.183860][ T788] usb 4-1: Product: syz [ 158.204375][ T788] usb 4-1: Manufacturer: syz [ 158.211787][ T788] usb 4-1: SerialNumber: syz [ 158.222781][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.240432][ T788] usb 4-1: config 0 descriptor?? [ 158.282161][ T788] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 158.367773][ T7120] team0: Port device team_slave_0 added [ 158.408684][ T7120] team0: Port device team_slave_1 added [ 158.521706][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.554352][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.625069][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.641964][ T5781] Bluetooth: hci0: command tx timeout [ 158.699742][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.706779][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.842680][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.922579][ T997] IPVS: stop unused estimator thread 0... [ 159.018077][ T7120] hsr_slave_0: entered promiscuous mode [ 159.028776][ T7120] hsr_slave_1: entered promiscuous mode [ 159.659716][ T7120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.716069][ T7120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.763468][ T7267] netlink: 144 bytes leftover after parsing attributes in process `syz.0.410'. [ 159.781212][ T7120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.817651][ T7267] netlink: 144 bytes leftover after parsing attributes in process `syz.0.410'. [ 159.858496][ T7120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.880407][ T6330] usb 4-1: USB disconnect, device number 5 [ 160.217586][ T7120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.302043][ T7120] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.346344][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.353637][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.415790][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.423080][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.709329][ T5781] Bluetooth: hci0: command tx timeout [ 161.162555][ T7120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.243158][ T7305] ip6gre1: entered promiscuous mode [ 161.253006][ T7305] ip6gre1: entered allmulticast mode [ 162.100164][ T7120] veth0_vlan: entered promiscuous mode [ 162.135725][ T7120] veth1_vlan: entered promiscuous mode [ 162.271616][ T7120] veth0_macvtap: entered promiscuous mode [ 162.299342][ T7120] veth1_macvtap: entered promiscuous mode [ 162.337751][ T7331] FAULT_INJECTION: forcing a failure. [ 162.337751][ T7331] name failslab, interval 1, probability 0, space 0, times 0 [ 162.381101][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.408534][ T7331] CPU: 0 PID: 7331 Comm: syz.3.425 Not tainted syzkaller #0 [ 162.416005][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.426094][ T7331] Call Trace: [ 162.429405][ T7331] [ 162.432361][ T7331] dump_stack_lvl+0x18c/0x250 [ 162.437080][ T7331] ? show_regs_print_info+0x20/0x20 [ 162.442491][ T7331] ? load_image+0x420/0x420 [ 162.447027][ T7331] ? __might_sleep+0xe0/0xe0 [ 162.451662][ T7331] ? __lock_acquire+0x7d80/0x7d80 [ 162.456768][ T7331] should_fail_ex+0x394/0x4c0 [ 162.461495][ T7331] should_failslab+0x9/0x20 [ 162.466032][ T7331] slab_pre_alloc_hook+0x59/0x300 [ 162.471106][ T7331] ? memcg_list_lru_alloc+0x231/0xb00 [ 162.476541][ T7331] ? memcg_list_lru_alloc+0x231/0xb00 [ 162.481944][ T7331] __kmem_cache_alloc_node+0x53/0x250 [ 162.487356][ T7331] ? memcg_list_lru_alloc+0x231/0xb00 [ 162.492759][ T7331] __kmalloc+0xa7/0x240 [ 162.496957][ T7331] memcg_list_lru_alloc+0x231/0xb00 [ 162.502194][ T7331] ? memcg_reparent_list_lrus+0x860/0x860 [ 162.507954][ T7331] ? get_obj_cgroup_from_current+0xd4/0x280 [ 162.513875][ T7331] ? get_obj_cgroup_from_current+0xd4/0x280 [ 162.519805][ T7331] slab_pre_alloc_hook+0x2ad/0x300 [ 162.524964][ T7331] ? slab_pre_alloc_hook+0xb1/0x300 [ 162.530204][ T7331] kmem_cache_alloc_lru+0x4d/0x2b0 [ 162.535350][ T7331] ? __d_alloc+0x31/0x710 [ 162.539708][ T7331] __d_alloc+0x31/0x710 [ 162.543904][ T7331] d_make_root+0x4a/0xe0 [ 162.548173][ T7331] pseudo_fs_fill_super+0x265/0x350 [ 162.553407][ T7331] ? pseudo_fs_get_tree+0x20/0x20 [ 162.558470][ T7331] get_tree_nodev+0xb5/0x140 [ 162.563104][ T7331] vfs_get_tree+0x8c/0x280 [ 162.567551][ T7331] do_new_mount+0x24a/0xa40 [ 162.572124][ T7331] __se_sys_mount+0x2e7/0x3d0 [ 162.576846][ T7331] ? __x64_sys_mount+0xc0/0xc0 [ 162.581668][ T7331] ? lockdep_hardirqs_on+0x98/0x150 [ 162.586926][ T7331] ? __x64_sys_mount+0x20/0xc0 [ 162.591736][ T7331] do_syscall_64+0x55/0xb0 [ 162.596196][ T7331] ? clear_bhb_loop+0x40/0x90 [ 162.600908][ T7331] ? clear_bhb_loop+0x40/0x90 [ 162.605619][ T7331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.611549][ T7331] RIP: 0033:0x7f72b1d9e159 [ 162.615995][ T7331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.635640][ T7331] RSP: 002b:00007f72b2d3c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.644093][ T7331] RAX: ffffffffffffffda RBX: 00007f72b2025fa0 RCX: 00007f72b1d9e159 [ 162.652094][ T7331] RDX: 0000200000000180 RSI: 00002000000002c0 RDI: 0000200000000140 [ 162.660100][ T7331] RBP: 00007f72b1e3503b R08: 0000000000000000 R09: 0000000000000000 [ 162.668114][ T7331] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 162.676181][ T7331] R13: 00007f72b2026038 R14: 00007f72b2025fa0 R15: 00007ffe4bc53108 [ 162.684202][ T7331] [ 162.728386][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.755231][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.777318][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.819665][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.917317][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.935801][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 162.958832][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.985814][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.017928][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.039436][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.060794][ T7120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.085563][ T7120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.128386][ T7120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.137185][ T7120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.261726][ T7347] input: syz0 as /devices/virtual/input/input5 [ 163.437285][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.457970][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.555720][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.577086][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.475369][ T7405] loop5: detected capacity change from 0 to 7 [ 165.507166][ T7405] loop5: p1 < > p3 p4 < p5 > [ 165.523795][ T7405] loop5: partition table partially beyond EOD, truncated [ 165.805220][ T6005] udevd[6005]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 165.813535][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 165.843721][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 165.869689][ T5784] udevd[5784]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 165.923335][ T788] kernel write not supported for file /gssd/clntXX/gssd (pid: 788 comm: kworker/1:2) [ 166.486532][ T7434] loop0: detected capacity change from 0 to 64 [ 168.129538][ T7494] device-mapper: ioctl: device name cannot contain '/' [ 168.163536][ T7496] loop2: detected capacity change from 0 to 8 [ 168.258645][ T7496] SQUASHFS error: Unable to read inode 0xe3 [ 168.445137][ T7510] loop3: detected capacity change from 0 to 512 [ 168.459176][ T7510] EXT4-fs: inline encryption not supported [ 168.492556][ T7510] EXT4-fs: Ignoring removed i_version option [ 168.509616][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.458'. [ 168.538571][ T7510] EXT4-fs (loop3): Test dummy encryption mode enabled [ 168.552473][ T7510] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e02c, mo2=0002] [ 168.571910][ T7510] System zones: 1-12 [ 168.583270][ T7510] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.788037][ T5776] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 169.462485][ T7541] FAULT_INJECTION: forcing a failure. [ 169.462485][ T7541] name failslab, interval 1, probability 0, space 0, times 0 [ 169.507767][ T7541] CPU: 0 PID: 7541 Comm: syz.5.465 Not tainted syzkaller #0 [ 169.515168][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.525280][ T7541] Call Trace: [ 169.528608][ T7541] [ 169.531583][ T7541] dump_stack_lvl+0x18c/0x250 [ 169.536326][ T7541] ? show_regs_print_info+0x20/0x20 [ 169.541622][ T7541] ? load_image+0x420/0x420 [ 169.546176][ T7541] ? __might_sleep+0xe0/0xe0 [ 169.550907][ T7541] ? __lock_acquire+0x7d80/0x7d80 [ 169.555995][ T7541] should_fail_ex+0x394/0x4c0 [ 169.560738][ T7541] should_failslab+0x9/0x20 [ 169.565414][ T7541] slab_pre_alloc_hook+0x59/0x300 [ 169.570526][ T7541] ? lockdep_hardirqs_on+0x98/0x150 [ 169.575793][ T7541] ? n_hdlc_alloc_buf+0x83/0x210 [ 169.580848][ T7541] ? n_hdlc_alloc_buf+0x83/0x210 [ 169.585843][ T7541] __kmem_cache_alloc_node+0x53/0x250 [ 169.591276][ T7541] ? _raw_spin_unlock+0x40/0x40 [ 169.596186][ T7541] ? n_hdlc_alloc_buf+0x83/0x210 [ 169.601187][ T7541] __kmalloc+0xa7/0x240 [ 169.605408][ T7541] n_hdlc_alloc_buf+0x83/0x210 [ 169.610259][ T7541] n_hdlc_tty_open+0x25a/0x450 [ 169.615092][ T7541] tty_ldisc_open+0x9d/0x100 [ 169.619733][ T7541] tty_set_ldisc+0x356/0x530 [ 169.624382][ T7541] tty_ioctl+0xc22/0xdc0 [ 169.628684][ T7541] ? tty_get_icount+0xb0/0xb0 [ 169.633454][ T7541] __se_sys_ioctl+0xfd/0x170 [ 169.638132][ T7541] do_syscall_64+0x55/0xb0 [ 169.642606][ T7541] ? clear_bhb_loop+0x40/0x90 [ 169.647334][ T7541] ? clear_bhb_loop+0x40/0x90 [ 169.652068][ T7541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.658032][ T7541] RIP: 0033:0x7ff60e59e159 [ 169.662519][ T7541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.682193][ T7541] RSP: 002b:00007ff60c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.690676][ T7541] RAX: ffffffffffffffda RBX: 00007ff60e825fa0 RCX: 00007ff60e59e159 [ 169.698704][ T7541] RDX: 0000200000000180 RSI: 0000000000005423 RDI: 0000000000000004 [ 169.706727][ T7541] RBP: 00007ff60e63503b R08: 0000000000000000 R09: 0000000000000000 [ 169.714758][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.722790][ T7541] R13: 00007ff60e826038 R14: 00007ff60e825fa0 R15: 00007ffe8240fca8 [ 169.730840][ T7541] [ 169.948457][ T7547] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 170.595494][ T7571] FAULT_INJECTION: forcing a failure. [ 170.595494][ T7571] name fail_futex, interval 1, probability 0, space 0, times 1 [ 170.653585][ T7571] CPU: 0 PID: 7571 Comm: syz.5.475 Not tainted syzkaller #0 [ 170.660982][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.671091][ T7571] Call Trace: [ 170.674423][ T7571] [ 170.677408][ T7571] dump_stack_lvl+0x18c/0x250 [ 170.682154][ T7571] ? show_regs_print_info+0x20/0x20 [ 170.687415][ T7571] ? load_image+0x420/0x420 [ 170.691980][ T7571] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 170.698033][ T7571] ? lock_chain_count+0x20/0x20 [ 170.702991][ T7571] should_fail_ex+0x394/0x4c0 [ 170.707738][ T7571] get_futex_key+0x136/0x1030 [ 170.712515][ T7571] ? fcntl_setlk+0xc05/0x1070 [ 170.717275][ T7571] ? futex_setup_timer+0xc0/0xc0 [ 170.722281][ T7571] futex_wake+0x127/0x4f0 [ 170.726669][ T7571] ? futex_wake_mark+0x150/0x150 [ 170.731669][ T7571] ? vfs_lock_file+0x110/0x110 [ 170.736503][ T7571] ? file_end_write+0x159/0x250 [ 170.741416][ T7571] ? __might_fault+0xaa/0x120 [ 170.746167][ T7571] do_futex+0x35d/0x3e0 [ 170.750401][ T7571] ? __ia32_sys_get_robust_list+0x110/0x110 [ 170.756361][ T7571] __se_sys_futex+0x3a9/0x440 [ 170.761104][ T7571] ? __x64_sys_futex+0xf0/0xf0 [ 170.765941][ T7571] ? __x64_sys_futex+0x21/0xf0 [ 170.770769][ T7571] do_syscall_64+0x55/0xb0 [ 170.772682][ T7575] FAULT_INJECTION: forcing a failure. [ 170.772682][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 170.775223][ T7571] ? clear_bhb_loop+0x40/0x90 [ 170.775255][ T7571] ? clear_bhb_loop+0x40/0x90 [ 170.797313][ T7571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.803286][ T7571] RIP: 0033:0x7ff60e59e159 [ 170.807743][ T7571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.827398][ T7571] RSP: 002b:00007ff60c7f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 170.835875][ T7571] RAX: ffffffffffffffda RBX: 00007ff60e825fa8 RCX: 00007ff60e59e159 [ 170.843911][ T7571] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff60e825fac [ 170.851935][ T7571] RBP: 00007ff60e825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 170.859963][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.867990][ T7571] R13: 00007ff60e826038 R14: 00007ffe8240fbc0 R15: 00007ffe8240fca8 [ 170.876026][ T7571] [ 170.880355][ T7575] CPU: 1 PID: 7575 Comm: syz.2.477 Not tainted syzkaller #0 [ 170.887733][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.897876][ T7575] Call Trace: [ 170.901208][ T7575] [ 170.904178][ T7575] dump_stack_lvl+0x18c/0x250 [ 170.908919][ T7575] ? show_regs_print_info+0x20/0x20 [ 170.914181][ T7575] ? load_image+0x420/0x420 [ 170.918752][ T7575] ? __might_sleep+0xe0/0xe0 [ 170.923402][ T7575] ? __lock_acquire+0x7d80/0x7d80 [ 170.928486][ T7575] should_fail_ex+0x394/0x4c0 [ 170.933221][ T7575] should_failslab+0x9/0x20 [ 170.937824][ T7575] slab_pre_alloc_hook+0x59/0x300 [ 170.942931][ T7575] ? ovl_parse_layer+0x84/0xdc0 [ 170.947845][ T7575] ? ovl_parse_layer+0x84/0xdc0 [ 170.952772][ T7575] __kmem_cache_alloc_node+0x53/0x250 [ 170.958215][ T7575] ? ovl_parse_layer+0x84/0xdc0 [ 170.963129][ T7575] __kmalloc_node_track_caller+0xa4/0x230 [ 170.968898][ T7575] ? __se_sys_mount+0x2e7/0x3d0 [ 170.973784][ T7575] ? do_syscall_64+0x55/0xb0 [ 170.978410][ T7575] kstrdup+0x3b/0x80 [ 170.982342][ T7575] ovl_parse_layer+0x84/0xdc0 [ 170.987051][ T7575] ? fs_param_is_string+0xa5/0x1b0 [ 170.992205][ T7575] ? ovl_reconfigure+0x290/0x290 [ 170.997186][ T7575] ovl_parse_param+0x4d0/0xf80 [ 171.001996][ T7575] ? ovl_free+0x270/0x270 [ 171.006363][ T7575] ? vfs_parse_monolithic_sep+0x229/0x330 [ 171.012124][ T7575] ? security_fs_context_parse_param+0xb5/0xe0 [ 171.018324][ T7575] vfs_parse_fs_param+0x1a0/0x420 [ 171.023393][ T7575] vfs_parse_monolithic_sep+0x25f/0x330 [ 171.028982][ T7575] ? ovl_parse_layer+0xdc0/0xdc0 [ 171.033980][ T7575] ? vfs_parse_fs_string+0x170/0x170 [ 171.039325][ T7575] ? ovl_init_fs_context+0x159/0x510 [ 171.044651][ T7575] ? alloc_fs_context+0x62c/0x7a0 [ 171.049716][ T7575] do_new_mount+0x21a/0xa40 [ 171.054257][ T7575] __se_sys_mount+0x2e7/0x3d0 [ 171.058972][ T7575] ? __x64_sys_mount+0xc0/0xc0 [ 171.063771][ T7575] ? lockdep_hardirqs_on+0x98/0x150 [ 171.069024][ T7575] ? __x64_sys_mount+0x20/0xc0 [ 171.073819][ T7575] do_syscall_64+0x55/0xb0 [ 171.078286][ T7575] ? clear_bhb_loop+0x40/0x90 [ 171.083001][ T7575] ? clear_bhb_loop+0x40/0x90 [ 171.087717][ T7575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.093642][ T7575] RIP: 0033:0x7f076c99e159 [ 171.098083][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.117726][ T7575] RSP: 002b:00007f076d858028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 171.126186][ T7575] RAX: ffffffffffffffda RBX: 00007f076cc25fa0 RCX: 00007f076c99e159 [ 171.134199][ T7575] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 171.142204][ T7575] RBP: 00007f076ca3503b R08: 0000200000000080 R09: 0000000000000000 [ 171.150200][ T7575] R10: 000000000000400a R11: 0000000000000246 R12: 0000000000000000 [ 171.158196][ T7575] R13: 00007f076cc26038 R14: 00007f076cc25fa0 R15: 00007ffe9a19a618 [ 171.166210][ T7575] [ 171.369816][ T7581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.480'. [ 171.654910][ T7595] futex_wake_op: syz.0.484 tries to shift op by -1; fix this program [ 173.347775][ T7631] loop0: detected capacity change from 0 to 40427 [ 173.396892][ T7631] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 173.409011][ T7631] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 173.441788][ T7631] F2FS-fs (loop0): invalid crc value [ 173.477123][ T7631] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.489004][ T7645] loop2: detected capacity change from 0 to 4096 [ 173.655571][ T7631] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 173.673919][ T7631] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.928610][ T28] audit: type=1800 audit(1788985513.863:2): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.502" name="file1" dev="loop2" ino=34 res=0 errno=0 [ 174.333653][ T7643] loop3: detected capacity change from 0 to 32768 [ 174.390732][ T7643] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.468440][ T7643] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 174.477186][ T7643] BTRFS info (device loop3): using free space tree [ 174.520283][ T7660] tmpfs: Bad value for 'size' [ 174.709232][ T7643] BTRFS info (device loop3): enabling ssd optimizations [ 174.716516][ T7643] BTRFS info (device loop3): auto enabling async discard [ 174.846993][ T7681] x86/PAT: syz.2.507:7681 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 174.898218][ T7683] loop5: detected capacity change from 0 to 1024 [ 174.998879][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.017758][ T7683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.202282][ T28] audit: type=1800 audit(1788985515.153:3): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.509" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 175.291584][ T28] audit: type=1800 audit(1788985515.183:4): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.509" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 175.529803][ T7120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.768800][ T7698] FAULT_INJECTION: forcing a failure. [ 175.768800][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 175.810876][ T7698] CPU: 0 PID: 7698 Comm: syz.5.514 Not tainted syzkaller #0 [ 175.818271][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.828371][ T7698] Call Trace: [ 175.831684][ T7698] [ 175.834638][ T7698] dump_stack_lvl+0x18c/0x250 [ 175.839377][ T7698] ? show_regs_print_info+0x20/0x20 [ 175.844612][ T7698] ? load_image+0x420/0x420 [ 175.849145][ T7698] ? __lock_acquire+0x7d80/0x7d80 [ 175.854202][ T7698] ? verify_lock_unused+0x140/0x140 [ 175.859442][ T7698] should_fail_ex+0x394/0x4c0 [ 175.864161][ T7698] should_failslab+0x9/0x20 [ 175.868713][ T7698] slab_pre_alloc_hook+0x59/0x300 [ 175.873793][ T7698] kmem_cache_alloc_lru+0x4d/0x2b0 [ 175.878942][ T7698] ? __d_alloc+0x31/0x710 [ 175.883306][ T7698] __d_alloc+0x31/0x710 [ 175.887490][ T7698] d_alloc_parallel+0xe0/0x1590 [ 175.892376][ T7698] ? __asan_memset+0x22/0x40 [ 175.897012][ T7698] ? lockdep_init_map_type+0x9c/0x8e0 [ 175.902417][ T7698] ? lockdep_softirqs_off+0x440/0x440 [ 175.907828][ T7698] ? d_hash_and_lookup+0x1b0/0x1b0 [ 175.912979][ T7698] ? __init_waitqueue_head+0xa8/0x140 [ 175.918388][ T7698] proc_fill_cache+0x15c/0x430 [ 175.923199][ T7698] ? proc_ns_dir_lookup+0x800/0x800 [ 175.928455][ T7698] ? pid_revalidate+0x260/0x260 [ 175.933347][ T7698] ? filldir64+0x40b/0x620 [ 175.937811][ T7698] proc_ns_dir_readdir+0x369/0x470 [ 175.942965][ T7698] iterate_dir+0x1bd/0x590 [ 175.947444][ T7698] __se_sys_getdents64+0xf6/0x270 [ 175.952532][ T7698] ? __x64_sys_getdents64+0x80/0x80 [ 175.957766][ T7698] ? filldir+0x620/0x620 [ 175.962061][ T7698] ? lockdep_hardirqs_on+0x98/0x150 [ 175.967301][ T7698] do_syscall_64+0x55/0xb0 [ 175.971750][ T7698] ? clear_bhb_loop+0x40/0x90 [ 175.976464][ T7698] ? clear_bhb_loop+0x40/0x90 [ 175.981180][ T7698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.987108][ T7698] RIP: 0033:0x7ff60e59e159 [ 175.991579][ T7698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.011317][ T7698] RSP: 002b:00007ff60c7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 176.019786][ T7698] RAX: ffffffffffffffda RBX: 00007ff60e825fa0 RCX: 00007ff60e59e159 [ 176.027808][ T7698] RDX: 0000000000000077 RSI: 0000200000000200 RDI: 0000000000000004 [ 176.035817][ T7698] RBP: 00007ff60e63503b R08: 0000000000000000 R09: 0000000000000000 [ 176.043816][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.051814][ T7698] R13: 00007ff60e826038 R14: 00007ff60e825fa0 R15: 00007ffe8240fca8 [ 176.059829][ T7698] [ 176.551141][ C1] Unknown status report in ack skb [ 176.909428][ T7723] loop0: detected capacity change from 0 to 256 [ 176.922006][ T7723] exfat: Deprecated parameter 'utf8' [ 176.927530][ T7723] exfat: Deprecated parameter 'namecase' [ 176.936022][ T7723] exfat: Deprecated parameter 'utf8' [ 176.997662][ T7723] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 177.131640][ T28] audit: type=1326 audit(1788985517.083:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.0.523" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f850d59e159 code=0x0 [ 177.226818][ T7732] syz.0.523: attempt to access beyond end of device [ 177.226818][ T7732] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 177.287595][ T7732] syz.0.523: attempt to access beyond end of device [ 177.287595][ T7732] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 177.328618][ T28] audit: type=1800 audit(1788985517.273:6): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.523" name="file1" dev="loop0" ino=1048613 res=0 errno=0 [ 177.352646][ T7734] syz.0.523: attempt to access beyond end of device [ 177.352646][ T7734] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 177.388679][ T7732] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 177.399156][ T28] audit: type=1800 audit(1788985517.353:7): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.523" name="file1" dev="loop0" ino=1048613 res=0 errno=0 [ 178.786666][ T7779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 179.106937][ T7785] kvm: apic: phys broadcast and lowest prio [ 179.398984][ T5817] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.591142][ T5817] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.602725][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.611876][ T7813] loop0: detected capacity change from 0 to 512 [ 179.627642][ T5817] usb 3-1: config 0 descriptor?? [ 179.646334][ T7813] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.667751][ T5817] cp210x 3-1:0.0: cp210x converter detected [ 180.286099][ T5817] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 180.300631][ T5817] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 180.325255][ T5817] usb 3-1: cp210x converter now attached to ttyUSB0 [ 180.355728][ T5817] usb 3-1: USB disconnect, device number 4 [ 180.381516][ T5817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.400402][ T5817] cp210x 3-1:0.0: device disconnected [ 180.676089][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 180.693167][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.832811][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.148433][ T5817] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 181.214771][ T3525] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.380663][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 181.425839][ T5817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.439010][ T3525] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.449713][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.467619][ T5817] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.477589][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.485809][ T5817] usb 6-1: Product: syz [ 181.490145][ T5817] usb 6-1: Manufacturer: syz [ 181.494823][ T5817] usb 6-1: SerialNumber: syz [ 181.512142][ T7383] rpcbind: server 127.0.0.1 not responding, timed out [ 181.547510][ T3525] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.639990][ T3525] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.747970][ T5817] usb 6-1: 0:2 : does not exist [ 181.784096][ T5817] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 181.878938][ T5817] usb 6-1: USB disconnect, device number 2 [ 182.100260][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.366347][ T7857] loop2: detected capacity change from 0 to 2048 [ 182.425744][ T7857] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.768914][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.779748][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.788252][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.800184][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.820948][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 182.828542][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.126627][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 183.172650][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 183.322259][ T7877] syz.5.578 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.869641][ T788] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.078839][ T788] usb 6-1: Using ep0 maxpacket: 8 [ 184.097274][ T788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.112206][ T788] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.127323][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.175151][ T788] usb 6-1: config 0 descriptor?? [ 184.277700][ T7888] syz.3.583 (7888) used greatest stack depth: 20520 bytes left [ 184.307674][ T7896] loop2: detected capacity change from 0 to 1024 [ 184.424790][ T788] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 184.442548][ T7896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 184.460821][ T7896] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.666395][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.848456][ T3525] hsr_slave_0: left promiscuous mode [ 184.902933][ T3525] hsr_slave_1: left promiscuous mode [ 184.944351][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.958451][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.960824][ T5781] Bluetooth: hci3: command tx timeout [ 184.985357][ T5817] usb 6-1: USB disconnect, device number 3 [ 185.013166][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.057568][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.095070][ T3525] bridge_slave_1: left allmulticast mode [ 185.111214][ T3525] bridge_slave_1: left promiscuous mode [ 185.117105][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.162406][ T3525] bridge_slave_0: left allmulticast mode [ 185.168176][ T3525] bridge_slave_0: left promiscuous mode [ 185.187052][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.213695][ T7922] input: syz1 as /devices/virtual/input/input6 [ 185.302143][ T3525] veth1_macvtap: left promiscuous mode [ 185.316515][ T3525] veth0_macvtap: left promiscuous mode [ 185.339516][ T3525] veth1_vlan: left promiscuous mode [ 185.344953][ T3525] veth0_vlan: left promiscuous mode [ 185.672188][ T7934] loop3: detected capacity change from 0 to 1024 [ 185.704334][ T7934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.754630][ T7934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.177922][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.373502][ T7949] loop3: detected capacity change from 0 to 1024 [ 186.389818][ T7949] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.479727][ T7949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.677092][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.028621][ T5781] Bluetooth: hci3: command tx timeout [ 187.145376][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 187.212120][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 187.219405][ T5763] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 187.276278][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.340170][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.424404][ T5763] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 187.446898][ T5763] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 187.465481][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.496093][ T5763] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 187.815114][ T3525] bond0 (unregistering): Released all slaves [ 188.035705][ T7864] chnl_net:caif_netlink_parms(): no params data found [ 188.077137][ T7964] loop2: detected capacity change from 0 to 512 [ 188.154752][ T7964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.194488][ T7964] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.403655][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.405825][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.488702][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.496023][ T7864] bridge_slave_0: entered allmulticast mode [ 188.540030][ T7864] bridge_slave_0: entered promiscuous mode [ 188.578535][ T5763] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 188.586817][ T5763] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 188.603053][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.628520][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.639065][ T7864] bridge_slave_1: entered allmulticast mode [ 188.647078][ T7864] bridge_slave_1: entered promiscuous mode [ 188.678457][ T5763] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 188.686800][ T5763] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 188.742639][ T7984] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 188.963806][ T7986] bond1: (slave gretap1): making interface the new active one [ 188.994501][ T7986] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 189.007426][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.041275][ T3525] IPVS: stop unused estimator thread 0... [ 189.055373][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.108684][ T5781] Bluetooth: hci3: command tx timeout [ 189.124176][ T7992] loop3: detected capacity change from 0 to 4096 [ 189.174926][ T7864] team0: Port device team_slave_0 added [ 189.212720][ T7864] team0: Port device team_slave_1 added [ 189.335296][ T7997] ipt_REJECT: TCP_RESET invalid for non-tcp [ 189.376671][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.428407][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.513115][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.551695][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.600200][ T8002] loop2: detected capacity change from 0 to 256 [ 189.606657][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.681325][ T5763] usb 6-1: USB disconnect, device number 4 [ 189.740006][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.948171][ T7864] hsr_slave_0: entered promiscuous mode [ 189.976842][ T7864] hsr_slave_1: entered promiscuous mode [ 189.994953][ T7864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.028227][ T7864] Cannot create hsr debugfs directory [ 190.172242][ T8010] loop3: detected capacity change from 0 to 128 [ 190.286900][ T5778] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.796849][ T8024] pim6reg1: entered promiscuous mode [ 190.804687][ T8024] pim6reg1: entered allmulticast mode [ 190.886808][ T8028] FAULT_INJECTION: forcing a failure. [ 190.886808][ T8028] name failslab, interval 1, probability 0, space 0, times 0 [ 190.905154][ T8028] CPU: 1 PID: 8028 Comm: syz.5.615 Not tainted syzkaller #0 [ 190.912560][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.922674][ T8028] Call Trace: [ 190.926022][ T8028] [ 190.929017][ T8028] dump_stack_lvl+0x18c/0x250 [ 190.933766][ T8028] ? show_regs_print_info+0x20/0x20 [ 190.939036][ T8028] ? load_image+0x420/0x420 [ 190.943593][ T8028] ? __might_sleep+0xe0/0xe0 [ 190.948284][ T8028] ? __lock_acquire+0x7d80/0x7d80 [ 190.953369][ T8028] ? trace_contention_end+0x39/0xe0 [ 190.958631][ T8028] should_fail_ex+0x394/0x4c0 [ 190.963371][ T8028] should_failslab+0x9/0x20 [ 190.967916][ T8028] slab_pre_alloc_hook+0x59/0x300 [ 190.972988][ T8028] ? mutex_lock_nested+0x20/0x20 [ 190.977977][ T8028] ? io_uring_alloc_task_context+0x18e/0x5c0 [ 190.983995][ T8028] __kmem_cache_alloc_node+0x53/0x250 [ 190.989408][ T8028] ? io_uring_alloc_task_context+0x18e/0x5c0 [ 190.995444][ T8028] kmalloc_trace+0x2a/0xe0 [ 190.999904][ T8028] io_uring_alloc_task_context+0x18e/0x5c0 [ 191.005739][ T8028] ? __asan_memcpy+0x40/0x70 [ 191.010370][ T8028] ? io_uring_show_cred+0x4d0/0x4d0 [ 191.015598][ T8028] ? alloc_file_pseudo+0x1ae/0x210 [ 191.020745][ T8028] __io_uring_add_tctx_node+0x34f/0x500 [ 191.026365][ T8028] ? __io_uring_free+0x200/0x200 [ 191.031335][ T8028] ? __might_fault+0xaa/0x120 [ 191.036048][ T8028] ? __anon_inode_getfile+0x16c/0x200 [ 191.041481][ T8028] io_uring_create+0xc03/0x1330 [ 191.046379][ T8028] __se_sys_io_uring_setup+0x29f/0x2b0 [ 191.051876][ T8028] ? __x64_sys_io_uring_setup+0x60/0x60 [ 191.057482][ T8028] ? lockdep_hardirqs_on+0x98/0x150 [ 191.062724][ T8028] do_syscall_64+0x55/0xb0 [ 191.067176][ T8028] ? clear_bhb_loop+0x40/0x90 [ 191.071906][ T8028] ? clear_bhb_loop+0x40/0x90 [ 191.076624][ T8028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.082567][ T8028] RIP: 0033:0x7ff60e59e159 [ 191.087041][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.106688][ T8028] RSP: 002b:00007ff60c7f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 191.115171][ T8028] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007ff60e59e159 [ 191.123170][ T8028] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000006aed [ 191.131167][ T8028] RBP: 00007ff60e63503b R08: 0000000000000000 R09: 0000000000000000 [ 191.139161][ T8028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.147158][ T8028] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe8240fca8 [ 191.155169][ T8028] [ 191.188920][ T5781] Bluetooth: hci3: command tx timeout [ 191.350903][ T7864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 191.384128][ T7864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 191.414095][ T7864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.434712][ T7864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.744648][ T5816] IPVS: starting estimator thread 0... [ 191.752564][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.802602][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.868493][ T8047] IPVS: using max 18 ests per chain, 43200 per kthread [ 191.883803][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.891093][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.954988][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.962275][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.253143][ T7383] ------------[ cut here ]------------ [ 192.255385][ T1146] ------------[ cut here ]------------ [ 192.259574][ T7383] WARNING: CPU: 1 PID: 7383 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 192.265309][ T1146] WARNING: CPU: 0 PID: 1146 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 192.265378][ T1146] Modules linked in: [ 192.265403][ T1146] CPU: 0 PID: 1146 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 192.265427][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.265443][ T1146] Workqueue: phy13 ieee80211_csa_finalize_work [ 192.265484][ T1146] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 192.265521][ T1146] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 192.265543][ T1146] RSP: 0018:ffffc900047ff9c0 EFLAGS: 00010293 [ 192.265569][ T1146] RAX: ffffffff8a127142 RBX: 0000000000000001 RCX: ffff888023af9e00 [ 192.265589][ T1146] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 192.265606][ T1146] RBP: dffffc0000000000 R08: ffff88802d48962f R09: 1ffff11005a912c5 [ 192.265626][ T1146] R10: dffffc0000000000 R11: ffffed1005a912c6 R12: 0000000000000001 [ 192.265644][ T1146] R13: ffff88802d48a659 R14: ffff88803105ad48 R15: ffff8880252c8500 [ 192.265664][ T1146] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 192.265687][ T1146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.265706][ T1146] CR2: 00007fcebbad6000 CR3: 0000000068d90000 CR4: 00000000003506f0 [ 192.265731][ T1146] Call Trace: [ 192.265741][ T1146] [ 192.265771][ T1146] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 192.265818][ T1146] ieee80211_csa_finalize+0x571/0xeb0 [ 192.277550][ T7383] Modules linked in: [ 192.287970][ T1146] ? mutex_lock_nested+0x20/0x20 [ 192.292259][ T7383] [ 192.299673][ T1146] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 192.309682][ T7383] CPU: 1 PID: 7383 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 192.309711][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.309728][ T7383] Workqueue: phy14 ieee80211_csa_finalize_work [ 192.315915][ T1146] ? ieee80211_csa_finalize_work+0x140/0x140 [ 192.323824][ T7383] [ 192.343155][ T1146] ? read_lock_is_recursive+0x20/0x20 [ 192.349263][ T7383] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 192.357178][ T1146] ieee80211_csa_finalize_work+0xf6/0x140 [ 192.357220][ T1146] ? process_scheduled_works+0x975/0x1600 [ 192.357260][ T1146] process_scheduled_works+0xa60/0x1600 [ 192.357339][ T1146] ? worker_attach_to_pool+0x370/0x370 [ 192.357382][ T1146] ? assign_work+0x3cc/0x5d0 [ 192.357424][ T1146] worker_thread+0xa5e/0xfe0 [ 192.357492][ T1146] kthread+0x2fa/0x390 [ 192.357519][ T1146] ? pr_cont_work+0x550/0x550 [ 192.357553][ T1146] ? kthread_blkcg+0xd0/0xd0 [ 192.357581][ T1146] ret_from_fork+0x48/0x80 [ 192.357613][ T1146] ? kthread_blkcg+0xd0/0xd0 [ 192.357643][ T1146] ret_from_fork_asm+0x11/0x20 [ 192.357698][ T1146] [ 192.357713][ T1146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.357725][ T1146] CPU: 0 PID: 1146 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 192.357748][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.357763][ T1146] Workqueue: phy13 ieee80211_csa_finalize_work [ 192.357803][ T1146] Call Trace: [ 192.357811][ T1146] [ 192.357820][ T1146] dump_stack_lvl+0x18c/0x250 [ 192.357854][ T1146] ? show_regs_print_info+0x20/0x20 [ 192.357884][ T1146] ? load_image+0x420/0x420 [ 192.357925][ T1146] panic+0x2ca/0x720 [ 192.357968][ T1146] ? bpf_jit_dump+0xd0/0xd0 [ 192.358016][ T1146] ? ret_from_fork_asm+0x11/0x20 [ 192.358056][ T1146] __warn+0x2e0/0x470 [ 192.358088][ T1146] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 192.358127][ T1146] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 192.358163][ T1146] report_bug+0x2be/0x4f0 [ 192.358192][ T1146] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 192.358228][ T1146] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 192.358270][ T1146] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 192.358304][ T1146] handle_bug+0xcf/0x120 [ 192.358344][ T1146] exc_invalid_op+0x1a/0x50 [ 192.358373][ T1146] asm_exc_invalid_op+0x1a/0x20 [ 192.358400][ T1146] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 192.358436][ T1146] Code: 48 89 df e8 a4 8e cd f7 e9 d6 fc ff ff e8 3a 0d 75 f7 eb 24 e8 33 0d 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 0d 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 0d 75 f7 48 8b 7c 24 08 4c 8b 74 [ 192.358458][ T1146] RSP: 0018:ffffc900047ff9c0 EFLAGS: 00010293 [ 192.358479][ T1146] RAX: ffffffff8a127142 RBX: 0000000000000001 RCX: ffff888023af9e00 [ 192.358496][ T1146] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 192.358508][ C1] ------------[ cut here ]------------ [ 192.358511][ T1146] RBP: dffffc0000000000 R08: ffff88802d48962f R09: 1ffff11005a912c5 [ 192.358528][ T1146] R10: dffffc0000000000 R11: ffffed1005a912c6 R12: 0000000000000001 [ 192.358518][ C1] WARNING: CPU: 1 PID: 7383 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 192.358545][ T1146] R13: ffff88802d48a659 R14: ffff88803105ad48 R15: ffff8880252c8500 [ 192.358572][ C1] Modules linked in: [ 192.358573][ T1146] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 192.358585][ C1] CPU: 1 PID: 7383 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 192.358608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.358622][ C1] Workqueue: phy14 ieee80211_csa_finalize_work [ 192.358636][ T1146] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 192.358652][ C1] [ 192.358657][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 192.358679][ T1146] ieee80211_csa_finalize+0x571/0xeb0 [ 192.358695][ C1] Code: f7 4c 89 ef e8 b0 9f b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 6b ba 79 f7 0f 0b e9 61 f8 ff ff e8 5f ba 79 f7 <0f> 0b e9 85 fb ff ff e8 53 ba 79 f7 48 c7 c7 e0 cc 65 8e 4c 89 e6 [ 192.358714][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 192.358717][ T1146] ? mutex_lock_nested+0x20/0x20 [ 192.358734][ C1] RAX: ffffffff8a0dc811 RBX: dffffc0000000000 RCX: ffff88802c368000 [ 192.358752][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.358753][ T1146] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 192.358767][ C1] RBP: 0000000000000000 R08: ffff88802c368000 R09: 0000000000000003 [ 192.358782][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807e6a2440 [ 192.358783][ T1146] ? ieee80211_csa_finalize_work+0x140/0x140 [ 192.358797][ C1] R13: ffff88805db8e424 R14: ffff88807e6a2930 R15: ffff88805db8e400 [ 192.358814][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 192.358822][ T1146] ? read_lock_is_recursive+0x20/0x20 [ 192.358842][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.358859][ C1] CR2: 00007ff60c7d4ff8 CR3: 0000000061048000 CR4: 00000000003506e0 [ 192.358862][ T1146] ieee80211_csa_finalize_work+0xf6/0x140 [ 192.358881][ C1] Call Trace: [ 192.358889][ C1] [ 192.358897][ T1146] ? process_scheduled_works+0x975/0x1600 [ 192.358898][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 192.358934][ T1146] process_scheduled_works+0xa60/0x1600 [ 192.358950][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 192.358993][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 192.359006][ T1146] ? worker_attach_to_pool+0x370/0x370 [ 192.359043][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 192.359047][ T1146] ? assign_work+0x3cc/0x5d0 [ 192.359084][ C1] __iterate_interfaces+0x225/0x4c0 [ 192.359088][ T1146] worker_thread+0xa5e/0xfe0 [ 192.359113][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 192.359143][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 192.359155][ T1146] kthread+0x2fa/0x390 [ 192.359175][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 192.359179][ T1146] ? pr_cont_work+0x550/0x550 [ 192.359205][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 192.359212][ T1146] ? kthread_blkcg+0xd0/0xd0 [ 192.359240][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 192.359239][ T1146] ret_from_fork+0x48/0x80 [ 192.359267][ C1] ? hw_scan_work+0xf10/0xf10 [ 192.359269][ T1146] ? kthread_blkcg+0xd0/0xd0 [ 192.359294][ C1] __hrtimer_run_queues+0x525/0xc10 [ 192.359296][ T1146] ret_from_fork_asm+0x11/0x20 [ 192.359346][ C1] ? hrtimer_interrupt+0x980/0x980 [ 192.359359][ T1146] [ 192.359371][ C1] ? read_tsc+0x9/0x20 [ 192.359549][ T1146] Kernel Offset: disabled