last executing test programs: 6.808810855s ago: executing program 3 (id=837): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x10, 0x101000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x8, "b546baa5cc590d30d4d8b40d29968173b959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r6, 0xffffffffffffffff}) close_range(r3, r4, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.964527209s ago: executing program 0 (id=844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010001000000000000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.824005299s ago: executing program 5 (id=845): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000004c0800000600000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="05f30400550300000905000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000008001000000010000a00700000035cf52530599b474"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51) close(0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) recvmsg(r4, &(0x7f0000003540)={0x0, 0x0, 0x0}, 0x40010000) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x401, 0x8000}, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="696b45c2", 0x4}, {0x0}, {0x0}, {0x0}], 0x4}, 0x4000005) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0e4}, 0x40004c0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(0xffffffffffffffff, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_route(r8, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b00000000001c001a801800028014000180080020000100000008001a"], 0x44}}, 0x0) 5.537912969s ago: executing program 0 (id=847): pipe2$watch_queue(0x0, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setresuid(0xee00, 0xee01, 0x0) setuid(0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x24, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1e2d}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) 4.39604885s ago: executing program 1 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) write(r0, &(0x7f0000000700)="ffffffffffffc011223344554305000f32000000000100112233445500112233445500ff0000", 0x26) 4.347562672s ago: executing program 0 (id=851): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback, r1, 0x2f, 0x2030, 0x4, @void, @void, @value=r2}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) 4.296133067s ago: executing program 5 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.065964513s ago: executing program 2 (id=854): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x400c000) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 4.065659203s ago: executing program 4 (id=855): unshare(0x20000400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, 0x0, 0x0) 3.92461504s ago: executing program 4 (id=856): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 3.902573811s ago: executing program 0 (id=857): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_pid(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r1, 0x0, 0x101d0) 3.826011317s ago: executing program 5 (id=858): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000006c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x30048010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fadbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006001702110000000000040016000800090005ac0f000800090001ac0f0004000b0011000700a3cb77a50cb6da18c85064704700000009000700c966fdab7900000004006e80"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r4, r3, &(0x7f00000000c0)=0xfff, 0x4) unshare(0x6a040000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) 3.745873422s ago: executing program 2 (id=859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000002000000008038110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055090100000000009500000000000000bf"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 3.723898494s ago: executing program 1 (id=860): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) 3.654586479s ago: executing program 4 (id=861): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bc375461caaa2f19936996c7096ffeeb030000000000006400", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643f38b6fa7e380ffeffffff0000fe09"}}}}}}}, 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r1, 0x0, 0x9400, 0x10132, 0x0, 0x0) 3.506794762s ago: executing program 1 (id=862): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 3.259340139s ago: executing program 1 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e0080000000ffffffffffff080271a9000008021100000000000000004000000000640001000500a3000000000008000c006400000008000d"], 0x5c}}, 0x0) 3.122002926s ago: executing program 5 (id=864): pipe2$watch_queue(0x0, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setresuid(0xee00, 0xee01, 0x0) setuid(0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x24, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1e2d}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) 2.992672763s ago: executing program 3 (id=865): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) 2.84453779s ago: executing program 3 (id=866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.802833846s ago: executing program 3 (id=867): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) 2.675343561s ago: executing program 0 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.656842743s ago: executing program 4 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b160008000000000000020000085800048028000180080001006f7366001c00028008000140000000040500020000000000080003400000000110000180090001006d617371000000001c000180090001007866726d000000000c00028008000440000000010900010073797a30000000000900020073797a32000000"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 2.371706623s ago: executing program 3 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, 0x0, {0xfff2}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x9a, 0xbc}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1}, 0x24048004) 1.922310675s ago: executing program 2 (id=871): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002400010027bd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x400c000) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 1.874852414s ago: executing program 0 (id=872): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="afa95f9cab972040eb9fc46ce566bc4486ba9a6989c0bcbc795394ff2d899681dbd0ed518553fdd737cf7cab81a48db6f37ceb751a4215755dfa881b23653a6adee02280713c97c4c2337acc38d8dba2777d97f0f3a7d4e2af5e3e3d1ba6b3b729b1082f1d55cd2d183b7846d0af750ead5f2877c4fd370bb62ef882b9e0dd6aed80295d4b2ba6a08289bfcfb55e320cb2caf5a6f91228a873087a9e00e2f5ad602a07c18de258a04d36d2e3b0f0b870e59183d63fb115b871bc6a89207f588d949b52ffac44128ba019113a77f2fac987603480363031eb8005cd60c15837354e5ef4ae098636321e48b419f8ba3edb2318af88fbf18ab51a523a303863468c45714743cdb0d6decaedff7a9b47ff1231408632fdffbfcf403cb27bb7385ebe81058d44940da7da7affe020e411516c829ee69885c3a10367f0f7b3ccbd05e1ff9ca570ba15a166be4afa64df7d8bddd19cbf2f0f2117b13569fe5ac12c82caaa3102209f48eb2040bc5e200eca176bf219e7a745b5d25ca0c899bc8b5695b15d6cc83c8966f77d35c90c819d465ead79bb584690d68ea083e6d7a1b6d2c393c21a1d601f98b6d45f59160e610d9cb3f84d152061ab136f8ca7ce57587a69f1576b0539ca9694da65de323861c262395d7106c08f5c1fda6b3df676f09d7311791e1bd5927229faf9b047db8afab569a9ca319888e4b4690054c0e0caf886f7773ed7453bb8a13e857524ef57d54b405751f26090ab906625b43efbde3f9e46a9d11c93cf0121f410bb0f09083c7f7118d7c7f057b57f800a8d36b4f214d694bcde0330b27adea2bc02095f9eb1941c0f3b5cd0fe682f3ee784cf04cc45a23a8631386ac72f620351fad5e4c17e700985459a8ce15c056474d4bc8caaa54cf23be06a6dfb428c0a2c1d731a60180c882e48e2e27f9edb5478bee530e6d8b13d8d9c3cca83279a50d3fdb30f7a91743a11590a1008f47b65339e9732b415c5c664007c33762fd82cab04ee9f07ce89175080e3ca3701a14b085d60eb193e2c4fba87cf51eb36fda2642b0dabd523aa26dc6ec415e8bb1a9d03734f47be7fa81593b18cbf7be085019fd33771d082696b89fa1417f7507013fbeffe456eb062dfdbaa519ea5a236308037eeb5eed80926a6dd5152c400eca2fade1cd0614072cdcf0c85d1778ee79dc8bfa62e6f30f0faac6c67ff223d2ff8f4f73441c2e53eda8d577e2a81d447fa2ce7ff6a4ccc57d37b0d63356a86ffa23f03758d1d1f3cf20e12892f9988377f6354f4a09efc11cf902179ef309d46f4fa24d040d765fa0c25d4b99cf820059a9f7222c4ad71b582d94dcb4bec9bd8d0bad258753cfc5c1f6b147aaa59f314bb2291bfa5fdcc80b8e04ca8c2e8488c79f444c179f59d7fe68419bc6c312e7fd71415dffd3178eca60b13ce5f2879d780883ccdc37e98b66c40f9cee4ae9e8f79f61982b1545b33a063a9d2ed6a8e5011a96d2b90eb3a74c1d78f34dfad8c2ad6f12d276007d1e9c051e16ae1fbc57da26e76addf5261ea8244c2b3e3c5edfbe55341b9a6ca17a91c9701a40db62bf7e8f1889f7127f528683883b2a2b8c47bb46e19e78c170d25962b7fb80ed5113a6cae6ae2ddaaea1301a497a133368c7b105e4e0c7eca9c9055cad603e1e41808420d9a09e7b57490cead94522b6a0f3f03f604836ff16c82094782a4b705285fec1e6e77ef0a4fab3cb411b8927b4e9e29cb8fb619f3ad05e26506a05b075e578890de1e6a4b49bebc984ab9a3057553b896675f21920125ae2f66fc3b0b0d83f895f945c5d5e2b57a4247de5186c3caaa7e3c4c4755f3d2c7c64a0ad6d82904c3188e4c37c71a2297a1e0dc481d43bafc16970d335f7552c541bb596be14ed733345118419e3420a44720335517f867e2cd7c228202fc87c6f109d89b9fdf8afe59a3887826722d3cce23c11fee3b2d97bc29f970f49161b1634d9ba9f328d776a36c5e553c79ec00417d1e5db10c42bba39d1fd0b5b311b9dff6ea6533232f75ee7a1e6ebe3c695f614fa77a6fccb6d001b3c97817a66e3c3a15947468990834fb2a45455430461060c6ac258b4d228bd31ed9c3bc6122264a174722197bf1dd2d401cd33930a014f4ee353ae33edebbdd857fbc665c184fdd123aea414b694ddd66a837878c0d4b82e803f45c11a7226bb8bef2378b658ec80e93caec5f94847cd7b18844b2123edc40f563c9ede52654d733490347d202e449a2c491a9bcae41d71102d0df5bd6defd278b9a6025eb48134f4ab98bdb2cb715805bcfee79f01e9a3fa01bb969c7c0bfed86392e598118dc54ddd4591390e6a0112cae3f4dd705e8bae5aa68523940982c48351effc8a4cbcd662626393ee2ab5e1a232faeb132517d7132a035557c92daaf532f0983b6a821e98667590161065d5da666b5a759a025f06e3f0ea7c0edb84c38e44d764de2b65c537ac7719018d58137c6b9d0f5b6fb83aecf63c7beeb4b7eaf948b4f2c3abfe670c9856aebf7cf1a52ec80eb4243fbb970eb94d19bd6e4f1a86f55e76c3431f62bc6e42f3da4f9804e5f5160d699a30a9655cd279f091cbbfdc691e3a8c842e3c719a080a00e188b895f1333f1a5364a9478457c9bfcc12176750473427e93c2036a4d9eeda739e4625216a0f9a304f68d8a3dda3933981d59bbe58ed9252d6e061e749567071e9999f82c6ae29494ed813012ca96c5af3df1711064131bf7f6f1b470c2e92f6f683b646f121b195afc2d93f49a040d970c52331abd0c6c9b47ca815e150176128a117c2d55d47f6eb967265e542d798fde2d63263e21475cb3a4272522254c99d3fd72d153101981d0f172f55b96ab750f5bf1e3ac37f3d63f7a08eeae76868e79825d6d1487b136c08942bea9507ea1de097aca4ba97d23d929e7ba92723fe708bd819e1e5f83daa03366db78a4a63e01b4498a97a62acae91af71b794d2b563f46d1e56aa7652a650a1231e8a3b9890968b6a030072ad5d65f89667ab67f3b9fdd53fa8330a8dbac11e17d87882ef2a2323fb9bed881301241107340ce96444040c574a38010b093fdce2c075f5466b21d16d0ddf32646a72c5d70082d60b39563464943ae1663c9f8d5fe12867ad92c177c3b8014ebf8b6d30c911c259e6ebdf89b476907c6f777748297df71d0648c7a2f166cf6ef39d88127e64cda67a8e860463f7a1cf5a06f438ac8374ed38be7aa025a8b38bb82d409310a21a4ccc974d8ffbcb0125e19107d5cb34dc999b53c2ab4afea86b9516c1506d49859a4aeab61c023ec342fe57ddb8aed17f018a69cb01622c30fcec3e947f35394c5dc8b8b78022c41f4f9a4915baa0ff0fb84f2100f3c88e0ed56348d2cc8fd7c66534e155995f15f1777f45b404a813695096cbb8b323a66b8619e0672f610bb2c82af4102849f8f587b8bc6670f371349eb514207d1a81c6cc3f378ad9d4fcd1578dff0123149c1822a71db1f71da0c05ef82290a68ba8bc241d967344573ebbac05f3b7e2d1d352419e2854110e6cb4fbdbcc879de29208e3535fe95e817fee6906afe84a69af8018adcbb0894f17d118aa59a5970aa539513eb9124b44db166be3cc64b191576a493b8af67fdcb0e2f3bd81ca8f2bcc91caea6e491dc72b5c3db24c7b85709836af573b892745a0212e882db0e88ff443391e28aa401ac13648aeca40f816a33dd919eb45b3c4fe93f3bece67c5bae6434cb391f994a5986778afe746e7d510f912316becfea724efb0831578f24e09adc3a501d42fbddf3767c12293c2a519aea9301d16d4e6fb4616a84638b8c1c45ba2365a6bd8389843ea02a9814ec3b4f829628fd8ade85f3869e8248a7b26250ec5800d06486ec908c408f5f7d05ecea339eeeea48b1cdfc19ac63927b37ecf5b7542c2395b551b56194fefc8ded81aa303fc932cdc1ef77534d43881454848e1f47310918799c1fdec51f09e1a3b45969f9dde46722c6d42c3fea5343879a2a629c4a8bbcf91af1ad9ef8d1b7ef5cc49014251a6629bbe38628689ef6cfc40072a4cdf4e079c03569bad1e2214d021b39d40026156d38fbe6ef7196a7690da2ee5f65a8e6665ef4b509b0c5e6390bc1c24edbb67c4d9722202cc628291d68d7c8e38f2bc4a383cbf2a9b39317b21014c9c2b82ca72f13ce0b1c19c2405fed6169ad7d49c5c0e23491edf6fc65b7cd103f5fb4c150cd73850930b03ad49ccd28a5b62354c6885bec47d4b4dcdd981179c7e0b4411ae5bc819af9fb1a92b76ca54bd2a560e1596cf97fc8ee65171bc74571421b9333cdc89ba0b3d705cd350aee6d24b876d01d8f04f0323d55ba5e1606b89023507bf286a10f61ee2a719b2e769a42601129db0e80948b7b698161bcbe4344228c9ca2c469af696671afe00febfac512ba027e28a273f026ec4591c8c58a4f5fd588d2f7d2bf0e552a53cca0982f256625da621e9fb923b6bcb0bce0b136a60fcda6b1748d2f8e2559b7a203276f69336d93ef025afe44f37f8033a0d3cc3b9c22a01ea595b47485c11c17f744a6ac4c5d2e53427758f7c02844aa92cbf20862d98515aa22707ed37358141b02db787e4e0ba954eb0f07a51eb825ab5f4cbb75f33f39d657f5792c4300be32eeb418fdf63cf8d832fdac233844e45257384da412af500ece64042c79f233618168d7e9d816bc51073bcb4cecf209848c8495224355561115a3727be4071caf025fb96187d6678313e29fc06b305e856214882da8c3f7d7282df71ef6a16e5774136f68b841ee5726fead65f35f318a402ac3f8df7cf2f67befb7793b41c920e70dbb58784f25f1d597df1736ce07250a910c09cd48a1374adfa477fa434be6424e8132cbc7c0a2222b2860dc481467933b95839a964fd2888266e2ea4e443313779a307d9c61540f508557a7ca0c323118a6d262ca664f2966c98e6792514d802a58b0483fe409602c2043b9ac63d5de51b72ffb9ba2cc7417d530ce3b20fd7442dce73997c205c900a80c44f611d3fcb06c45a5264fc6e44f166f64983245bb05b6966ad29285a0bb5a019231bf43a0e01c9839a68a415a38ec062188bf322a43a8eae9cbb04358ea584f597c189577e313fa7b6c93e81e0cdeb953239d03d035bae90f0130f057f11c5c351168b3c8b62e039b850a8af8dad6b33328691ff765e23ac9fd0bf7e7ae2c0c339a57cfd878300cd36bd5c70137850989d1fd7dc04df11e33a85622cbd65b0df85b00092a87710dcf6d8b2a528b929a0fbd58ff62594e508619bef14679a953287c170abd62d770b94f9433141da5b0aa73b0b761567eccacc4e806084d1d863f2472038427392656f9b47139ee5279fb5caf8b44478424c2ea9dfdcab90b55b002dcf4cab0dfff87583c58b93e866a295bed5579a8fdc973f969c61edc103fb40f2afd38c4678f1b7f7db5f51e8fcd59a64dc21f185f6aa3e3fb755162dd0abe47341e7fe6b89b2922a20738d1179b5017ae064a90e10a367345c6e6ca2f16fe3776f43c1ed9cc995f10fe555b1d964f6872ea1ba0a0071a58d711c6c326c2a53cadf6a48d87268f1f0e219b592910134f495a2f91d9b7e33befe8a9a0f7f13ae7575f92497b9ae12a807e4fc3f551ae66b2741c99ef294fbdc5b229fff185fa4047992925512dcc790f39e0fdf2e494f19cfe1879bb4fbfde4169cbf335dc7fb299bb496e604b144dfb33e6adc417ca8a0ab451055904ed169cd69d624e2ec20fc443c7dacb1ebb12bd2680309cf6a3f535ef6b64e05c9ce9ac4ca83f952d79488e1e6d207a5f93da48932d", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x315d030, 0x0, 0x40, 0x0, &(0x7f0000000100)) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.857506788s ago: executing program 4 (id=873): sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffe23, &(0x7f0000000000)={&(0x7f0000000080)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x37, 0x2, 0x0, 0x0, "887a41907e1be3268a47da93030e9c45f9125d08e5f3c28d2bb0824905477177f6802e781634f265b385fbbdee3873e390d02ac14300"}, 0x48}, 0x1, 0x0, 0x0, 0x20008050}, 0x8000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x3000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xe4}}, 0x0) 1.585628696s ago: executing program 5 (id=874): socket$inet(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x20}, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x1, {0x1, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x23fd, 0xa334, 0x1, 0x0, 0x0) 1.486643437s ago: executing program 1 (id=875): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xff7b, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff2086dd000011000aac14140ce000006a49e832f0", 0x0, 0x2000028e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.485649298s ago: executing program 2 (id=876): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x30048010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fadbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="0a0006001702110000000000040016000800090005ac0f000800090001ac0f0004000b0011000700a3cb77a50cb6da18c85064704700000009000700c966fdab7900000004006e80"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r6, r5, &(0x7f00000000c0)=0xfff, 0x4) unshare(0x6a040000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) 1.439310528s ago: executing program 3 (id=877): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x10, 0x101000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x8, "b546baa5cc590d30d4d8b40d29968173b959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r6, 0xffffffffffffffff}) close_range(r3, r4, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.206052047s ago: executing program 1 (id=878): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) shutdown(r0, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) 336.855208ms ago: executing program 2 (id=879): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x2eb5, 0x30}, 0xc) r1 = dup(r0) write$make_it_fail(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) 214.9701ms ago: executing program 4 (id=880): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_pid(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r1, 0x0, 0x101d0) 214.606149ms ago: executing program 5 (id=881): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bc375461caaa2f19936996c7096ffeeb030000000000006400", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643f38b6fa7e380ffeffffff0000fe09"}}}}}}}, 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r1, 0x0, 0x9400, 0x10132, 0x0, 0x0) 0s ago: executing program 2 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x20, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 76.394993][ T5597] cgroup: Unknown subsys name 'net' [ 76.532770][ T5597] cgroup: Unknown subsys name 'cpuset' [ 76.539559][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.167865][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.816944][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.830715][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.832431][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.833035][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.835141][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.835923][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.836715][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.837287][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.850726][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.851462][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.851961][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.853171][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.854043][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.920179][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.920907][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.976423][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.980971][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.989871][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.003514][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.004450][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.034398][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.041537][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.051518][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.053382][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.053866][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.055054][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.056034][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.063233][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.067463][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.068147][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.907695][ T5612] Bluetooth: hci2: command tx timeout [ 82.987895][ T4927] Bluetooth: hci1: command tx timeout [ 82.988116][ T5612] Bluetooth: hci0: command tx timeout [ 83.067757][ T5612] Bluetooth: hci3: command tx timeout [ 83.147294][ T4927] Bluetooth: hci4: command tx timeout [ 83.147655][ T5612] Bluetooth: hci5: command tx timeout [ 83.452609][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.452783][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.452930][ T5608] bridge_slave_0: entered allmulticast mode [ 83.455156][ T5608] bridge_slave_0: entered promiscuous mode [ 83.546778][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.546943][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.547769][ T5608] bridge_slave_1: entered allmulticast mode [ 83.550700][ T5608] bridge_slave_1: entered promiscuous mode [ 83.673848][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.758441][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.856975][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.857540][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.857714][ T5622] bridge_slave_0: entered allmulticast mode [ 83.859969][ T5622] bridge_slave_0: entered promiscuous mode [ 83.882234][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.882353][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.882812][ T5614] bridge_slave_0: entered allmulticast mode [ 83.884874][ T5614] bridge_slave_0: entered promiscuous mode [ 83.889505][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.889626][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.889775][ T5614] bridge_slave_1: entered allmulticast mode [ 83.892329][ T5614] bridge_slave_1: entered promiscuous mode [ 83.951264][ T5608] team0: Port device team_slave_0 added [ 83.966022][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.966460][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.966821][ T5622] bridge_slave_1: entered allmulticast mode [ 83.969816][ T5622] bridge_slave_1: entered promiscuous mode [ 84.000443][ T5608] team0: Port device team_slave_1 added [ 84.044906][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.123173][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.124281][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.124298][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.124335][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.136121][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.136577][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.138640][ T5616] bridge_slave_0: entered allmulticast mode [ 84.140927][ T5616] bridge_slave_0: entered promiscuous mode [ 84.150235][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.229699][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.229721][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.229754][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.246768][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.246914][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.247188][ T5616] bridge_slave_1: entered allmulticast mode [ 84.251207][ T5616] bridge_slave_1: entered promiscuous mode [ 84.276629][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.289772][ T5614] team0: Port device team_slave_0 added [ 84.355684][ T5614] team0: Port device team_slave_1 added [ 84.395570][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.419958][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.419976][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.419999][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.433007][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.435807][ T5622] team0: Port device team_slave_0 added [ 84.440281][ T5622] team0: Port device team_slave_1 added [ 84.507903][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.507925][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.507967][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.533806][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.533830][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.533868][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.600328][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.600348][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.600397][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.620860][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.620993][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.621422][ T5609] bridge_slave_0: entered allmulticast mode [ 84.624068][ T5609] bridge_slave_0: entered promiscuous mode [ 84.638804][ T5608] hsr_slave_0: entered promiscuous mode [ 84.640182][ T5608] hsr_slave_1: entered promiscuous mode [ 84.663511][ T5616] team0: Port device team_slave_0 added [ 84.691655][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.691779][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.691923][ T5609] bridge_slave_1: entered allmulticast mode [ 84.695477][ T5609] bridge_slave_1: entered promiscuous mode [ 84.747894][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.751932][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.754710][ T5616] team0: Port device team_slave_1 added [ 84.755077][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.755187][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.755614][ T5621] bridge_slave_0: entered allmulticast mode [ 84.762464][ T5621] bridge_slave_0: entered promiscuous mode [ 84.867530][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.867637][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.867765][ T5621] bridge_slave_1: entered allmulticast mode [ 84.870421][ T5621] bridge_slave_1: entered promiscuous mode [ 84.918828][ T5609] team0: Port device team_slave_0 added [ 84.966182][ T5614] hsr_slave_0: entered promiscuous mode [ 84.967699][ T5614] hsr_slave_1: entered promiscuous mode [ 84.968529][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 84.968615][ T5614] Cannot create hsr debugfs directory [ 84.978362][ T5622] hsr_slave_0: entered promiscuous mode [ 84.979872][ T5622] hsr_slave_1: entered promiscuous mode [ 84.980730][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 84.980751][ T5622] Cannot create hsr debugfs directory [ 84.984761][ T5609] team0: Port device team_slave_1 added [ 84.985567][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.985582][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.985612][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.989858][ T5612] Bluetooth: hci2: command tx timeout [ 85.041033][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.041055][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.041095][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.067581][ T4927] Bluetooth: hci1: command tx timeout [ 85.067677][ T5612] Bluetooth: hci0: command tx timeout [ 85.067899][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.067915][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.067945][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.076619][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.150474][ T5612] Bluetooth: hci3: command tx timeout [ 85.190826][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.190850][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.190887][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.194486][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.227439][ T4927] Bluetooth: hci4: command tx timeout [ 85.227537][ T5612] Bluetooth: hci5: command tx timeout [ 85.386312][ T5621] team0: Port device team_slave_0 added [ 85.444889][ T5621] team0: Port device team_slave_1 added [ 85.473336][ T5616] hsr_slave_0: entered promiscuous mode [ 85.474605][ T5616] hsr_slave_1: entered promiscuous mode [ 85.475550][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 85.475572][ T5616] Cannot create hsr debugfs directory [ 85.505490][ T5609] hsr_slave_0: entered promiscuous mode [ 85.506424][ T5609] hsr_slave_1: entered promiscuous mode [ 85.507048][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 85.507547][ T5609] Cannot create hsr debugfs directory [ 85.712240][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.712262][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.712290][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.788325][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.788352][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.788381][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.017326][ T5621] hsr_slave_0: entered promiscuous mode [ 86.018229][ T5621] hsr_slave_1: entered promiscuous mode [ 86.018830][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 86.018852][ T5621] Cannot create hsr debugfs directory [ 86.121242][ T2063] cfg80211: failed to load regulatory.db [ 86.156582][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.170975][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.171946][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.176894][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.220165][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.223527][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.224769][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.243394][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.400813][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.413901][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.414945][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.426637][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.431941][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.451874][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.461711][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.469326][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.571237][ T5616] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.575206][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.576518][ T5616] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.591938][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.594999][ T5616] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.607837][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.626208][ T5616] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.632880][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.730143][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.750088][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.756441][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.764021][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.765040][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.776247][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.785300][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.803314][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.850186][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.946973][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.959614][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.977399][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.981742][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.982708][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.989710][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.022833][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.031016][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.031452][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.039938][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.067362][ T5612] Bluetooth: hci2: command tx timeout [ 87.111218][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.111342][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.147384][ T4927] Bluetooth: hci1: command tx timeout [ 87.147524][ T5612] Bluetooth: hci0: command tx timeout [ 87.152866][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.170610][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.170725][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.208373][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.216006][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.220540][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.232301][ T5612] Bluetooth: hci3: command tx timeout [ 87.232399][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.260060][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.263986][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.266955][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.267187][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.291970][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.295195][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.311618][ T4927] Bluetooth: hci4: command tx timeout [ 87.311709][ T5612] Bluetooth: hci5: command tx timeout [ 87.316326][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.326681][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.326844][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.416323][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.446165][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.504036][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.504122][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.564609][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.564721][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.599199][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.652164][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.652276][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.760776][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.760906][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.835073][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.989976][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.035189][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.038244][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.038369][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.102352][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.102492][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.181843][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.253026][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.253141][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.350000][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.350120][ T3323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.914502][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.151752][ T5612] Bluetooth: hci2: command tx timeout [ 89.152031][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.227452][ T4927] Bluetooth: hci1: command tx timeout [ 89.227508][ T5612] Bluetooth: hci0: command tx timeout [ 89.258655][ T5608] veth0_vlan: entered promiscuous mode [ 89.311190][ T5612] Bluetooth: hci3: command tx timeout [ 89.383227][ T5608] veth1_vlan: entered promiscuous mode [ 89.387407][ T4927] Bluetooth: hci4: command tx timeout [ 89.387455][ T5612] Bluetooth: hci5: command tx timeout [ 89.534979][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.654543][ T5608] veth0_macvtap: entered promiscuous mode [ 89.690292][ T5608] veth1_macvtap: entered promiscuous mode [ 89.760279][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.886724][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.946306][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.058268][ T5614] veth0_vlan: entered promiscuous mode [ 90.098079][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.099301][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.099359][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.099407][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.186967][ T5614] veth1_vlan: entered promiscuous mode [ 90.513954][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.543158][ T5614] veth0_macvtap: entered promiscuous mode [ 90.562904][ T3262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.562937][ T3262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.583620][ T5614] veth1_macvtap: entered promiscuous mode [ 90.611223][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.628094][ T5622] veth0_vlan: entered promiscuous mode [ 90.665417][ T3291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.665447][ T3291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.716268][ T5622] veth1_vlan: entered promiscuous mode [ 90.749588][ T5608] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.757052][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.832476][ T5616] veth0_vlan: entered promiscuous mode [ 90.890592][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.914986][ T5616] veth1_vlan: entered promiscuous mode [ 90.960068][ T5621] veth0_vlan: entered promiscuous mode [ 91.021577][ T3291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.036977][ T5622] veth0_macvtap: entered promiscuous mode [ 91.047858][ T5609] veth0_vlan: entered promiscuous mode [ 91.060794][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.062374][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.069828][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.111721][ T5622] veth1_macvtap: entered promiscuous mode [ 91.126847][ T5621] veth1_vlan: entered promiscuous mode [ 91.195423][ T5609] veth1_vlan: entered promiscuous mode [ 91.212761][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.224778][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.224800][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.244425][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.264103][ T5616] veth0_macvtap: entered promiscuous mode [ 91.305741][ T5616] veth1_macvtap: entered promiscuous mode [ 91.324772][ T3262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.356390][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.356417][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.406160][ T5621] veth0_macvtap: entered promiscuous mode [ 91.448278][ T3262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.456788][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.482138][ T5621] veth1_macvtap: entered promiscuous mode [ 91.531656][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.541924][ T3262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.561067][ T5609] veth0_macvtap: entered promiscuous mode [ 91.654180][ T5609] veth1_macvtap: entered promiscuous mode [ 91.682947][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.682974][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.722741][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.769266][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.769357][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.769404][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.769450][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.769500][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.829437][ T5849] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7'. [ 91.893376][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.003422][ T3291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.003449][ T3291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.030543][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.101207][ T3262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.136243][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.380477][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.381510][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.536001][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.536028][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.618487][ T3291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.618551][ T3291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.618598][ T3291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.619134][ T3291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.619181][ T3291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.850649][ T3291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.850675][ T3291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.023165][ T3262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.023194][ T3262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.256791][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.256821][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.352828][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.352856][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.456745][ T5872] FAULT_INJECTION: forcing a failure. [ 93.456745][ T5872] name failslab, interval 1, probability 0, space 0, times 1 [ 93.456787][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: syz.5.6 Not tainted syzkaller #0 PREEMPT(full) [ 93.456816][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 93.456839][ T5872] Call Trace: [ 93.456849][ T5872] [ 93.456860][ T5872] dump_stack_lvl+0xe8/0x150 [ 93.456905][ T5872] should_fail_ex+0x410/0x560 [ 93.456946][ T5872] should_failslab+0xa8/0x100 [ 93.456983][ T5872] __kvmalloc_node_noprof+0x176/0x820 [ 93.457014][ T5872] ? __nf_register_net_hook+0x232/0x930 [ 93.457044][ T5872] ? nf_hook_entries_grow+0x287/0x740 [ 93.457073][ T5872] ? nf_hook_entries_grow+0x287/0x740 [ 93.457107][ T5872] nf_hook_entries_grow+0x287/0x740 [ 93.457143][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.457182][ T5872] __nf_register_net_hook+0x2c9/0x930 [ 93.457223][ T5872] nf_register_net_hook+0xb2/0x190 [ 93.457253][ T5872] nf_register_net_hooks+0x44/0x1b0 [ 93.457284][ T5872] ip_vs_register_hooks+0xce/0x150 [ 93.457320][ T5872] ip_vs_add_service+0x94c/0x2040 [ 93.457362][ T5872] ? __entry_text_end+0xfdf37/0x102039 [ 93.457393][ T5872] ? lock_acquire+0x115/0x350 [ 93.457427][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.457460][ T5872] ? ip_vs_add_service+0x1f5/0x2040 [ 93.457510][ T5872] ? rcu_read_unlock+0x87/0xa0 [ 93.457555][ T5872] do_ip_vs_set_ctl+0x8ce/0xaf0 [ 93.457605][ T5872] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 93.457658][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.457711][ T5872] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.457753][ T5872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.457792][ T5872] nf_setsockopt+0x26f/0x290 [ 93.457835][ T5872] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 93.457867][ T5872] do_sock_setsockopt+0x17c/0x1b0 [ 93.457907][ T5872] __x64_sys_setsockopt+0x13d/0x1b0 [ 93.457947][ T5872] do_syscall_64+0x166/0x520 [ 93.457976][ T5872] ? trace_irq_disable+0x3b/0x140 [ 93.458004][ T5872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.458038][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.458066][ T5872] RIP: 0033:0x7f799d99e159 [ 93.458089][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.458115][ T5872] RSP: 002b:00007f799bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 93.458143][ T5872] RAX: ffffffffffffffda RBX: 00007f799dc25fa0 RCX: 00007f799d99e159 [ 93.458162][ T5872] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000004 [ 93.458178][ T5872] RBP: 00007f799da3503b R08: 000000000000002c R09: 0000000000000000 [ 93.458195][ T5872] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 93.458212][ T5872] R13: 00007f799dc26038 R14: 00007f799dc25fa0 R15: 00007ffdc5798358 [ 93.458252][ T5872] [ 93.673051][ T3291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.673077][ T3291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.240290][ T5891] ======================================================= [ 94.240290][ T5891] WARNING: The mand mount option has been deprecated and [ 94.240290][ T5891] and is ignored by this kernel. Remove the mand [ 94.240290][ T5891] option from the mount to silence this warning. [ 94.240290][ T5891] ======================================================= [ 94.278634][ T5891] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 94.903595][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.904663][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.592787][ T5901] loop0: detected capacity change from 0 to 512 [ 95.602841][ T5901] EXT4-fs: Ignoring removed orlov option [ 95.718527][ T5901] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.718622][ T5901] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 95.718669][ T5901] EXT4-fs (loop0): group descriptors corrupted! [ 97.428524][ T5746] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.953825][ T5746] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 98.071182][ T5746] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 98.071242][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.142435][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.183847][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.247039][ T5912] loop0: detected capacity change from 0 to 128 [ 98.343919][ T5916] loop1: detected capacity change from 0 to 512 [ 98.394171][ T5746] usbhid 4-1:1.0: can't add hid device: -71 [ 98.394286][ T5746] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 98.406683][ T5912] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.417861][ T5912] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.473562][ T5916] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 98.474471][ T5916] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.24: invalid indirect mapped block 2683928664 (level 1) [ 98.474671][ T5916] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.477167][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 98.477191][ C0] EXT4-fs (loop1): initial error at time 1789140154: ext4_free_branches:1023: inode 13 [ 98.477226][ C0] EXT4-fs (loop1): last error at time 1789140154: ext4_free_branches:1023: inode 13 [ 98.558900][ T5916] EXT4-fs (loop1): 1 truncate cleaned up [ 98.565803][ T5746] usb 4-1: USB disconnect, device number 2 [ 98.602362][ T5916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.672267][ T5922] loop3: detected capacity change from 0 to 512 [ 99.292405][ T5922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.292537][ T5922] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.556127][ T5930] loop5: detected capacity change from 0 to 512 [ 99.557728][ T5930] EXT4-fs: Ignoring removed nobh option [ 99.576164][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.622815][ T5930] EXT4-fs (loop5): 1 truncate cleaned up [ 99.662246][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.679931][ T5930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.895849][ T5608] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.932731][ T5880] geneve2: entered promiscuous mode [ 99.932762][ T5880] geneve2: entered allmulticast mode [ 100.320802][ T5942] loop3: detected capacity change from 0 to 512 [ 100.334282][ T5942] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.049355][ T5942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.049493][ T5942] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.325775][ T31] audit: type=1800 audit(1789140157.478:2): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.26" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 101.454583][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.582475][ T5962] loop1: detected capacity change from 0 to 512 [ 101.600231][ T5962] EXT4-fs: Ignoring removed i_version option [ 101.600258][ T5962] EXT4-fs: Ignoring removed nobh option [ 101.604191][ T5962] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.604209][ T5962] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.658696][ T5962] EXT4-fs (loop1): 1 truncate cleaned up [ 101.665044][ T5616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.665254][ T5963] loop2: detected capacity change from 0 to 512 [ 101.704945][ T5966] loop4: detected capacity change from 0 to 1024 [ 101.711002][ T5962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.730753][ T5966] ext4: Unknown parameter 'ba' [ 101.769956][ T5963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.770294][ T5963] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.899744][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.063752][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 102.063795][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.40'. [ 102.139431][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.288593][ T5984] batman_adv: batadv0: Adding interface: syzkaller0 [ 102.288616][ T5984] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.288651][ T5984] batman_adv: batadv0: Interface activated: syzkaller0 [ 102.351162][ T5988] loop2: detected capacity change from 0 to 512 [ 102.384756][ T5988] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.44: inode has both inline data and extents flags [ 102.384797][ T5988] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.387122][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 102.387147][ C1] EXT4-fs (loop2): initial error at time 1789140158: ext4_orphan_get:1403: inode 15 [ 102.387182][ C1] EXT4-fs (loop2): last error at time 1789140158: ext4_orphan_get:1403: inode 15 [ 102.428410][ T5988] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.44: couldn't read orphan inode 15 (err -117) [ 102.428584][ T5988] loop2: lost filesystem error report for type 5 error -117 [ 102.452416][ T5988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.478863][ T5983] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 102.549107][ T5983] batman_adv: batadv0: Removing interface: syzkaller0 [ 103.729009][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.073933][ T6009] capability: warning: `syz.5.50' uses deprecated v2 capabilities in a way that may be insecure [ 106.310797][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 106.310826][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 106.435685][ T6036] vxcan3: entered promiscuous mode [ 106.435716][ T6036] vxcan3: entered allmulticast mode [ 108.767219][ T980] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.807767][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 109.808519][ T980] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.809735][ T980] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 109.809788][ T980] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.809815][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.809843][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.811479][ T980] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.811529][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.472927][ T980] usb 2-1: GET_CAPABILITIES returned 0 [ 111.472983][ T980] usbtmc 2-1:16.0: can't read capabilities [ 111.534258][ T980] usb 2-1: USB disconnect, device number 2 [ 112.811426][ T6095] ip_tables: iptables: counters copy to user failed while replacing table [ 113.556819][ T6095] netlink: 'syz.4.80': attribute type 16 has an invalid length. [ 113.556847][ T6095] netlink: 'syz.4.80': attribute type 17 has an invalid length. [ 113.682828][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 113.737674][ T6095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.746119][ T6095] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.829441][ T6095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.849791][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 114.141971][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.157926][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.205759][ T6095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.205790][ T6095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.260341][ T6095] veth1_vlan: left promiscuous mode [ 114.266566][ T6095] veth0_vlan: left promiscuous mode [ 114.309092][ T6095] veth0_vlan: entered promiscuous mode [ 114.311856][ T6095] veth1_vlan: entered promiscuous mode [ 114.335922][ T6095] veth1_macvtap: left promiscuous mode [ 114.344851][ T6095] veth0_macvtap: left promiscuous mode [ 114.346274][ T6095] veth0_macvtap: entered promiscuous mode [ 114.365222][ T6095] veth1_macvtap: entered promiscuous mode [ 114.381780][ T6095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.384003][ T6095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.385254][ T6095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.386534][ T6095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.436550][ T6095] geneve2: left promiscuous mode [ 114.436577][ T6095] geneve2: left allmulticast mode [ 114.452783][ T6095] vxcan3: left promiscuous mode [ 114.452815][ T6095] vxcan3: left allmulticast mode [ 114.563626][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.563745][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.585384][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.585502][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.631106][ T6137] loop4: detected capacity change from 0 to 512 [ 114.714453][ T6135] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.714488][ T6135] overlayfs: failed to set xattr on upper [ 114.714498][ T6135] overlayfs: ...falling back to index=off. [ 114.774839][ T6137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.774954][ T6137] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.052276][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.803100][ T6173] FAULT_INJECTION: forcing a failure. [ 115.803100][ T6173] name failslab, interval 1, probability 0, space 0, times 0 [ 115.803135][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.4.101 Not tainted syzkaller #0 PREEMPT(full) [ 115.803159][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 115.803172][ T6173] Call Trace: [ 115.803185][ T6173] [ 115.803198][ T6173] dump_stack_lvl+0xe8/0x150 [ 115.803240][ T6173] should_fail_ex+0x410/0x560 [ 115.803272][ T6173] should_failslab+0xa8/0x100 [ 115.803305][ T6173] __kmalloc_noprof+0xfe/0x720 [ 115.803339][ T6173] ? security_sk_alloc+0x52/0x360 [ 115.803375][ T6173] ? security_sk_alloc+0x52/0x360 [ 115.803421][ T6173] security_sk_alloc+0x52/0x360 [ 115.803462][ T6173] sk_prot_alloc+0x101/0x210 [ 115.803494][ T6173] ? sk_alloc+0x27/0x390 [ 115.803526][ T6173] sk_alloc+0x3a/0x390 [ 115.803560][ T6173] af_alg_accept+0xaf/0x520 [ 115.803603][ T6173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.803636][ T6173] do_accept+0x521/0x750 [ 115.803670][ T6173] ? __pfx_do_accept+0x10/0x10 [ 115.803722][ T6173] __sys_accept4+0x139/0x230 [ 115.803755][ T6173] ? __pfx___sys_accept4+0x10/0x10 [ 115.803797][ T6173] __x64_sys_accept+0x7d/0x90 [ 115.803828][ T6173] do_syscall_64+0x166/0x520 [ 115.803856][ T6173] ? trace_irq_disable+0x3b/0x140 [ 115.803886][ T6173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.803922][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.803951][ T6173] RIP: 0033:0x7f498659e159 [ 115.803975][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.803997][ T6173] RSP: 002b:00007f49874fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 115.804026][ T6173] RAX: ffffffffffffffda RBX: 00007f4986825fa0 RCX: 00007f498659e159 [ 115.804046][ T6173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 115.804062][ T6173] RBP: 00007f498663503b R08: 0000000000000000 R09: 0000000000000000 [ 115.804080][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.804096][ T6173] R13: 00007f4986826038 R14: 00007f4986825fa0 R15: 00007ffd37647758 [ 115.804138][ T6173] [ 119.590462][ T6215] loop4: detected capacity change from 0 to 64 [ 119.630918][ T6215] MINIX-fs: mounting file system with errors, running fsck is recommended [ 119.651153][ T6215] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 120.207854][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.285307][ T6233] loop3: detected capacity change from 0 to 1024 [ 120.368445][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 120.368505][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 120.374470][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.374499][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.387007][ T9] usb 5-1: string descriptor 0 read error: -22 [ 120.388495][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.457586][ T9] usb 5-1: selecting invalid altsetting 1 [ 120.479762][ T9] usb 5-1: unit 6 not found! [ 120.505997][ T6220] loop5: detected capacity change from 0 to 32768 [ 120.630328][ T6220] overlayfs: missing 'lowerdir' [ 121.340043][ T9] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 121.472731][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 121.698490][ T6252] loop5: detected capacity change from 0 to 4096 [ 121.722263][ T6252] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 121.862019][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 121.903322][ T9] usb 5-1: USB disconnect, device number 2 [ 121.956870][ T6252] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 121.990111][ T6252] ntfs3(loop5): Failed to load $Extend (-22). [ 121.990141][ T6252] ntfs3(loop5): Failed to initialize $Extend. [ 122.127517][ T6252] ntfs3(loop5): ino=0, attr_set_size_ex [ 122.150245][ T6252] ntfs3(loop5): ino=0, attr_set_size_ex [ 122.163417][ T6252] ntfs3(loop5): ino=0, attr_set_size_ex [ 122.166688][ T6252] ntfs3(loop5): no free space to extend mft [ 122.178836][ T6252] ntfs3(loop5): no free space to extend mft [ 122.186416][ T6252] ntfs3(loop5): no free space to extend mft [ 122.312931][ T6264] loop3: detected capacity change from 0 to 32768 [ 122.343865][ T6269] loop2: detected capacity change from 0 to 128 [ 122.354777][ T6269] zonefs: Unknown parameter 'euid' [ 122.439382][ T6264] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 122.819251][ T6264] XFS (loop3): Ending clean mount [ 122.977997][ T6264] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 122.978128][ T6264] XFS (loop3): Unmount and run xfs_repair [ 122.978144][ T6264] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 122.978165][ T6264] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00 XAFL......BN.... [ 122.978184][ T6264] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 122.978202][ T6264] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 122.978221][ T6264] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5 ................ [ 122.978239][ T6264] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 122.978258][ T6264] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 122.978277][ T6264] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 122.978295][ T6264] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 122.978472][ T6264] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74 [ 123.107244][ T6264] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 123.107300][ T6264] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 123.160148][ T6257] loop1: detected capacity change from 0 to 32768 [ 123.190721][ T6257] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.320278][ T6257] XFS (loop1): Ending clean mount [ 123.361846][ T5614] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.366850][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'. [ 123.501464][ T5621] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.624855][ T6326] loop2: detected capacity change from 0 to 512 [ 124.818856][ T6326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.448676][ T2063] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.511946][ T6326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.512076][ T6326] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.586926][ T6342] loop5: detected capacity change from 0 to 128 [ 125.625988][ T2063] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.626044][ T2063] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 125.636707][ T2063] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.636734][ T2063] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.655769][ T2063] usb 2-1: string descriptor 0 read error: -22 [ 125.655915][ T2063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.705763][ T6342] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.719889][ T6342] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.734674][ T2063] usb 2-1: selecting invalid altsetting 1 [ 125.737020][ T2063] usb 2-1: unit 6 not found! [ 125.999392][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.045300][ T5616] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.055802][ T6315] loop0: detected capacity change from 0 to 32768 [ 126.298314][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 126.389228][ T6315] jfs_strtoUCS: char2uni returned -22. [ 126.389249][ T6315] charset = cp1250, char = 0x81 [ 126.623047][ T2063] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 126.718906][ T6315] ERROR: (device loop0): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 126.718906][ T6315] [ 126.726704][ T6315] ERROR: (device loop0): remounting filesystem as read-only [ 126.726728][ T6315] ERROR: (device loop0): jfs_rename: [ 126.726728][ T6315] [ 127.211723][ T5608] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt [ 127.211723][ T5608] [ 127.216668][ T2063] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 127.739180][ T2063] usb 2-1: USB disconnect, device number 3 [ 127.887704][ T6375] loop4: detected capacity change from 0 to 2048 [ 127.982988][ T5722] udevd[5722]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.032196][ T6375] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.201685][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 129.640112][ T6412] loop1: detected capacity change from 0 to 64 [ 130.297511][ T2063] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.451814][ T2063] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.451869][ T2063] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 130.456692][ T2063] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.456718][ T2063] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.515495][ T2063] usb 5-1: string descriptor 0 read error: -22 [ 130.515645][ T2063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.554629][ T2063] usb 5-1: selecting invalid altsetting 1 [ 130.564713][ T2063] usb 5-1: unit 6 not found! [ 130.869657][ T6438] loop2: detected capacity change from 0 to 1024 [ 130.878038][ T6438] EXT4-fs: Ignoring removed bh option [ 130.952600][ T6438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 131.222335][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 131.419866][ T2063] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 131.494801][ T6453] loop5: detected capacity change from 0 to 512 [ 131.535418][ T6453] EXT4-fs (loop5): Test dummy encryption mode enabled [ 131.535446][ T6453] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.545536][ T6453] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.191: bad orphan inode 131083 [ 131.545574][ T6453] loop5: lost filesystem error report for type 5 error -117 [ 131.568794][ T6453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.611582][ T6456] loop0: detected capacity change from 0 to 1024 [ 131.684247][ T6453] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 131.876670][ T5616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.913624][ T2063] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 131.940532][ T2063] usb 5-1: USB disconnect, device number 3 [ 132.192917][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.192988][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.598709][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 133.598750][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 134.060636][ T6497] loop0: detected capacity change from 0 to 32768 [ 134.240088][ T6517] loop2: detected capacity change from 0 to 512 [ 134.282086][ T6497] JBD2: Ignoring recovery information on journal [ 134.393964][ T6517] FAT-fs (loop2): Directory bread(block 2080) failed [ 134.394004][ T6517] FAT-fs (loop2): Directory bread(block 2081) failed [ 134.394032][ T6517] FAT-fs (loop2): Directory bread(block 2082) failed [ 134.394059][ T6517] FAT-fs (loop2): Directory bread(block 2083) failed [ 134.394086][ T6517] FAT-fs (loop2): Directory bread(block 2084) failed [ 134.394113][ T6517] FAT-fs (loop2): Directory bread(block 2085) failed [ 134.394140][ T6517] FAT-fs (loop2): Directory bread(block 2086) failed [ 134.394167][ T6517] FAT-fs (loop2): Directory bread(block 2087) failed [ 134.512963][ T6497] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 135.801501][ T5608] ocfs2: Unmounting device (7,0) on (node local) [ 135.945071][ T6505] loop5: detected capacity change from 0 to 32768 [ 136.038800][ T6505] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.112514][ T6522] loop1: detected capacity change from 0 to 32768 [ 136.179480][ T6505] XFS (loop5): Ending clean mount [ 136.189466][ T6522] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.350208][ T6522] XFS (loop1): Ending clean mount [ 136.454479][ T31] audit: type=1800 audit(1789140192.608:3): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.211" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 136.634954][ T6505] XFS (loop5): User initiated shutdown received. [ 136.635037][ T6505] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 136.635088][ T6505] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 136.825908][ T5616] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.987741][ T5621] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.315986][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 138.658021][ T6544] loop4: detected capacity change from 0 to 40427 [ 138.683108][ T6544] F2FS-fs: heap/no_heap options were deprecated [ 139.032599][ T6544] F2FS-fs (loop4): Unable to read 1th superblock [ 139.101126][ T6544] F2FS-fs (loop4): Unable to read 2th superblock [ 139.822459][ T6588] loop0: detected capacity change from 0 to 256 [ 140.137464][ T31] audit: type=1800 audit(1789140196.298:4): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.232" name="file1" dev="loop0" ino=1048610 res=0 errno=0 [ 140.271287][ T6585] loop5: detected capacity change from 0 to 4096 [ 140.620983][ T6585] ntfs3(loop5): Failed to load $Extend (-22). [ 140.621015][ T6585] ntfs3(loop5): Failed to initialize $Extend. [ 140.765921][ T6597] loop0: detected capacity change from 0 to 764 [ 140.889265][ T6597] rock: directory entry would overflow storage [ 140.889275][ T6597] rock: sig=0x4654, size=5, remaining=4 [ 141.024943][ T6602] loop4: detected capacity change from 0 to 64 [ 141.178732][ T6603] loop2: detected capacity change from 0 to 2048 [ 141.243527][ T6603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.289582][ T6611] overlayfs: failed to resolve './bus': -2 [ 141.413451][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.600492][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.242'. [ 141.670861][ T6624] loop4: detected capacity change from 0 to 512 [ 141.731725][ T6624] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.247: bg 0: block 5: invalid block bitmap [ 141.731765][ T6624] loop4: lost filesystem error report for type 5 error -117 [ 141.753452][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 141.753480][ C1] EXT4-fs (loop4): initial error at time 1789140197: ext4_validate_block_bitmap:436 [ 141.753508][ C1] EXT4-fs (loop4): last error at time 1789140197: ext4_validate_block_bitmap:436 [ 141.788535][ T6624] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 141.788562][ T6624] loop4: lost filesystem error report for type 5 error -117 [ 141.789367][ T6624] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.247: invalid indirect mapped block 3 (level 2) [ 141.789478][ T6624] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 141.880204][ T6624] EXT4-fs (loop4): 1 orphan inode deleted [ 141.880235][ T6624] EXT4-fs (loop4): 1 truncate cleaned up [ 142.146830][ T6624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.335268][ T6633] loop5: detected capacity change from 0 to 1024 [ 143.482787][ T6624] overlayfs: failed to verify upper root origin [ 144.063292][ T6627] loop2: detected capacity change from 0 to 32768 [ 144.208273][ T6627] overlayfs: missing 'lowerdir' [ 144.362568][ T6639] ialloc: diAlloc returned -17! [ 144.377725][ T6639] ialloc: diAlloc returned -17! [ 144.593821][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.118253][ T6644] loop0: detected capacity change from 0 to 4096 [ 145.219462][ T6652] loop1: detected capacity change from 0 to 256 [ 145.396073][ T6652] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x33c74090, utbl_chksum : 0xe619d30d) [ 145.423483][ T6657] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.428556][ T6644] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 145.462995][ T6644] NILFS (loop0): mounting fs with errors [ 145.706394][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 145.778691][ T5907] IPVS: starting estimator thread 0... [ 145.878589][ T6668] IPVS: using max 25 ests per chain, 60000 per kthread [ 146.799112][ T6676] loop4: detected capacity change from 0 to 1024 [ 147.043829][ T6678] loop0: detected capacity change from 0 to 512 [ 147.051715][ T6678] EXT4-fs: Ignoring removed nobh option [ 147.093078][ T6678] EXT4-fs (loop0): 1 truncate cleaned up [ 147.105000][ T6678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.146602][ T6680] loop2: detected capacity change from 0 to 1024 [ 147.162240][ T6680] ext4: Unknown parameter 'ba' [ 147.332759][ T6690] loop4: detected capacity change from 0 to 512 [ 147.372414][ T6690] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 147.376107][ T6690] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.270: invalid indirect mapped block 2683928664 (level 1) [ 147.376147][ T6690] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 147.377105][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 147.377127][ C1] EXT4-fs (loop4): initial error at time 1789140203: ext4_free_branches:1023: inode 13 [ 147.377162][ C1] EXT4-fs (loop4): last error at time 1789140203: ext4_free_branches:1023: inode 13 [ 147.386814][ T6690] EXT4-fs (loop4): 1 truncate cleaned up [ 147.397781][ T6690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.506338][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.615192][ T6674] loop1: detected capacity change from 0 to 32768 [ 149.082931][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.334240][ T6714] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.825826][ T143] IPVS: starting estimator thread 0... [ 151.137225][ T6725] IPVS: using max 24 ests per chain, 57600 per kthread [ 152.376137][ T6740] loop4: detected capacity change from 0 to 1024 [ 152.392722][ T6740] ext4: Unknown parameter 'ba' [ 153.185127][ T6735] loop1: detected capacity change from 0 to 32768 [ 153.917528][ T6735] JBD2: Ignoring recovery information on journal [ 154.092080][ T6735] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 154.261451][ T6770] loop0: detected capacity change from 0 to 64 [ 154.419760][ T6770] loop0: detected capacity change from 0 to 1764 [ 154.570596][ T6770] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 154.573292][ T6774] loop4: detected capacity change from 0 to 1024 [ 154.576280][ T6774] ext4: Unknown parameter 'ba' [ 154.619716][ T5621] ocfs2: Unmounting device (7,1) on (node local) [ 154.862985][ T6776] syz.5.300 uses obsolete (PF_INET,SOCK_PACKET) [ 156.416707][ T6767] loop2: detected capacity change from 0 to 32768 [ 156.676348][ T6767] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 156.702344][ T6812] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 156.704181][ T1039] IPVS: starting estimator thread 0... [ 156.763270][ T6767] XFS (loop2): Ending clean mount [ 156.787165][ T6813] IPVS: using max 25 ests per chain, 60000 per kthread [ 156.828074][ T6784] loop1: detected capacity change from 0 to 40427 [ 156.854214][ T6784] F2FS-fs (loop1): invalid crc value [ 157.462459][ T5609] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 157.468234][ T6784] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 157.502725][ T6784] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 157.907523][ T6798] loop3: detected capacity change from 0 to 32768 [ 157.955682][ T6798] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.090493][ T6798] XFS (loop3): Ending clean mount [ 159.094535][ T6825] loop4: detected capacity change from 0 to 32768 [ 159.201535][ T6825] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 159.295784][ T31] audit: type=1800 audit(1789140215.448:5): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.306" name="file1" dev="loop3" ino=6155 res=0 errno=0 [ 159.353213][ T6841] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 159.353289][ T6841] XFS (loop3): Unmount and run xfs_repair [ 159.353305][ T6841] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 159.353326][ T6841] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00 XAFL......BN.... [ 159.353346][ T6841] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 159.353365][ T6841] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 159.353384][ T6841] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5 ................ [ 159.353403][ T6841] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.353421][ T6841] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.353442][ T6841] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.353461][ T6841] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.353481][ T6841] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74 [ 159.431464][ T31] audit: type=1800 audit(1789140215.588:6): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.309" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 159.434592][ T6841] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 [ 159.434664][ T6841] XFS (loop3): Unmount and run xfs_repair [ 159.434708][ T6841] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 159.434735][ T6841] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00 XAFL......BN.... [ 159.434754][ T6841] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 159.434773][ T6841] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 159.434793][ T6841] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5 ................ [ 159.434811][ T6841] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.434830][ T6841] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.434848][ T6841] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.434867][ T6841] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.434886][ T6841] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74 [ 159.452175][ T6841] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 159.452233][ T6841] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 160.521138][ T5621] syz-executor: attempt to access beyond end of device [ 160.521138][ T5621] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.528914][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 160.528952][ T5621] Tainted: [L]=SOFTLOCKUP [ 160.528962][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 160.528977][ T5621] Call Trace: [ 160.528988][ T5621] [ 160.528999][ T5621] dump_stack_lvl+0xe8/0x150 [ 160.529043][ T5621] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 160.529086][ T5621] f2fs_write_end_bio+0x1211/0x16e0 [ 160.529117][ T5621] ? blkg_put+0x22/0x240 [ 160.529170][ T5621] __submit_merged_bio+0x258/0x6a0 [ 160.529205][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.529236][ T5621] ? rcu_is_watching+0x16/0xb0 [ 160.529275][ T5621] __submit_merged_write_cond+0x3c9/0x4e0 [ 160.529322][ T5621] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 160.529374][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.529415][ T5621] f2fs_write_data_pages+0x2a27/0x36f0 [ 160.529499][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 160.529538][ T5621] ? is_bpf_text_address+0x26/0x2b0 [ 160.529586][ T5621] ? arch_stack_walk+0xfb/0x150 [ 160.529650][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.529680][ T5621] ? add_lock_to_list+0xc7/0x100 [ 160.529716][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.529746][ T5621] ? __lock_acquire+0x1511/0x2de0 [ 160.529804][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.529834][ T5621] ? do_raw_spin_lock+0x12b/0x2f0 [ 160.529878][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.529920][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.529952][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 160.529990][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 160.530033][ T5621] do_writepages+0x338/0x560 [ 160.530062][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.530096][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.530131][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.530161][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 160.530204][ T5621] filemap_fdatawrite+0x1e9/0x2f0 [ 160.530237][ T5621] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 160.530308][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.530340][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.530376][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 160.530422][ T5621] f2fs_sync_dirty_inodes+0x30e/0x830 [ 160.530471][ T5621] f2fs_write_checkpoint+0xa3d/0x2710 [ 160.530497][ T5621] ? __lock_acquire+0x747/0x2de0 [ 160.530561][ T5621] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 160.530586][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.530680][ T5621] kill_f2fs_super+0x2dd/0x700 [ 160.530734][ T5621] ? __pfx_kill_f2fs_super+0x10/0x10 [ 160.530790][ T5621] ? call_rcu+0x64d/0x8b0 [ 160.530821][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.530852][ T5621] ? lockdep_hardirqs_on+0x7b/0x110 [ 160.530880][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.530932][ T5621] deactivate_locked_super+0xbc/0x110 [ 160.530973][ T5621] cleanup_mnt+0x3d3/0x460 [ 160.531004][ T5621] task_work_run+0x1d9/0x270 [ 160.531037][ T5621] ? __pfx_task_work_run+0x10/0x10 [ 160.531078][ T5621] exit_to_user_mode_loop+0x204/0x770 [ 160.531106][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 160.531136][ T5621] ? rcu_is_watching+0x16/0xb0 [ 160.531173][ T5621] do_syscall_64+0x328/0x520 [ 160.531201][ T5621] ? trace_irq_disable+0x3b/0x140 [ 160.531227][ T5621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.531261][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.531288][ T5621] RIP: 0033:0x7fed0279f397 [ 160.531312][ T5621] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 160.531333][ T5621] RSP: 002b:00007ffd25367aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 160.531360][ T5621] RAX: 0000000000000000 RBX: 00007fed0283448b RCX: 00007fed0279f397 [ 160.531377][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd25367b60 [ 160.531394][ T5621] RBP: 00007ffd25367b60 R08: 00007ffd25368b60 R09: 00000000ffffffff [ 160.531412][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd25368bf0 [ 160.531429][ T5621] R13: 00007fed0283448b R14: 0000000000026a6b R15: 00007ffd25368c30 [ 160.531469][ T5621] [ 160.542882][ T5621] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 160.702568][ T5614] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 160.870665][ T5622] ocfs2: Unmounting device (7,4) on (node local) [ 162.192258][ T6880] loop5: detected capacity change from 0 to 128 [ 162.525724][ T31] audit: type=1326 audit(1789140218.678:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.2.332" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5c6f9e159 code=0x0 [ 162.614470][ T6892] loop1: detected capacity change from 0 to 64 [ 162.866511][ T6896] loop4: detected capacity change from 0 to 512 [ 162.928297][ T6896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.928407][ T6896] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.156911][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.471733][ T6871] loop0: detected capacity change from 0 to 32768 [ 163.527724][ T6871] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.671178][ T6871] XFS (loop0): Ending clean mount [ 163.742180][ T6901] loop5: detected capacity change from 0 to 32768 [ 163.888157][ T6901] ialloc: diAlloc returned -28! [ 164.403134][ T6925] loop1: detected capacity change from 0 to 128 [ 164.431088][ T6923] loop2: detected capacity change from 0 to 1024 [ 164.432328][ T6923] ext4: Unknown parameter 'ba' [ 164.467947][ T6928] process 'syz.4.344' launched './file0' with NULL argv: empty string added [ 164.488592][ T6925] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.502149][ T6925] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.666702][ T5608] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 164.952831][ T5621] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.975185][ T6941] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 165.102794][ T6942] loop2: detected capacity change from 0 to 512 [ 165.206144][ T6942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.206255][ T6942] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.433700][ T1039] IPVS: starting estimator thread 0... [ 165.520209][ T6949] IPVS: using max 24 ests per chain, 57600 per kthread [ 165.551719][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.800294][ T31] audit: type=1326 audit(1789140221.958:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.3.351" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cf999e159 code=0x0 [ 166.136736][ T6968] loop5: detected capacity change from 0 to 512 [ 166.152809][ T6968] EXT4-fs: Ignoring removed oldalloc option [ 166.392178][ T6968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.589832][ T31] audit: type=1800 audit(1789140222.748:9): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.355" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 166.738142][ T6948] loop0: detected capacity change from 0 to 40427 [ 166.755990][ T6948] F2FS-fs (loop0): invalid crc value [ 167.191279][ T6948] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 167.239149][ T6988] loop2: detected capacity change from 0 to 1024 [ 167.243278][ T6948] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 167.286679][ T6988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.541751][ T6969] loop4: detected capacity change from 0 to 32768 [ 167.582291][ T6969] (syz.4.357,6969,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 167.590004][ T6969] (syz.4.357,6969,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 168.159287][ T6969] JBD2: Ignoring recovery information on journal [ 168.419211][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.423567][ T6969] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 168.602338][ T7003] loop1: detected capacity change from 0 to 512 [ 168.676152][ T7003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.676264][ T7003] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.801015][ T7009] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 168.857808][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.020494][ T5616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.500712][ T5622] ocfs2: Unmounting device (7,4) on (node local) [ 170.509328][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 170.630856][ T31] audit: type=1326 audit(1789140226.788:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.1.373" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed0279e159 code=0x0 [ 171.291497][ T7017] loop2: detected capacity change from 0 to 32768 [ 171.332018][ T7037] loop0: detected capacity change from 0 to 1024 [ 171.357988][ T7039] loop5: detected capacity change from 0 to 128 [ 171.366585][ T7017] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 171.391620][ T7037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.442674][ T5609] ocfs2: Unmounting device (7,2) on (node local) [ 172.522509][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.708652][ T7055] loop3: detected capacity change from 0 to 512 [ 172.783364][ T7055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.783478][ T7055] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.924501][ T7062] loop0: detected capacity change from 0 to 128 [ 173.026631][ T7057] loop1: detected capacity change from 0 to 4096 [ 173.043002][ T7062] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.062616][ T7062] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.176817][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.181286][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 173.372128][ T7070] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.431898][ T7057] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 173.436711][ T7057] NILFS (loop1): mounting fs with errors [ 173.552772][ T5608] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.711615][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.392'. [ 173.711665][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.392'. [ 174.323115][ T7088] loop5: detected capacity change from 0 to 1024 [ 174.349898][ T7088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.520308][ T31] audit: type=1326 audit(1789140230.678:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.0.397" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e3e99e159 code=0x0 [ 175.345546][ T7065] loop2: detected capacity change from 0 to 32768 [ 175.440212][ T7065] JBD2: Ignoring recovery information on journal [ 175.583326][ T5616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.605731][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 175.702762][ T7065] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 175.731269][ T7110] loop3: detected capacity change from 0 to 128 [ 175.853789][ T7110] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.893603][ T7110] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.368917][ T7118] loop5: detected capacity change from 0 to 4096 [ 176.445804][ T7118] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 176.971536][ T5614] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.181287][ T5609] ocfs2: Unmounting device (7,2) on (node local) [ 177.325579][ T7118] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 177.346880][ T7118] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 178.086750][ T7145] loop4: detected capacity change from 0 to 1024 [ 178.130691][ T7145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.284218][ T7154] loop5: detected capacity change from 0 to 4096 [ 178.999606][ T7154] ntfs3(loop5): Failed to load $Extend (-22). [ 178.999641][ T7154] ntfs3(loop5): Failed to initialize $Extend. [ 179.214236][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.255995][ T7154] ntfs3(loop5): ino=5, "/" mi_enum_attr [ 179.256034][ T7154] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 179.557795][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 179.680761][ T7172] loop3: detected capacity change from 0 to 128 [ 179.746775][ T7172] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.803628][ T7172] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.757704][ T7183] netlink: get zone limit has 4 unknown bytes [ 180.905609][ T5614] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.438931][ T7207] loop4: detected capacity change from 0 to 1024 [ 183.490008][ T7207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.482806][ T7224] openvswitch: netlink: Message has 5 unknown bytes. [ 184.492725][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.498912][ T7230] loop2: detected capacity change from 0 to 128 [ 185.606027][ T7230] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.628161][ T7230] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.914546][ T5609] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.968607][ T7238] loop4: detected capacity change from 0 to 4096 [ 186.156808][ T7238] ntfs3(loop4): Failed to load $Extend (-22). [ 186.156839][ T7238] ntfs3(loop4): Failed to initialize $Extend. [ 187.258858][ T7255] loop2: detected capacity change from 0 to 1024 [ 187.324490][ T7255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.953547][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 188.995787][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.312904][ T7283] loop2: detected capacity change from 0 to 128 [ 189.369453][ T7283] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.369890][ T7283] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.690818][ T5609] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.387452][ T7288] loop0: detected capacity change from 0 to 32768 [ 191.490202][ T7288] JBD2: Ignoring recovery information on journal [ 191.680703][ T7288] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 192.360425][ T31] audit: type=1326 audit(1789140248.508:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.2.471" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5c6f9e159 code=0x0 [ 192.502591][ T7306] loop3: detected capacity change from 0 to 32768 [ 192.622842][ T7306] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 192.808774][ T7306] XFS (loop3): Ending clean mount [ 193.584827][ T7339] FAULT_INJECTION: forcing a failure. [ 193.584827][ T7339] name fail_futex, interval 1, probability 0, space 0, times 1 [ 193.584876][ T7339] CPU: 1 UID: 0 PID: 7339 Comm: syz.5.476 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.584912][ T7339] Tainted: [L]=SOFTLOCKUP [ 193.584922][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 193.584938][ T7339] Call Trace: [ 193.584948][ T7339] [ 193.584960][ T7339] dump_stack_lvl+0xe8/0x150 [ 193.585005][ T7339] should_fail_ex+0x410/0x560 [ 193.585043][ T7339] get_futex_key+0x1b4/0x1580 [ 193.585080][ T7339] ? __pfx_futex_wake_mark+0x10/0x10 [ 193.585135][ T7339] ? __pfx_get_futex_key+0x10/0x10 [ 193.585165][ T7339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.585197][ T7339] ? __import_iovec+0x5d7/0x7e0 [ 193.585250][ T7339] futex_wake+0x119/0x5f0 [ 193.585300][ T7339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.585334][ T7339] ? __pfx_futex_wake+0x10/0x10 [ 193.585398][ T7339] ? __pfx_vfs_readv+0x10/0x10 [ 193.585441][ T7339] do_futex+0x458/0x4e0 [ 193.585484][ T7339] ? __pfx_do_futex+0x10/0x10 [ 193.585531][ T7339] __se_sys_futex+0x3a8/0x450 [ 193.585572][ T7339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.585604][ T7339] ? __x64_sys_preadv+0x28b/0x2b0 [ 193.585631][ T7339] ? __pfx___se_sys_futex+0x10/0x10 [ 193.585667][ T7339] ? __pfx___x64_sys_preadv+0x10/0x10 [ 193.585701][ T7339] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.585733][ T7339] ? __x64_sys_futex+0x21/0xf0 [ 193.585774][ T7339] do_syscall_64+0x166/0x520 [ 193.585805][ T7339] ? trace_irq_disable+0x3b/0x140 [ 193.585833][ T7339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.585867][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.585894][ T7339] RIP: 0033:0x7f799d99e159 [ 193.585921][ T7339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.585942][ T7339] RSP: 002b:00007f799bbf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.585970][ T7339] RAX: ffffffffffffffda RBX: 00007f799dc25fa8 RCX: 00007f799d99e159 [ 193.585990][ T7339] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f799dc25fac [ 193.586007][ T7339] RBP: 00007f799dc25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 193.586025][ T7339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.586041][ T7339] R13: 00007f799dc26038 R14: 00007ffdc5798270 R15: 00007ffdc5798358 [ 193.586093][ T7339] [ 193.634311][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.634384][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.207656][ T5614] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 194.287870][ T5608] ocfs2: Unmounting device (7,0) on (node local) [ 194.353326][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.478'. [ 194.354523][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.478'. [ 195.896560][ T7363] loop3: detected capacity change from 0 to 128 [ 195.965634][ T7363] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.011484][ T7363] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.072516][ T7371] netlink: 104 bytes leftover after parsing attributes in process `syz.1.487'. [ 196.359093][ T5614] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.709660][ T7375] loop2: detected capacity change from 0 to 4096 [ 196.856288][ T7375] ntfs3(loop2): Failed to load $Extend (-22). [ 196.856319][ T7375] ntfs3(loop2): Failed to initialize $Extend. [ 197.514313][ T7368] loop4: detected capacity change from 0 to 32768 [ 197.580643][ T7368] JBD2: Ignoring recovery information on journal [ 197.769632][ T7368] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 198.752954][ T5622] ocfs2: Unmounting device (7,4) on (node local) [ 199.353315][ T7412] loop0: detected capacity change from 0 to 128 [ 199.405017][ T7412] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.406958][ T7412] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.661799][ T5608] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.004770][ T7424] netlink: 'syz.4.506': attribute type 2 has an invalid length. [ 201.922668][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 201.922711][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 201.979201][ T7449] FAULT_INJECTION: forcing a failure. [ 201.979201][ T7449] name failslab, interval 1, probability 0, space 0, times 0 [ 201.979244][ T7449] CPU: 0 UID: 0 PID: 7449 Comm: syz.0.513 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.979280][ T7449] Tainted: [L]=SOFTLOCKUP [ 201.979291][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 201.979306][ T7449] Call Trace: [ 201.979316][ T7449] [ 201.979327][ T7449] dump_stack_lvl+0xe8/0x150 [ 201.979372][ T7449] should_fail_ex+0x410/0x560 [ 201.979419][ T7449] should_failslab+0xa8/0x100 [ 201.979453][ T7449] ? do_getname+0x2e/0x250 [ 201.979487][ T7449] kmem_cache_alloc_noprof+0xa1/0x600 [ 201.979536][ T7449] ? do_getname+0x2e/0x250 [ 201.979570][ T7449] ? lock_vma_under_rcu+0x45a/0x500 [ 201.979616][ T7449] do_getname+0x2e/0x250 [ 201.979648][ T7449] ? getname_flags+0x11/0x20 [ 201.979684][ T7449] do_sys_openat2+0xcc/0x200 [ 201.979723][ T7449] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.979759][ T7449] ? exc_page_fault+0x6a/0xc0 [ 201.979792][ T7449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.979825][ T7449] ? do_user_addr_fault+0xc4c/0x1340 [ 201.979856][ T7449] __x64_sys_openat+0x138/0x170 [ 201.979922][ T7449] do_syscall_64+0x166/0x520 [ 201.979951][ T7449] ? trace_irq_disable+0x3b/0x140 [ 201.979979][ T7449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.980013][ T7449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.980039][ T7449] RIP: 0033:0x7f8e3e95e98e [ 201.980063][ T7449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.980084][ T7449] RSP: 002b:00007f8e3f7c1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.980112][ T7449] RAX: ffffffffffffffda RBX: 00007f8e3f7c26c0 RCX: 00007f8e3e95e98e [ 201.980132][ T7449] RDX: 0000000000000002 RSI: 00007f8e3f7c1c00 RDI: ffffffffffffff9c [ 201.980150][ T7449] RBP: 00007f8e3f7c1c00 R08: 0000000000000000 R09: 0000000000000000 [ 201.980167][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 201.980184][ T7449] R13: 00007f8e3ec26038 R14: 00007f8e3ec25fa0 R15: 00007ffd63ccb998 [ 201.980225][ T7449] [ 202.168601][ T7454] loop4: detected capacity change from 0 to 128 [ 202.245898][ T7454] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.256083][ T7454] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.602672][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.521'. [ 202.624338][ T5622] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.214383][ T7462] loop0: detected capacity change from 0 to 32768 [ 204.573628][ T7497] warning: `syz.2.533' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 205.955140][ T7488] Bluetooth: hci4: command 0x0406 tx timeout [ 205.955186][ T7488] Bluetooth: hci2: command 0x0406 tx timeout [ 205.955241][ T7488] Bluetooth: hci1: command 0x0406 tx timeout [ 205.955271][ T7488] Bluetooth: hci3: command 0x0406 tx timeout [ 205.955301][ T7488] Bluetooth: hci0: command 0x0406 tx timeout [ 205.955330][ T7488] Bluetooth: hci5: command 0x0406 tx timeout [ 206.481661][ T7516] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.864185][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 206.864226][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 206.913595][ T7522] Zero length message leads to an empty skb [ 207.290063][ T7528] loop1: detected capacity change from 0 to 128 [ 208.881676][ T7552] syzkaller1: entered promiscuous mode [ 208.881703][ T7552] syzkaller1: entered allmulticast mode [ 209.484709][ T7561] netlink: 'syz.4.559': attribute type 3 has an invalid length. [ 210.967370][ T7572] loop1: detected capacity change from 0 to 128 [ 212.655203][ T7587] loop5: detected capacity change from 0 to 1024 [ 212.672969][ T7587] ext4: Unknown parameter 'ba' [ 213.481023][ T7597] loop3: detected capacity change from 0 to 1024 [ 213.599146][ T7597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.694603][ T7638] loop4: detected capacity change from 0 to 128 [ 215.770366][ T7638] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.797351][ T7638] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.136414][ T5622] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.643403][ T7648] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 217.686403][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.777341][ T7660] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 217.797145][ T5724] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 217.947191][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 217.947926][ T5724] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 217.964248][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.964286][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.964313][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 217.964359][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.010187][ T5724] usb 1-1: config 0 descriptor?? [ 218.656509][ T5724] usbhid 1-1:0.0: can't add hid device: -71 [ 218.656627][ T5724] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 218.729159][ T5724] usb 1-1: USB disconnect, device number 2 [ 219.223045][ T7688] loop4: detected capacity change from 0 to 128 [ 219.339962][ T7688] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.345117][ T7688] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.655975][ T5622] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.885003][ T7689] syzkaller0: entered promiscuous mode [ 219.885034][ T7689] syzkaller0: entered allmulticast mode [ 220.531926][ T7710] loop3: detected capacity change from 0 to 1024 [ 220.598567][ T7710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.279944][ T6808] syz.5.308 (6808) used greatest stack depth: 15040 bytes left [ 223.958421][ T7727] loop4: detected capacity change from 0 to 32768 [ 224.026432][ T7727] JBD2: Ignoring recovery information on journal [ 224.290634][ T7727] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 224.300930][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.822190][ T7733] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 224.870658][ T5622] ocfs2: Unmounting device (7,4) on (node local) [ 225.834736][ T7754] loop0: detected capacity change from 0 to 128 [ 225.909462][ T7754] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.909883][ T7754] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.101952][ T5608] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.581919][ T7761] netlink: 'syz.0.616': attribute type 2 has an invalid length. [ 229.358103][ T7733] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 230.305843][ T7792] loop1: detected capacity change from 0 to 128 [ 230.493080][ T7792] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.503932][ T7792] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.801113][ T5621] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.858569][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 231.028779][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 231.029545][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.033145][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.033180][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.033208][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.033255][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.126430][ T9] usb 1-1: config 0 descriptor?? [ 232.197562][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 232.197684][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 232.235358][ T9] usb 1-1: USB disconnect, device number 3 [ 232.517669][ T7812] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 233.356853][ T7834] x_tables: duplicate underflow at hook 1 [ 233.357473][ T7816] syzkaller0: entered promiscuous mode [ 233.357494][ T7816] syzkaller0: entered allmulticast mode [ 235.614558][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 237.797242][ T5746] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 237.950377][ T5746] usb 3-1: Using ep0 maxpacket: 16 [ 237.951205][ T5746] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 237.952551][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.952590][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.952617][ T5746] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.952664][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.955690][ T5746] usb 3-1: config 0 descriptor?? [ 238.581018][ T5746] usbhid 3-1:0.0: can't add hid device: -71 [ 238.581130][ T5746] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 238.586600][ T5746] usb 3-1: USB disconnect, device number 2 [ 241.303412][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.665'. [ 243.094345][ T7920] syzkaller0: entered promiscuous mode [ 243.094376][ T7920] syzkaller0: entered allmulticast mode [ 243.378921][ T7933] loop2: detected capacity change from 0 to 128 [ 243.391184][ T7933] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.392586][ T7933] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.999453][ T7916] loop1: detected capacity change from 0 to 32768 [ 244.180256][ T7916] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 244.220377][ T5609] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.306128][ T7916] XFS (loop1): Ending clean mount [ 245.378609][ T5621] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 247.668510][ T7992] netlink: 'syz.5.685': attribute type 2 has an invalid length. [ 247.780238][ T8001] syzkaller0: entered promiscuous mode [ 247.780266][ T8001] syzkaller0: entered allmulticast mode [ 250.009605][ T8023] openvswitch: netlink: Message has 8 unknown bytes. [ 250.009647][ T8023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.771900][ T8052] syzkaller0: entered promiscuous mode [ 250.771930][ T8052] syzkaller0: entered allmulticast mode [ 251.191135][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 255.073611][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.073677][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.085444][ T8125] loop0: detected capacity change from 0 to 512 [ 255.090060][ T8125] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.172240][ T8125] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.722: corrupted in-inode xattr: e_value size too large [ 255.172286][ T8125] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.175024][ T8125] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.722: couldn't read orphan inode 15 (err -117) [ 255.175064][ T8125] loop0: lost filesystem error report for type 5 error -117 [ 255.276537][ T8125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.663134][ T5608] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.990944][ T31] audit: type=1326 audit(1789140312.148:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed0279e159 code=0x0 [ 257.887583][ T8194] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 257.914484][ T8194] netlink: 60 bytes leftover after parsing attributes in process `syz.4.748'. [ 259.287952][ T31] audit: type=1326 audit(1789140315.448:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8207 comm="syz.4.753" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f498659e159 code=0x0 [ 259.724616][ T8226] loop1: detected capacity change from 0 to 512 [ 259.737433][ T8226] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.803329][ T8226] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.761: corrupted in-inode xattr: e_value size too large [ 259.803373][ T8226] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.805285][ T8226] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.761: couldn't read orphan inode 15 (err -117) [ 259.805323][ T8226] loop1: lost filesystem error report for type 5 error -117 [ 259.807060][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 259.807084][ C0] EXT4-fs (loop1): initial error at time 1789140315: ext4_iget_extra_inode:5210: inode 15 [ 259.807119][ C0] EXT4-fs (loop1): last error at time 1789140315: ext4_orphan_get:1408 [ 259.821273][ T8226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.225233][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.811231][ T8240] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 260.881763][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 260.881801][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.765'. [ 261.478641][ T8255] Bluetooth: MGMT ver 1.23 [ 263.815371][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 266.355508][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 266.580121][ T8333] loop1: detected capacity change from 0 to 512 [ 266.622067][ T8333] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 266.622625][ T8333] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.802: invalid indirect mapped block 2683928664 (level 1) [ 266.622664][ T8333] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 266.625494][ T8333] EXT4-fs (loop1): 1 truncate cleaned up [ 266.633573][ T8333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.819785][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.606334][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.817'. [ 270.750122][ T8386] loop1: detected capacity change from 0 to 512 [ 271.045583][ T8386] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 271.045960][ T8386] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.818: invalid indirect mapped block 2683928664 (level 1) [ 271.045999][ T8386] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 271.047057][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 271.047080][ C0] EXT4-fs (loop1): initial error at time 1789140327: ext4_free_branches:1023: inode 13 [ 271.047115][ C0] EXT4-fs (loop1): last error at time 1789140327: ext4_free_branches:1023: inode 13 [ 271.057221][ T8386] EXT4-fs (loop1): 1 truncate cleaned up [ 271.063739][ T8386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.875115][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.226812][ T8405] netlink: 68 bytes leftover after parsing attributes in process `syz.4.823'. [ 273.413325][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 273.413367][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 275.275945][ T8434] loop2: detected capacity change from 0 to 512 [ 275.331902][ T31] audit: type=1326 audit(1789140331.488:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.0.834" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e3e99e159 code=0x0 [ 275.408551][ T8434] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 275.410753][ T8434] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.833: invalid indirect mapped block 2683928664 (level 1) [ 275.410793][ T8434] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 275.413303][ T8434] EXT4-fs (loop2): 1 truncate cleaned up [ 275.420255][ T8434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.928587][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.181053][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.853'. [ 279.206916][ T8511] syzkaller1: entered promiscuous mode [ 279.206951][ T8511] syzkaller1: entered allmulticast mode [ 280.426602][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 282.243263][ T8545] loop0: detected capacity change from 0 to 32768 [ 282.418885][ T8545] ========================================================= ** replaying previous printk message ** [ 282.418885][ T8545] ================================================================== [ 282.418906][ T8545] BUG: KASAN: slab-out-of-bounds in dtSplitPage+0x1bce/0x36a0 [ 282.418973][ T8545] Write of size 1 at addr ffff88806784a040 by task syz.0.872/8545 [ 282.418995][ T8545] [ 282.419012][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.0.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.419048][ T8545] Tainted: [L]=SOFTLOCKUP [ 282.419058][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 282.419074][ T8545] Call Trace: [ 282.419084][ T8545] [ 282.419094][ T8545] dump_stack_lvl+0xe8/0x150 [ 282.419133][ T8545] print_address_description+0x55/0x1e0 [ 282.419171][ T8545] ? dtSplitPage+0x1bce/0x36a0 [ 282.419212][ T8545] print_report+0x58/0x70 [ 282.419245][ T8545] kasan_report+0x117/0x150 [ 282.419280][ T8545] ? dtSplitPage+0x1bce/0x36a0 [ 282.419326][ T8545] dtSplitPage+0x1bce/0x36a0 [ 282.419404][ T8545] dtInsert+0x1080/0x5cb0 [ 282.419457][ T8545] ? kasan_quarantine_put+0xbb/0x1f0 [ 282.419483][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.419521][ T8545] ? dtSearch+0x1adf/0x2010 [ 282.419562][ T8545] ? __pfx_dtInsert+0x10/0x10 [ 282.419603][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.419635][ T8545] ? dtSearch+0x1adf/0x2010 [ 282.419693][ T8545] jfs_symlink+0x8a1/0xfb0 [ 282.419722][ T8545] ? __pfx_jfs_symlink+0x10/0x10 [ 282.419756][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.419782][ T8545] ? make_vfsuid+0x49/0xa0 [ 282.419808][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.419833][ T8545] ? generic_permission+0x2bf/0x670 [ 282.419871][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.419898][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.419951][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.419979][ T8545] vfs_symlink+0x18b/0x330 [ 282.420005][ T8545] ? security_path_symlink+0xfd/0x360 [ 282.420039][ T8545] filename_symlinkat+0x1cd/0x410 [ 282.420069][ T8545] ? __pfx_filename_symlinkat+0x10/0x10 [ 282.420096][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.420122][ T8545] ? do_getname+0x151/0x250 [ 282.420151][ T8545] __se_sys_symlinkat+0x4e/0x2b0 [ 282.420179][ T8545] do_syscall_64+0x166/0x520 [ 282.420204][ T8545] ? trace_irq_disable+0x3b/0x140 [ 282.420228][ T8545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.420256][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.420280][ T8545] RIP: 0033:0x7f8e3e99e159 [ 282.420301][ T8545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.420321][ T8545] RSP: 002b:00007f8e3f7c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 282.420346][ T8545] RAX: ffffffffffffffda RBX: 00007f8e3ec25fa0 RCX: 00007f8e3e99e159 [ 282.420364][ T8545] RDX: 00002000000005c0 RSI: ffffffffffffff9c RDI: 0000200000000700 [ 282.420382][ T8545] RBP: 00007f8e3ea3503b R08: 0000000000000000 R09: 0000000000000000 [ 282.420397][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.420411][ T8545] R13: 00007f8e3ec26038 R14: 00007f8e3ec25fa0 R15: 00007ffd63ccb998 [ 282.420438][ T8545] [ 282.420446][ T8545] [ 282.420452][ T8545] Allocated by task 5614: [ 282.420463][ T8545] kasan_save_track+0x3e/0x80 [ 282.420485][ T8545] __kasan_kmalloc+0x93/0xb0 [ 282.420508][ T8545] __kmalloc_cache_noprof+0x321/0x600 [ 282.420529][ T8545] mpls_dev_notify+0xd6/0xd30 [ 282.420552][ T8545] notifier_call_chain+0x1a5/0x3d0 [ 282.420587][ T8545] register_netdevice+0x18a4/0x1eb0 [ 282.420618][ T8545] macvlan_common_newlink+0x12e5/0x1a50 [ 282.420648][ T8545] rtnl_newlink_create+0x305/0x7b0 [ 282.420675][ T8545] rtnl_newlink+0x166d/0x1c30 [ 282.420698][ T8545] rtnetlink_rcv_msg+0x802/0xc00 [ 282.420721][ T8545] netlink_rcv_skb+0x226/0x4a0 [ 282.420752][ T8545] netlink_unicast+0x7bd/0x940 [ 282.420778][ T8545] netlink_sendmsg+0x813/0xb40 [ 282.420810][ T8545] sock_sendmsg_nosec+0x13a/0x180 [ 282.420844][ T8545] __sys_sendto+0x408/0x5a0 [ 282.420868][ T8545] __x64_sys_sendto+0xde/0x100 [ 282.420892][ T8545] do_syscall_64+0x166/0x520 [ 282.420915][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.420944][ T8545] [ 282.420950][ T8545] The buggy address belongs to the object at ffff88806784a000 [ 282.420950][ T8545] which belongs to the cache kmalloc-64 of size 64 [ 282.420968][ T8545] The buggy address is located 16 bytes to the right of [ 282.420968][ T8545] allocated 48-byte region [ffff88806784a000, ffff88806784a030) [ 282.420991][ T8545] [ 282.420997][ T8545] The buggy address belongs to the physical page: [ 282.421007][ T8545] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806784a900 pfn:0x6784a [ 282.421029][ T8545] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 282.421050][ T8545] page_type: f5(slab) [ 282.421071][ T8545] raw: 00fff00000000200 ffff88801b0418c0 ffffea0001fad590 ffffea0001deac90 [ 282.421092][ T8545] raw: ffff88806784a900 0000000000200016 00000000f5000000 0000000000000000 [ 282.421104][ T8545] page dumped because: kasan: bad access detected [ 282.421114][ T8545] page_owner tracks the page as allocated [ 282.421122][ T8545] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5621, tgid 5621 (syz-executor), ts 85443401065 [ 282.421157][ T8545] post_alloc_hook+0x1f9/0x250 [ 282.421191][ T8545] get_page_from_freelist+0x2209/0x2280 [ 282.421215][ T8545] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 282.421237][ T8545] allocate_slab+0x7d/0x620 [ 282.421264][ T8545] refill_objects+0x2d5/0x350 [ 282.421294][ T8545] __pcs_replace_empty_main+0x2c8/0x6c0 [ 282.421321][ T8545] __kmalloc_cache_noprof+0x39b/0x600 [ 282.421342][ T8545] __netdev_adjacent_dev_insert+0x16f/0xa10 [ 282.421366][ T8545] __netdev_upper_dev_link+0xa33/0xc90 [ 282.421392][ T8545] netdev_master_upper_dev_link+0xbc/0x110 [ 282.421417][ T8545] team_add_slave+0x9f3/0x28c0 [ 282.421440][ T8545] do_set_master+0x563/0x720 [ 282.421469][ T8545] do_setlink+0xe7b/0x4670 [ 282.421496][ T8545] rtnl_newlink+0x15a3/0x1c30 [ 282.421520][ T8545] rtnetlink_rcv_msg+0x802/0xc00 [ 282.421544][ T8545] netlink_rcv_skb+0x226/0x4a0 [ 282.421576][ T8545] page last free pid 5597 tgid 5597 ts 79094685635 stack trace: [ 282.421591][ T8545] free_unref_folios+0xdc2/0x14e0 [ 282.421626][ T8545] folios_put_refs+0x9e9/0xb30 [ 282.421660][ T8545] free_pages_and_swap_cache+0x2ba/0x490 [ 282.421695][ T8545] tlb_flush_mmu+0x6d3/0xa30 [ 282.421714][ T8545] tlb_finish_mmu+0xf4/0x220 [ 282.421734][ T8545] unmap_region+0x2a5/0x330 [ 282.421756][ T8545] vms_complete_munmap_vmas+0x427/0xbe0 [ 282.421787][ T8545] do_vmi_align_munmap+0x3b7/0x4b0 [ 282.421815][ T8545] do_vmi_munmap+0x252/0x2d0 [ 282.421842][ T8545] __vm_munmap+0x241/0x3e0 [ 282.421871][ T8545] __x64_sys_munmap+0x60/0x70 [ 282.421907][ T8545] do_syscall_64+0x166/0x520 [ 282.421940][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.421965][ T8545] [ 282.421971][ T8545] Memory state around the buggy address: [ 282.421984][ T8545] ffff888067849f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 282.422003][ T8545] ffff888067849f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 282.422021][ T8545] >ffff88806784a000: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 282.422034][ T8545] ^ [ 282.422049][ T8545] ffff88806784a080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 282.422066][ T8545] ffff88806784a100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 282.422080][ T8545] ================================================================== [ 282.435707][ T8545] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 283.169808][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.0.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.180587][ T8545] Tainted: [L]=SOFTLOCKUP [ 283.184914][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 283.194971][ T8545] Call Trace: [ 283.198253][ T8545] [ 283.201177][ T8545] vpanic+0x56d/0xa60 [ 283.205187][ T8545] ? __pfx_vpanic+0x10/0x10 [ 283.209721][ T8545] panic+0xc5/0xd0 [ 283.213465][ T8545] ? __pfx_panic+0x10/0x10 [ 283.217897][ T8545] ? preempt_schedule_thunk+0x16/0x40 [ 283.223287][ T8545] ? preempt_schedule_thunk+0x16/0x40 [ 283.228678][ T8545] ? dtSplitPage+0x1bce/0x36a0 [ 283.233512][ T8545] check_panic_on_warn+0x89/0xb0 [ 283.238466][ T8545] ? dtSplitPage+0x1bce/0x36a0 [ 283.243270][ T8545] end_report+0x73/0x170 [ 283.247527][ T8545] ? dtSplitPage+0x1bce/0x36a0 [ 283.252309][ T8545] kasan_report+0x128/0x150 [ 283.256825][ T8545] ? dtSplitPage+0x1bce/0x36a0 [ 283.261616][ T8545] dtSplitPage+0x1bce/0x36a0 [ 283.266272][ T8545] dtInsert+0x1080/0x5cb0 [ 283.270637][ T8545] ? kasan_quarantine_put+0xbb/0x1f0 [ 283.275926][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.281578][ T8545] ? dtSearch+0x1adf/0x2010 [ 283.286105][ T8545] ? __pfx_dtInsert+0x10/0x10 [ 283.290806][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.296453][ T8545] ? dtSearch+0x1adf/0x2010 [ 283.300998][ T8545] jfs_symlink+0x8a1/0xfb0 [ 283.305440][ T8545] ? __pfx_jfs_symlink+0x10/0x10 [ 283.310402][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.316063][ T8545] ? make_vfsuid+0x49/0xa0 [ 283.320490][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.326127][ T8545] ? generic_permission+0x2bf/0x670 [ 283.331341][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.336991][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.342644][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.348289][ T8545] vfs_symlink+0x18b/0x330 [ 283.352717][ T8545] ? security_path_symlink+0xfd/0x360 [ 283.358099][ T8545] filename_symlinkat+0x1cd/0x410 [ 283.363141][ T8545] ? __pfx_filename_symlinkat+0x10/0x10 [ 283.368708][ T8545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 283.374349][ T8545] ? do_getname+0x151/0x250 [ 283.378861][ T8545] __se_sys_symlinkat+0x4e/0x2b0 [ 283.383821][ T8545] do_syscall_64+0x166/0x520 [ 283.388415][ T8545] ? trace_irq_disable+0x3b/0x140 [ 283.393446][ T8545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.399523][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.405417][ T8545] RIP: 0033:0x7f8e3e99e159 [ 283.409838][ T8545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.429489][ T8545] RSP: 002b:00007f8e3f7c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 283.437924][ T8545] RAX: ffffffffffffffda RBX: 00007f8e3ec25fa0 RCX: 00007f8e3e99e159 [ 283.445907][ T8545] RDX: 00002000000005c0 RSI: ffffffffffffff9c RDI: 0000200000000700 [ 283.453895][ T8545] RBP: 00007f8e3ea3503b R08: 0000000000000000 R09: 0000000000000000 [ 283.461875][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.469851][ T8545] R13: 00007f8e3ec26038 R14: 00007f8e3ec25fa0 R15: 00007ffd63ccb998 [ 283.477848][ T8545] [ 283.481108][ T8545] Kernel Offset: disabled [ 283.485419][ T8545] Rebooting in 86400 seconds..