last executing test programs: 27.889503465s ago: executing program 3 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x100, 0x0) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1001, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '2\x00'}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc000000080005000a000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) unshare(0x22020400) memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r3 = memfd_create(&(0x7f0000000400)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x4, 0x4, 0xff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)='%-010d \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0xc, &(0x7f00000009c0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r6, 0x0, 0xe, 0x0, &(0x7f0000000b00)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.769299745s ago: executing program 3 (id=515): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0xd0, 0x0, 0xd0, 0x0, 0x270, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x6}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0xff], 'bridge0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x33, 0x1, 0x2}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) syz_mount_image$hfsplus(&(0x7f00000005c0), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000400, &(0x7f0000000700)=ANY=[@ANYRES32=0x0], 0x1, 0x6eb, &(0x7f0000000740)="$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") syz_mount_image$vfat(&(0x7f0000000e40), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1005004, 0x0, 0x0, 0x0, &(0x7f0000000f80)) syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000fc0)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000010c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001140), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001180), 0x10106, 0x2, 0x0) clock_gettime(0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000011c0)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='status\x00') open(0x0, 0x149040, 0x40) removexattr(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000001340), 0x8) listen(r3, 0x5) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000015c0)=0x1, 0x4) syz_usb_connect(0x2, 0x58, &(0x7f0000001600)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 15.717273736s ago: executing program 3 (id=530): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='test_file\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000600)='/proc/self/cwd/test_file,0x0,0x1000', 0x23) 15.667314402s ago: executing program 3 (id=531): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000001300), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000000180)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x10048, &(0x7f00000004c0)=ANY=[], 0x67, 0xc54, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000001180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000011c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001300), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480), 0x80, &(0x7f00000014c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000001fc0)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004080)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r4, &(0x7f00000040c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000061c0)="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", 0x2000, &(0x7f00000081c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008280)={0x10, 0x0, 0x249595fb}, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x9700) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000013c0)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) syz_emit_ethernet(0x4a, 0x0, 0x0) 14.80285724s ago: executing program 3 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000580)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") 5.377942781s ago: executing program 3 (id=545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0), 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000300)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000540)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000580)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000880)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 4.99279217s ago: executing program 32 (id=545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0), 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000300)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000540)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000580)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000880)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.285912647s ago: executing program 0 (id=582): syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x60081, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000200), 0x80) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200008, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x1, 0x392, &(0x7f0000000300)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") socket$inet(0x2, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f00000006c0), 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) readv(r1, &(0x7f0000000700)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = gettid() tkill(r2, 0x21) 1.86592548s ago: executing program 0 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/split_huge_pages\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(r0, &(0x7f0000000600)='/proc/self/cwd/test_file,0x0,0x1000', 0x23) 1.819347274s ago: executing program 0 (id=588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000003c0), 0x56) sendmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.808038806s ago: executing program 1 (id=589): syz_mount_image$vfat(&(0x7f0000000e40), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1005004, 0x0, 0x0, 0x0, &(0x7f0000000f80)) removexattr(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.76018208s ago: executing program 1 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x6a1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x200, 0x8, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.741092633s ago: executing program 4 (id=591): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001000)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000001100)=ANY=[@ANYBLOB="5001", @ANYRES8, @ANYRES16=r3], 0x14) 1.611241485s ago: executing program 4 (id=592): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000280), 0xffffffffffffff58, 0x20008005, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10) shutdown(r3, 0x1) recvfrom(r3, &(0x7f0000000300)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x5}]}}}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x14, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000d9}, 0x1) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000980)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1.515868156s ago: executing program 2 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000580)="$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") 1.380703599s ago: executing program 0 (id=594): r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4c884) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 1.347964382s ago: executing program 0 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x4, 0x4, 0xff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)='%-010d \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0xb, &(0x7f00000009c0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x0, 0xe, 0x0, &(0x7f0000000b00)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.347497753s ago: executing program 1 (id=596): syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x60081, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000200), 0x80) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200008, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x1, 0x392, &(0x7f0000000300)="$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") socket$inet(0x2, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f00000006c0), 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) readv(r1, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = gettid() tkill(r2, 0x21) 1.266014311s ago: executing program 4 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/split_huge_pages\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='test_file\x00', 0x42, 0x1ff) write(r0, 0x0, 0x0) 1.245624033s ago: executing program 4 (id=598): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010026bd7000fbdbdf250700", @ANYRES32, @ANYBLOB="000002000a0002"], 0x28}}, 0x20000800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.216537336s ago: executing program 1 (id=599): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0xd0, 0x0, 0xd0, 0x0, 0x270, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x6}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0xff], 'bridge0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x33, 0x1, 0x2}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) syz_mount_image$hfsplus(&(0x7f00000005c0), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000400, &(0x7f0000000700)=ANY=[@ANYRES32=0x0], 0x1, 0x6eb, &(0x7f0000000740)="$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") syz_mount_image$vfat(&(0x7f0000000e40), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1005004, 0x0, 0x0, 0x0, &(0x7f0000000f80)) syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000fc0)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000010c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001140), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001180), 0x10106, 0x2, 0x0) clock_gettime(0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000011c0)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='status\x00') removexattr(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 740.975714ms ago: executing program 4 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000001440)={&(0x7f0000001480)=@xdp={0x2c, 0x8, r4, 0x1109}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001540)='7', 0x1}], 0x1}, 0x20000885) 626.378626ms ago: executing program 2 (id=601): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001000)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000001100)=ANY=[@ANYBLOB="5001", @ANYRES8, @ANYRES16=r3], 0x14) 487.15227ms ago: executing program 2 (id=602): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000280), 0xffffffffffffff58, 0x20008005, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10) shutdown(r3, 0x1) recvfrom(r3, &(0x7f0000000300)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x5}]}}}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x14, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000d9}, 0x1) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000980)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a00)={0x1, &(0x7f0000000a40)=[{0x6, 0x72, 0x0, 0x7fffffff}]}) syz_emit_ethernet(0x17b, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f1507"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 475.315201ms ago: executing program 0 (id=603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000003c0), 0x56) sendmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 336.599746ms ago: executing program 1 (id=604): r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4c884) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 309.376899ms ago: executing program 1 (id=605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x6a1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x200, 0x8, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 248.761185ms ago: executing program 4 (id=606): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000280), 0xffffffffffffff58, 0x20008005, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10) shutdown(r3, 0x1) recvfrom(r3, &(0x7f0000000300)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x6}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x5}]}}}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x14, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000d9}, 0x1) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000980)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 94.05743ms ago: executing program 2 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./debug/split_huge_pages\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='test_file\x00', 0x42, 0x1ff) write(r0, 0x0, 0x0) 64.548313ms ago: executing program 2 (id=608): syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x60081, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000200), 0x80) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200008, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x1, 0x392, &(0x7f0000000300)="$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") socket$inet(0x2, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f00000006c0), 0x0, 0x8000) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) readv(r1, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = gettid() tkill(r2, 0x21) 0s ago: executing program 2 (id=609): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010026bd7000fbdbdf250700", @ANYRES32, @ANYBLOB="000002000a0002"], 0x28}}, 0x20000800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 21652][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.824076][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.825886][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.841409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.843357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.845354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.847742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.849845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.852739][ T4331] device veth0_vlan entered promiscuous mode [ 32.856062][ T4331] device veth1_vlan entered promiscuous mode [ 32.861466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.863382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.865088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.867474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.870778][ T4333] device veth0_macvtap entered promiscuous mode [ 32.875296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.877099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.878796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.882193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.884752][ T4333] device veth1_macvtap entered promiscuous mode [ 32.893385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.895275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.897165][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.898969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.901968][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.905614][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.916860][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.918925][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.921463][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.923699][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.926985][ T4331] device veth0_macvtap entered promiscuous mode [ 32.932294][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.933866][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.935733][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.937621][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.950341][ T4334] device veth0_macvtap entered promiscuous mode [ 32.957964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.960119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.961987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.964232][ T4331] device veth1_macvtap entered promiscuous mode [ 32.974665][ T4334] device veth1_macvtap entered promiscuous mode [ 32.977675][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.982619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.984581][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.986381][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.988452][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.996711][ T4333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.998590][ T4333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.001261][ T4333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.002730][ T4333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.014097][ T4340] device veth0_vlan entered promiscuous mode [ 33.018988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.022520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.024467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.026910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.034642][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.036847][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.039062][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.042896][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.045014][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.046955][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.049033][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.052822][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.055611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.057687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.060668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.062941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.067087][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.069149][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.071750][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.077159][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.079098][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.081583][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.083312][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.086355][ T4340] device veth1_vlan entered promiscuous mode [ 33.089077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.091513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.094285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.103923][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.106137][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.108271][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.111408][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.114239][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.116816][ T80] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.118485][ T80] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.121251][ T80] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.123149][ T80] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.126824][ T4334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.128612][ T4334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.134770][ T4334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.136540][ T4334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.165666][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.194465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.196648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.207934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.212127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.216535][ T4340] device veth0_macvtap entered promiscuous mode [ 33.219302][ T4340] device veth1_macvtap entered promiscuous mode [ 33.227969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.230132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.231755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.233683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.236924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.238679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.240488][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.242024][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.246031][ T4332] device veth0_vlan entered promiscuous mode [ 33.252603][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.254203][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.255823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.257794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.275677][ T4332] device veth1_vlan entered promiscuous mode [ 33.278254][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.283125][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.285092][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.287228][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.289318][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.292642][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.295797][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.304366][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.305969][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.308298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.310604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.312289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.314062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.325054][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.327278][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.329861][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.331773][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.333699][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.335962][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.338744][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.342185][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.343607][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.346132][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.347668][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.352954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.354903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.356754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.358755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.361443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.365280][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.367032][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.368766][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.371517][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.383205][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.384871][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.386706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.398490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.400637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.404419][ T4332] device veth0_macvtap entered promiscuous mode [ 33.408801][ T4332] device veth1_macvtap entered promiscuous mode [ 33.427301][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.432023][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.433805][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.435777][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.437440][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.439307][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.447346][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.450344][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.453472][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.456176][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.458341][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.461294][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.463357][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.465213][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.467293][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.469263][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.471371][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.474080][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.478178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.480133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.481903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.483822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.485893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.487798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.496050][ T4332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.497990][ T4332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.500541][ T4332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.502395][ T4332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.528251][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.530234][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.532474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.630360][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.631939][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.633749][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.635348][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.638362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.642145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.650900][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.652611][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.654386][ T80] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.657282][ T4448] Zero length message leads to an empty skb [ 33.889491][ T4454] overlayfs: failed to resolve './file0': -2 [ 33.964843][ T4448] Bluetooth: MGMT ver 1.22 [ 34.010097][ T4342] Bluetooth: hci0: command 0x041b tx timeout [ 34.011738][ T4342] Bluetooth: hci3: command 0x041b tx timeout [ 34.527286][ T4451] Bluetooth: ISO socket layer initialized [ 34.801493][ T4339] Bluetooth: hci4: command 0x041b tx timeout [ 34.802805][ T4339] Bluetooth: hci2: command 0x041b tx timeout [ 34.855797][ T4464] loop4: detected capacity change from 0 to 512 [ 34.883619][ T4464] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.900776][ T4464] EXT4-fs (loop4): 1 truncate cleaned up [ 34.902324][ T4464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.889630][ T4342] Bluetooth: hci1: command 0x0419 tx timeout [ 36.138589][ T4484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.140681][ T4484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.159611][ T4480] loop0: detected capacity change from 0 to 512 [ 36.168055][ T4339] Bluetooth: hci3: command 0x040f tx timeout [ 36.180951][ T4481] fuse: Bad value for 'rootmode' [ 36.205614][ T4480] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 36.213168][ T4487] loop3: detected capacity change from 0 to 512 [ 36.271284][ T4480] EXT4-fs (loop0): 1 truncate cleaned up [ 36.272756][ T4480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.809759][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 36.812230][ T4342] Bluetooth: hci4: command 0x040f tx timeout [ 37.059715][ T3904] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 38.279594][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 38.376042][ T3904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.378105][ T3904] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 38.380348][ T3904] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 38.390006][ T3904] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.391719][ T3904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 38.393161][ T3904] usb 1-1: SerialNumber: syz [ 38.419149][ T3904] cdc_acm 1-1:1.0: skipping garbage [ 38.420605][ T3904] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 38.422144][ T3904] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 38.423453][ T3904] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 38.456698][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 38.483653][ T4520] FAULT_INJECTION: forcing a failure. [ 38.483653][ T4520] name failslab, interval 1, probability 0, space 0, times 1 [ 38.492013][ T4520] CPU: 1 PID: 4520 Comm: syz.3.17 Not tainted syzkaller #0 [ 38.493539][ T4520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.495486][ T4520] Call trace: [ 38.496129][ T4520] dump_backtrace+0x1c4/0x1f0 [ 38.497033][ T4520] show_stack+0x2c/0x3c [ 38.497870][ T4520] __dump_stack+0x30/0x40 [ 38.498675][ T4520] dump_stack_lvl+0xf4/0x15c [ 38.499579][ T4520] dump_stack+0x1c/0x5c [ 38.500463][ T4520] should_fail_ex+0x3cc/0x524 [ 38.501460][ T4520] __should_failslab+0xc0/0x11c [ 38.502587][ T4520] should_failslab+0x10/0x28 [ 38.503586][ T4520] __kmem_cache_alloc_node+0x7c/0x318 [ 38.504724][ T4520] __kmalloc_node+0xc8/0x184 [ 38.505745][ T4520] kvmalloc_node+0x88/0x1d4 [ 38.506721][ T4520] check_cfg+0x9c/0xde4 [ 38.507602][ T4520] bpf_check+0x329c/0xe03c [ 38.508496][ T4520] bpf_prog_load+0xe2c/0x12c0 [ 38.509455][ T4520] __sys_bpf+0x494/0x660 [ 38.510306][ T4520] __arm64_sys_bpf+0x80/0x98 [ 38.511239][ T4520] invoke_syscall+0x98/0x290 [ 38.512165][ T4520] el0_svc_common+0x13c/0x258 [ 38.513119][ T4520] do_el0_svc+0x5c/0x134 [ 38.514070][ T4520] el0_svc+0x58/0x12c [ 38.514903][ T4520] el0t_64_sync_handler+0x84/0xf0 [ 38.515973][ T4520] el0t_64_sync+0x18c/0x190 [ 38.522418][ T4520] 0x000000000003-0x000000010001 : "" [ 38.531624][ T4520] ftl_cs: FTL header corrupt! [ 38.583738][ T4523] 0x000000000003-0x000000010001 : "" [ 38.595063][ T4523] ftl_cs: FTL header corrupt! [ 38.606610][ T4523] FAULT_INJECTION: forcing a failure. [ 38.606610][ T4523] name failslab, interval 1, probability 0, space 0, times 0 [ 38.609336][ T4523] CPU: 1 PID: 4523 Comm: syz.3.18 Not tainted syzkaller #0 [ 38.610863][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.613048][ T4523] Call trace: [ 38.613755][ T4523] dump_backtrace+0x1c4/0x1f0 [ 38.614723][ T4523] show_stack+0x2c/0x3c [ 38.615657][ T4523] __dump_stack+0x30/0x40 [ 38.616635][ T4523] dump_stack_lvl+0xf4/0x15c [ 38.617679][ T4523] dump_stack+0x1c/0x5c [ 38.618625][ T4523] should_fail_ex+0x3cc/0x524 [ 38.619633][ T4523] __should_failslab+0xc0/0x11c [ 38.620672][ T4523] should_failslab+0x10/0x28 [ 38.621612][ T4523] slab_pre_alloc_hook+0x6c/0x31c [ 38.622780][ T4523] kmem_cache_alloc_lru+0x60/0x284 [ 38.623865][ T4523] new_inode_pseudo+0xdc/0x1cc [ 38.624978][ T4523] new_inode+0x38/0x174 [ 38.625839][ T4523] debugfs_create_dir+0xec/0x3fc [ 38.626929][ T4523] blk_register_queue+0x16c/0x334 [ 38.627990][ T4523] device_add_disk+0x53c/0xe04 [ 38.629045][ T4523] add_mtd_blktrans_dev+0xc48/0x1090 [ 38.630157][ T4523] mtdblock_add_mtd+0x158/0x218 [ 38.631184][ T4523] blktrans_notify_add+0xa8/0xf8 [ 38.632189][ T4523] add_mtd_device+0xe40/0x13b4 [ 38.633167][ T4523] mtd_add_partition+0x224/0x3bc [ 38.634177][ T4523] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 38.635304][ T4523] mtdchar_ioctl+0x1238/0x1aec [ 38.636329][ T4523] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 38.637481][ T4523] __arm64_sys_ioctl+0x14c/0x1c8 [ 38.638537][ T4523] invoke_syscall+0x98/0x290 [ 38.639569][ T4523] el0_svc_common+0x13c/0x258 [ 38.640568][ T4523] do_el0_svc+0x5c/0x134 [ 38.641506][ T4523] el0_svc+0x58/0x12c [ 38.642262][ T4523] el0t_64_sync_handler+0x84/0xf0 [ 38.643318][ T4523] el0t_64_sync+0x18c/0x190 [ 38.673457][ T4523] debugfs: out of free dentries, can not create directory 'mtdblock2' [ 38.893267][ T4335] Bluetooth: hci4: command 0x0419 tx timeout [ 38.894573][ T4335] Bluetooth: hci2: command 0x0419 tx timeout [ 39.042135][ T4342] Bluetooth: hci2: unexpected cc 0x1003 length: 2 < 9 [ 39.044245][ T4342] Bluetooth: hci2: unexpected cc 0x2003 length: 2 < 9 [ 39.073606][ T4545] device syzkaller0 entered promiscuous mode [ 39.495747][ T4556] overlayfs: missing 'lowerdir' [ 40.231528][ T4403] usb 1-1: USB disconnect, device number 2 [ 40.400990][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 40.499413][ C1] sched: RT throttling activated [ 40.520790][ T4570] overlayfs: missing 'lowerdir' [ 41.508005][ T4584] loop2: detected capacity change from 0 to 128 [ 41.517638][ T4582] overlayfs: missing 'workdir' [ 41.547233][ T4586] loop4: detected capacity change from 0 to 128 [ 41.858960][ T4593] overlayfs: missing 'workdir' [ 42.482968][ T4410] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.518846][ T4598] loop1: detected capacity change from 0 to 8 [ 42.527436][ T4595] syz.4.37: attempt to access beyond end of device [ 42.527436][ T4595] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 42.583055][ T4594] syz.2.36: attempt to access beyond end of device [ 42.583055][ T4594] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 42.585839][ T4594] syz.2.36: attempt to access beyond end of device [ 42.585839][ T4594] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 42.613469][ T4598] process 'syz.1.39' launched './file0' with NULL argv: empty string added [ 42.635468][ T4595] syz.4.37: attempt to access beyond end of device [ 42.635468][ T4595] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 42.654106][ T4595] syz.4.37: attempt to access beyond end of device [ 42.654106][ T4595] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 42.681812][ T4594] syz.2.36: attempt to access beyond end of device [ 42.681812][ T4594] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 42.698123][ T4595] syz.4.37: attempt to access beyond end of device [ 42.698123][ T4595] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 42.713755][ T4594] syz.2.36: attempt to access beyond end of device [ 42.713755][ T4594] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 42.790769][ T4595] syz.4.37: attempt to access beyond end of device [ 42.790769][ T4595] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 42.791802][ T4594] syz.2.36: attempt to access beyond end of device [ 42.791802][ T4594] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 43.878131][ T4627] loop4: detected capacity change from 0 to 128 [ 44.097524][ T4635] ip_tables: iptables: counters copy to user failed while replacing table [ 45.392641][ T4670] loop2: detected capacity change from 0 to 128 [ 45.482067][ T4673] device syzkaller1 entered promiscuous mode [ 45.524591][ T4670] ip_tables: iptables: counters copy to user failed while replacing table [ 45.562477][ T4678] loop2: detected capacity change from 0 to 128 [ 45.697443][ T4678] ip_tables: iptables: counters copy to user failed while replacing table [ 47.133968][ T4706] device syzkaller0 entered promiscuous mode [ 47.159714][ T4644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.220631][ T4721] device syzkaller0 entered promiscuous mode [ 48.364971][ T4733] device syzkaller0 entered promiscuous mode [ 48.391704][ T4735] device syzkaller0 entered promiscuous mode [ 48.564699][ T4741] device syzkaller0 entered promiscuous mode [ 48.689020][ T4753] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 48.693124][ T4753] netlink: 68 bytes leftover after parsing attributes in process `syz.3.79'. [ 48.995733][ T4771] device syzkaller0 entered promiscuous mode [ 49.965751][ T4784] loop4: detected capacity change from 0 to 512 [ 50.465665][ T4791] loop2: detected capacity change from 0 to 8 [ 50.723216][ T4820] loop1: detected capacity change from 0 to 512 [ 50.725566][ T4816] device syzkaller0 entered promiscuous mode [ 50.803427][ T4828] loop1: detected capacity change from 0 to 8 [ 50.811693][ T4826] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 50.813957][ T4826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 50.815848][ T4826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.111'. [ 50.998070][ T4851] loop1: detected capacity change from 0 to 512 [ 51.127048][ T4857] loop1: detected capacity change from 0 to 8 [ 51.273348][ T4872] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 51.290168][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 51.292110][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 51.312832][ T4877] loop1: detected capacity change from 0 to 512 [ 51.345502][ T4882] loop4: detected capacity change from 0 to 512 [ 51.399608][ T4882] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 51.401875][ T4882] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 51.405862][ T4882] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #13: comm syz.4.135: iget: bad i_size value: 12154757448730 [ 51.413924][ T4882] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.135: couldn't read orphan inode 13 (err -117) [ 51.418436][ T4882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.532093][ T4889] loop3: detected capacity change from 0 to 2048 [ 51.569849][ T4889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.745180][ T4893] loop1: detected capacity change from 0 to 8 [ 52.244359][ T4904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 52.247261][ T4896] syz.4.135 (4896): drop_caches: 2 [ 52.250509][ T4902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.395081][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 52.750213][ T4920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.754825][ T4917] 0x000000000003-0x000000010001 : "" [ 52.758010][ T4918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.788641][ T4917] ftl_cs: FTL header corrupt! [ 52.794605][ T4917] FAULT_INJECTION: forcing a failure. [ 52.794605][ T4917] name failslab, interval 1, probability 0, space 0, times 0 [ 52.803692][ T4917] CPU: 1 PID: 4917 Comm: syz.0.147 Not tainted syzkaller #0 [ 52.805280][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 52.807460][ T4917] Call trace: [ 52.807475][ T4922] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 52.808125][ T4917] dump_backtrace+0x1c4/0x1f0 [ 52.810563][ T4917] show_stack+0x2c/0x3c [ 52.811406][ T4917] __dump_stack+0x30/0x40 [ 52.812379][ T4917] dump_stack_lvl+0xf4/0x15c [ 52.813400][ T4917] dump_stack+0x1c/0x5c [ 52.814330][ T4917] should_fail_ex+0x3cc/0x524 [ 52.815379][ T4917] __should_failslab+0xc0/0x11c [ 52.816456][ T4917] should_failslab+0x10/0x28 [ 52.817411][ T4917] __kmem_cache_alloc_node+0x7c/0x318 [ 52.818682][ T4917] __kmalloc_node_track_caller+0xb8/0x174 [ 52.819960][ T4917] kstrdup_const+0x90/0xdc [ 52.820882][ T4917] __kernfs_new_node+0xb0/0x5fc [ 52.821951][ T4917] kernfs_new_node+0x120/0x230 [ 52.822975][ T4917] kernfs_create_dir_ns+0x58/0x138 [ 52.824121][ T4917] sysfs_create_dir_ns+0x120/0x264 [ 52.825173][ T4917] kobject_add_internal+0x5a8/0xb18 [ 52.826294][ T4917] kobject_add+0x144/0x20c [ 52.826482][ T4922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.827247][ T4917] blk_mq_register_hctx+0x1b4/0x37c [ 52.829741][ T4917] blk_mq_sysfs_register+0x1b4/0x518 [ 52.830824][ T4917] blk_register_queue+0xc4/0x334 [ 52.831800][ T4917] device_add_disk+0x53c/0xe04 [ 52.832857][ T4917] add_mtd_blktrans_dev+0xc48/0x1090 [ 52.834051][ T4917] mtdblock_add_mtd+0x158/0x218 [ 52.835109][ T4917] blktrans_notify_add+0xa8/0xf8 [ 52.836117][ T4917] add_mtd_device+0xe40/0x13b4 [ 52.836719][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 52.837066][ T4917] mtd_add_partition+0x224/0x3bc [ 52.840014][ T4917] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 52.841124][ T4917] mtdchar_ioctl+0x1238/0x1aec [ 52.842202][ T4917] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 52.843302][ T4917] __arm64_sys_ioctl+0x14c/0x1c8 [ 52.844453][ T4917] invoke_syscall+0x98/0x290 [ 52.845088][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 52.845414][ T4917] el0_svc_common+0x13c/0x258 [ 52.848080][ T4917] do_el0_svc+0x5c/0x134 [ 52.849020][ T4917] el0_svc+0x58/0x12c [ 52.849867][ T4917] el0t_64_sync_handler+0x84/0xf0 [ 52.850983][ T4917] el0t_64_sync+0x18c/0x190 [ 52.863640][ T4922] bond1: (slave bridge1): making interface the new active one [ 52.866715][ T4922] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 52.869161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 52.881339][ T4917] kobject_add_internal failed for cpu1 (error: -12 parent: 0) [ 53.053740][ T4933] tc action pedit offset 0 out of bounds [ 53.055288][ T4933] tc action pedit offset 0 out of bounds [ 53.056409][ T4933] tc action pedit offset 0 out of bounds [ 53.057582][ T4933] tc action pedit offset 0 out of bounds [ 53.058724][ T4933] tc action pedit offset 0 out of bounds [ 53.059979][ T4933] tc action pedit offset 0 out of bounds [ 53.061091][ T4933] tc action pedit offset 0 out of bounds [ 53.062333][ T4933] tc action pedit offset 0 out of bounds [ 53.063436][ T4933] tc action pedit offset 0 out of bounds [ 53.064438][ T4933] tc action pedit offset 0 out of bounds [ 53.065408][ T4933] 0: reclassify loop, rule prio 0, protocol 800 [ 53.195258][ T4939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'. [ 53.360984][ T4951] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 53.363029][ T4951] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 53.365365][ T4951] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.159: iget: bad i_size value: 12154757448730 [ 53.392847][ T4951] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.159: couldn't read orphan inode 13 (err -117) [ 53.406663][ T4951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.503345][ T4966] device syzkaller0 entered promiscuous mode [ 53.566095][ T4951] syz.2.159 (4951): drop_caches: 2 [ 53.607480][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 53.663743][ T4973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 53.756928][ T4982] FAULT_INJECTION: forcing a failure. [ 53.756928][ T4982] name failslab, interval 1, probability 0, space 0, times 0 [ 53.760597][ T4982] CPU: 0 PID: 4982 Comm: syz.4.173 Not tainted syzkaller #0 [ 53.762250][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.764625][ T4982] Call trace: [ 53.765358][ T4982] dump_backtrace+0x1c4/0x1f0 [ 53.766294][ T4982] show_stack+0x2c/0x3c [ 53.767223][ T4982] __dump_stack+0x30/0x40 [ 53.768225][ T4982] dump_stack_lvl+0xf4/0x15c [ 53.769317][ T4982] dump_stack+0x1c/0x5c [ 53.770298][ T4982] should_fail_ex+0x3cc/0x524 [ 53.771306][ T4982] __should_failslab+0xc0/0x11c [ 53.772428][ T4982] should_failslab+0x10/0x28 [ 53.773431][ T4982] __kmem_cache_alloc_node+0x7c/0x318 [ 53.774711][ T4982] kmalloc_trace+0x48/0x94 [ 53.775560][ T4982] __rdma_create_id+0x74/0x548 [ 53.776488][ T4982] cma_listen_on_dev+0x19c/0x61c [ 53.777531][ T4982] cma_add_one+0x59c/0xa80 [ 53.778459][ T4982] add_client_context+0x3fc/0x720 [ 53.779456][ T4982] enable_device_and_get+0x17c/0x3b0 [ 53.780528][ T4982] ib_register_device+0xdcc/0x1030 [ 53.781577][ T4982] siw_newlink+0x7c8/0xc28 [ 53.782496][ T4982] nldev_newlink+0x430/0x50c [ 53.783419][ T4982] rdma_nl_rcv+0x4fc/0x828 [ 53.784327][ T4982] netlink_unicast+0x5fc/0x80c [ 53.785343][ T4982] netlink_sendmsg+0x6f0/0x9d8 [ 53.786433][ T4982] ____sys_sendmsg+0x588/0x90c [ 53.787495][ T4982] __sys_sendmsg+0x288/0x374 [ 53.788501][ T4982] __arm64_sys_sendmsg+0x80/0x94 [ 53.789626][ T4982] invoke_syscall+0x98/0x290 [ 53.790659][ T4982] el0_svc_common+0x13c/0x258 [ 53.791652][ T4982] do_el0_svc+0x5c/0x134 [ 53.792588][ T4982] el0_svc+0x58/0x12c [ 53.793480][ T4982] el0t_64_sync_handler+0x84/0xf0 [ 53.794524][ T4982] el0t_64_sync+0x18c/0x190 [ 53.886429][ T4987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.094655][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 54.096802][ T4985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 54.166586][ T4994] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 54.185318][ T4994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.199332][ T5001] 0x000000000003-0x000000010001 : "" [ 54.203457][ T4996] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿ" or missing value [ 54.204814][ T5001] ftl_cs: FTL header corrupt! [ 54.205850][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 54.208349][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 54.209365][ T5001] FAULT_INJECTION: forcing a failure. [ 54.209365][ T5001] name failslab, interval 1, probability 0, space 0, times 0 [ 54.213581][ T5001] CPU: 0 PID: 5001 Comm: syz.0.180 Not tainted syzkaller #0 [ 54.215146][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.217331][ T5001] Call trace: [ 54.218037][ T5001] dump_backtrace+0x1c4/0x1f0 [ 54.219069][ T5001] show_stack+0x2c/0x3c [ 54.219931][ T5001] __dump_stack+0x30/0x40 [ 54.220885][ T5001] dump_stack_lvl+0xf4/0x15c [ 54.221807][ T5001] dump_stack+0x1c/0x5c [ 54.222794][ T5001] should_fail_ex+0x3cc/0x524 [ 54.223872][ T5001] __should_failslab+0xc0/0x11c [ 54.224957][ T5001] should_failslab+0x10/0x28 [ 54.225972][ T5001] __kmem_cache_alloc_node+0x7c/0x318 [ 54.227189][ T5001] __kmalloc_node_track_caller+0xb8/0x174 [ 54.228430][ T5001] kstrdup_const+0x90/0xdc [ 54.229400][ T5001] __kernfs_new_node+0xb0/0x5fc [ 54.230461][ T5001] kernfs_new_node+0x120/0x230 [ 54.231420][ T5001] kernfs_create_dir_ns+0x58/0x138 [ 54.232444][ T5001] sysfs_create_dir_ns+0x120/0x264 [ 54.233484][ T5001] kobject_add_internal+0x5a8/0xb18 [ 54.234593][ T5001] kobject_add+0x144/0x20c [ 54.235556][ T5001] blk_mq_register_hctx+0xc4/0x37c [ 54.236642][ T5001] blk_mq_sysfs_register+0x1b4/0x518 [ 54.237772][ T5001] blk_register_queue+0xc4/0x334 [ 54.238829][ T5001] device_add_disk+0x53c/0xe04 [ 54.239817][ T5001] add_mtd_blktrans_dev+0xc48/0x1090 [ 54.240996][ T5001] mtdblock_add_mtd+0x158/0x218 [ 54.242029][ T5001] blktrans_notify_add+0xa8/0xf8 [ 54.243097][ T5001] add_mtd_device+0xe40/0x13b4 [ 54.244177][ T5001] mtd_add_partition+0x224/0x3bc [ 54.244665][ T4994] bond1: (slave bridge1): making interface the new active one [ 54.245285][ T5001] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 54.248084][ T5001] mtdchar_ioctl+0x1238/0x1aec [ 54.249131][ T5001] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 54.250200][ T5001] __arm64_sys_ioctl+0x14c/0x1c8 [ 54.251178][ T5001] invoke_syscall+0x98/0x290 [ 54.252191][ T5001] el0_svc_common+0x13c/0x258 [ 54.253188][ T5001] do_el0_svc+0x5c/0x134 [ 54.254101][ T5001] el0_svc+0x58/0x12c [ 54.254977][ T5001] el0t_64_sync_handler+0x84/0xf0 [ 54.256066][ T5001] el0t_64_sync+0x18c/0x190 [ 54.258142][ T5001] kobject_add_internal failed for 0 (error: -12 parent: mq) [ 54.292526][ T4994] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 54.303614][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 54.314475][ T5004] device syzkaller0 entered promiscuous mode [ 54.525097][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 54.526828][ T5021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.190'. [ 54.529873][ T5021] FAULT_INJECTION: forcing a failure. [ 54.529873][ T5021] name failslab, interval 1, probability 0, space 0, times 0 [ 54.532250][ T5021] CPU: 0 PID: 5021 Comm: syz.0.190 Not tainted syzkaller #0 [ 54.533721][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.535778][ T5021] Call trace: [ 54.536389][ T5021] dump_backtrace+0x1c4/0x1f0 [ 54.537282][ T5021] show_stack+0x2c/0x3c [ 54.538132][ T5021] __dump_stack+0x30/0x40 [ 54.539007][ T5021] dump_stack_lvl+0xf4/0x15c [ 54.539940][ T5021] dump_stack+0x1c/0x5c [ 54.540862][ T5021] should_fail_ex+0x3cc/0x524 [ 54.541975][ T5021] __should_failslab+0xc0/0x11c [ 54.543110][ T5021] should_failslab+0x10/0x28 [ 54.544140][ T5021] __kmem_cache_alloc_node+0x7c/0x318 [ 54.545304][ T5021] __kmalloc+0xc4/0x180 [ 54.546243][ T5021] nft_obj_init+0x190/0x2b8 [ 54.547208][ T5021] nf_tables_newobj+0x884/0xeb4 [ 54.548291][ T5021] nfnetlink_rcv+0xc7c/0x1c54 [ 54.549245][ T5021] netlink_unicast+0x5fc/0x80c [ 54.550239][ T5021] netlink_sendmsg+0x6f0/0x9d8 [ 54.551309][ T5021] ____sys_sendmsg+0x588/0x90c [ 54.552355][ T5021] __sys_sendmsg+0x288/0x374 [ 54.553301][ T5021] __arm64_sys_sendmsg+0x80/0x94 [ 54.554268][ T5021] invoke_syscall+0x98/0x290 [ 54.555190][ T5021] el0_svc_common+0x13c/0x258 [ 54.556192][ T5021] do_el0_svc+0x5c/0x134 [ 54.557102][ T5021] el0_svc+0x58/0x12c [ 54.557921][ T5021] el0t_64_sync_handler+0x84/0xf0 [ 54.559012][ T5021] el0t_64_sync+0x18c/0x190 [ 54.748531][ T5026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.898578][ T5028] FAULT_INJECTION: forcing a failure. [ 54.898578][ T5028] name failslab, interval 1, probability 0, space 0, times 0 [ 54.901445][ T5028] CPU: 1 PID: 5028 Comm: syz.4.192 Not tainted syzkaller #0 [ 54.902929][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.905263][ T5028] Call trace: [ 54.906021][ T5028] dump_backtrace+0x1c4/0x1f0 [ 54.907122][ T5028] show_stack+0x2c/0x3c [ 54.907965][ T5028] __dump_stack+0x30/0x40 [ 54.908952][ T5028] dump_stack_lvl+0xf4/0x15c [ 54.909962][ T5028] dump_stack+0x1c/0x5c [ 54.910758][ T5028] should_fail_ex+0x3cc/0x524 [ 54.911664][ T5028] __should_failslab+0xc0/0x11c [ 54.912571][ T5028] should_failslab+0x10/0x28 [ 54.913406][ T5028] kmem_cache_alloc+0x88/0x310 [ 54.914426][ T5028] __sigqueue_alloc+0x3e0/0x4e4 [ 54.915398][ T5028] __send_signal_locked+0x1d8/0xc88 [ 54.916495][ T5028] do_notify_parent+0x9bc/0xbe4 [ 54.917510][ T5028] release_task+0x11d0/0x1510 [ 54.918515][ T5028] do_exit+0x10bc/0x19ac [ 54.919460][ T5028] do_group_exit+0x198/0x238 [ 54.920494][ T5028] get_signal+0x11f4/0x133c [ 54.921417][ T5028] do_notify_resume+0x364/0x2c84 [ 54.922411][ T5028] el0_svc+0x9c/0x12c [ 54.923190][ T5028] el0t_64_sync_handler+0x84/0xf0 [ 54.924240][ T5028] el0t_64_sync+0x18c/0x190 [ 54.941207][ T5031] 0x000000000003-0x000000010001 : "" [ 54.949094][ T5031] ftl_cs: FTL header corrupt! [ 54.956920][ T5031] FAULT_INJECTION: forcing a failure. [ 54.956920][ T5031] name failslab, interval 1, probability 0, space 0, times 0 [ 54.962312][ T5031] CPU: 1 PID: 5031 Comm: syz.2.194 Not tainted syzkaller #0 [ 54.963918][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.966172][ T5031] Call trace: [ 54.966908][ T5031] dump_backtrace+0x1c4/0x1f0 [ 54.967969][ T5031] show_stack+0x2c/0x3c [ 54.968833][ T5031] __dump_stack+0x30/0x40 [ 54.969839][ T5031] dump_stack_lvl+0xf4/0x15c [ 54.970903][ T5031] dump_stack+0x1c/0x5c [ 54.971816][ T5031] should_fail_ex+0x3cc/0x524 [ 54.972862][ T5031] __should_failslab+0xc0/0x11c [ 54.973907][ T5031] should_failslab+0x10/0x28 [ 54.974936][ T5031] __kmem_cache_alloc_node+0x7c/0x318 [ 54.976108][ T5031] __kmalloc_node_track_caller+0xb8/0x174 [ 54.977297][ T5031] kvasprintf+0x12c/0x204 [ 54.978174][ T5031] kvasprintf_const+0x154/0x2e4 [ 54.979167][ T5031] kobject_set_name_vargs+0xd8/0x1c8 [ 54.980247][ T5031] kobject_add+0x108/0x20c [ 54.981210][ T5031] blk_mq_register_hctx+0x1b4/0x37c [ 54.982323][ T5031] blk_mq_sysfs_register+0x1b4/0x518 [ 54.983433][ T5031] blk_register_queue+0xc4/0x334 [ 54.984477][ T5031] device_add_disk+0x53c/0xe04 [ 54.985437][ T5031] add_mtd_blktrans_dev+0xc48/0x1090 [ 54.986523][ T5031] mtdblock_add_mtd+0x158/0x218 [ 54.987563][ T5031] blktrans_notify_add+0xa8/0xf8 [ 54.988583][ T5031] add_mtd_device+0xe40/0x13b4 [ 54.989560][ T5031] mtd_add_partition+0x224/0x3bc [ 54.990605][ T5031] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 54.991683][ T5031] mtdchar_ioctl+0x1238/0x1aec [ 54.992687][ T5031] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 54.993811][ T5031] __arm64_sys_ioctl+0x14c/0x1c8 [ 54.994904][ T5031] invoke_syscall+0x98/0x290 [ 54.995922][ T5031] el0_svc_common+0x13c/0x258 [ 54.996890][ T5031] do_el0_svc+0x5c/0x134 [ 54.997783][ T5031] el0_svc+0x58/0x12c [ 54.998662][ T5031] el0t_64_sync_handler+0x84/0xf0 [ 54.999759][ T5031] el0t_64_sync+0x18c/0x190 [ 55.008906][ T5036] set_capacity_and_notify: 11 callbacks suppressed [ 55.008916][ T5036] loop0: detected capacity change from 0 to 512 [ 55.015789][ T5036] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿ" or missing value [ 55.028845][ T5038] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 55.028887][ T5031] kobject: can not set name properly! [ 55.047556][ T5038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.069002][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 55.072367][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 55.083340][ T5038] bond1: (slave bridge1): making interface the new active one [ 55.085895][ T5038] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 55.087790][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 55.156737][ T5046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 55.208202][ T5050] device syzkaller0 entered promiscuous mode [ 55.321614][ T5053] loop2: detected capacity change from 0 to 2048 [ 55.607445][ T5053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.705332][ T5061] siw: device registration error -23 [ 55.757667][ T5064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 55.872448][ T5065] loop3: detected capacity change from 0 to 2048 [ 56.133395][ T5067] 0x000000000003-0x000000010001 : "" [ 56.139216][ T5065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.158808][ T5067] ftl_cs: FTL header corrupt! [ 56.165868][ T5069] loop0: detected capacity change from 0 to 512 [ 56.167751][ T5069] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿ" or missing value [ 56.167932][ T5073] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 56.173036][ T5067] FAULT_INJECTION: forcing a failure. [ 56.173036][ T5067] name failslab, interval 1, probability 0, space 0, times 0 [ 56.175634][ T5067] CPU: 1 PID: 5067 Comm: syz.4.209 Not tainted syzkaller #0 [ 56.177024][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 56.177694][ T5073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.179021][ T5067] Call trace: [ 56.179029][ T5067] dump_backtrace+0x1c4/0x1f0 [ 56.182141][ T5067] show_stack+0x2c/0x3c [ 56.183025][ T5067] __dump_stack+0x30/0x40 [ 56.183940][ T5067] dump_stack_lvl+0xf4/0x15c [ 56.184932][ T5067] dump_stack+0x1c/0x5c [ 56.185793][ T5067] should_fail_ex+0x3cc/0x524 [ 56.186878][ T5067] __should_failslab+0xc0/0x11c [ 56.187997][ T5067] should_failslab+0x10/0x28 [ 56.188728][ T5073] bond1: (slave bridge1): making interface the new active one [ 56.188943][ T5067] __kmem_cache_alloc_node+0x7c/0x318 [ 56.191664][ T5067] __kmalloc_node_track_caller+0xb8/0x174 [ 56.191862][ T5073] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 56.192915][ T5067] kvasprintf+0x12c/0x204 [ 56.195696][ T5067] kvasprintf_const+0x154/0x2e4 [ 56.196823][ T5067] kobject_set_name_vargs+0xd8/0x1c8 [ 56.197963][ T5067] kobject_add+0x108/0x20c [ 56.198848][ T5067] blk_mq_register_hctx+0xc4/0x37c [ 56.199986][ T5067] blk_mq_sysfs_register+0x1b4/0x518 [ 56.201137][ T5067] blk_register_queue+0xc4/0x334 [ 56.202229][ T5067] device_add_disk+0x53c/0xe04 [ 56.203291][ T5067] add_mtd_blktrans_dev+0xc48/0x1090 [ 56.204437][ T5067] mtdblock_add_mtd+0x158/0x218 [ 56.205513][ T5067] blktrans_notify_add+0xa8/0xf8 [ 56.206553][ T5067] add_mtd_device+0xe40/0x13b4 [ 56.207663][ T5067] mtd_add_partition+0x224/0x3bc [ 56.208791][ T5067] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 56.209930][ T5067] mtdchar_ioctl+0x1238/0x1aec [ 56.210923][ T5067] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 56.212023][ T5067] __arm64_sys_ioctl+0x14c/0x1c8 [ 56.213000][ T5067] invoke_syscall+0x98/0x290 [ 56.213875][ T5067] el0_svc_common+0x13c/0x258 [ 56.214903][ T5067] do_el0_svc+0x5c/0x134 [ 56.215846][ T5067] el0_svc+0x58/0x12c [ 56.216817][ T5067] el0t_64_sync_handler+0x84/0xf0 [ 56.217890][ T5067] el0t_64_sync+0x18c/0x190 [ 56.219942][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 56.252469][ T4324] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.312112][ T5067] kobject: can not set name properly! [ 56.394659][ T5089] loop1: detected capacity change from 0 to 512 [ 56.648271][ T5087] Invalid ELF header magic: != ELF [ 57.028973][ T5098] loop3: detected capacity change from 0 to 2048 [ 57.037480][ T5095] loop4: detected capacity change from 0 to 2048 [ 57.038685][ T5098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.048050][ T5095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.096572][ T5101] device syzkaller0 entered promiscuous mode [ 57.263259][ T5107] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 57.282621][ T5107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.296390][ T5107] bond2: (slave bridge2): making interface the new active one [ 57.299206][ T5107] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 57.301739][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 57.434732][ T5122] loop0: detected capacity change from 0 to 512 [ 57.605572][ T5120] Invalid ELF header magic: != ELF [ 57.658346][ T5126] loop2: detected capacity change from 0 to 512 [ 57.675423][ T5127] FAULT_INJECTION: forcing a failure. [ 57.675423][ T5127] name failslab, interval 1, probability 0, space 0, times 0 [ 57.677942][ T5127] CPU: 0 PID: 5127 Comm: syz.3.232 Not tainted syzkaller #0 [ 57.679320][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.681539][ T5127] Call trace: [ 57.682224][ T5127] dump_backtrace+0x1c4/0x1f0 [ 57.683296][ T5127] show_stack+0x2c/0x3c [ 57.684240][ T5127] __dump_stack+0x30/0x40 [ 57.685201][ T5127] dump_stack_lvl+0xf4/0x15c [ 57.686238][ T5127] dump_stack+0x1c/0x5c [ 57.687165][ T5127] should_fail_ex+0x3cc/0x524 [ 57.688223][ T5127] __should_failslab+0xc0/0x11c [ 57.689291][ T5127] should_failslab+0x10/0x28 [ 57.690286][ T5127] slab_pre_alloc_hook+0x6c/0x31c [ 57.691401][ T5127] kmem_cache_alloc_lru+0x60/0x284 [ 57.692630][ T5127] sock_alloc_inode+0x2c/0xcc [ 57.693676][ T5127] new_inode_pseudo+0x68/0x1cc [ 57.694760][ T5127] __sock_create+0x138/0x8a8 [ 57.695704][ T5127] __sys_socket+0xc0/0x1b0 [ 57.696655][ T5127] __arm64_sys_socket+0x7c/0x94 [ 57.697722][ T5127] invoke_syscall+0x98/0x290 [ 57.698767][ T5127] el0_svc_common+0x13c/0x258 [ 57.699711][ T5127] do_el0_svc+0x5c/0x134 [ 57.700657][ T5127] el0_svc+0x58/0x12c [ 57.701675][ T5127] el0t_64_sync_handler+0x84/0xf0 [ 57.702732][ T5127] el0t_64_sync+0x18c/0x190 [ 57.718033][ T5129] loop0: detected capacity change from 0 to 128 [ 57.768894][ T5127] socket: no more sockets [ 57.804979][ T5135] device syzkaller0 entered promiscuous mode [ 57.857582][ T5140] bio_check_eod: 610 callbacks suppressed [ 57.857593][ T5140] syz.0.234: attempt to access beyond end of device [ 57.857593][ T5140] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 57.869904][ T5140] syz.0.234: attempt to access beyond end of device [ 57.869904][ T5140] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 57.878655][ T5140] syz.0.234: attempt to access beyond end of device [ 57.878655][ T5140] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 57.890873][ T5140] syz.0.234: attempt to access beyond end of device [ 57.890873][ T5140] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 57.903427][ T5143] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 57.905547][ T5140] syz.0.234: attempt to access beyond end of device [ 57.905547][ T5140] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 57.908321][ T5140] syz.0.234: attempt to access beyond end of device [ 57.908321][ T5140] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 57.930322][ T5143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.949108][ T5143] bond2: (slave bridge2): making interface the new active one [ 57.950997][ T5140] syz.0.234: attempt to access beyond end of device [ 57.950997][ T5140] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 57.953610][ T5140] syz.0.234: attempt to access beyond end of device [ 57.953610][ T5140] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 57.956283][ T5140] syz.0.234: attempt to access beyond end of device [ 57.956283][ T5140] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 57.958884][ T5140] syz.0.234: attempt to access beyond end of device [ 57.958884][ T5140] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 57.970802][ T5129] ip_tables: iptables: counters copy to user failed while replacing table [ 57.975464][ T5143] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 57.977641][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 58.032692][ T5152] tap0: tun_chr_ioctl cmd 1074025694 [ 58.487249][ T5158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.490427][ T5160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.627685][ T5154] Invalid ELF header magic: != ELF [ 59.137141][ T5170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.184368][ T5174] FAULT_INJECTION: forcing a failure. [ 59.184368][ T5174] name failslab, interval 1, probability 0, space 0, times 0 [ 59.184977][ T5172] device syzkaller0 entered promiscuous mode [ 59.192968][ T5174] CPU: 1 PID: 5174 Comm: syz.3.250 Not tainted syzkaller #0 [ 59.194516][ T5174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.196396][ T5174] Call trace: [ 59.197072][ T5174] dump_backtrace+0x1c4/0x1f0 [ 59.198109][ T5174] show_stack+0x2c/0x3c [ 59.199032][ T5174] __dump_stack+0x30/0x40 [ 59.199990][ T5174] dump_stack_lvl+0xf4/0x15c [ 59.200942][ T5174] dump_stack+0x1c/0x5c [ 59.201850][ T5174] should_fail_ex+0x3cc/0x524 [ 59.202809][ T5174] __should_failslab+0xc0/0x11c [ 59.203770][ T5174] should_failslab+0x10/0x28 [ 59.204663][ T5174] slab_pre_alloc_hook+0x6c/0x31c [ 59.205661][ T5174] kmem_cache_alloc_lru+0x60/0x284 [ 59.206699][ T5174] sock_alloc_inode+0x2c/0xcc [ 59.207634][ T5174] new_inode_pseudo+0x68/0x1cc [ 59.208713][ T5174] __sock_create+0x138/0x8a8 [ 59.209687][ T5174] __sys_socket+0xc0/0x1b0 [ 59.210601][ T5174] __arm64_sys_socket+0x7c/0x94 [ 59.211579][ T5174] invoke_syscall+0x98/0x290 [ 59.212586][ T5174] el0_svc_common+0x13c/0x258 [ 59.213537][ T5174] do_el0_svc+0x5c/0x134 [ 59.214447][ T5174] el0_svc+0x58/0x12c [ 59.215295][ T5174] el0t_64_sync_handler+0x84/0xf0 [ 59.216347][ T5174] el0t_64_sync+0x18c/0x190 [ 59.242476][ T5179] __nla_validate_parse: 12 callbacks suppressed [ 59.242490][ T5179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 59.250141][ T5174] socket: no more sockets [ 59.282424][ T5182] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 59.296348][ T5182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.354495][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 59.357108][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 59.387637][ T5182] bond2: (slave bridge2): making interface the new active one [ 59.390599][ T5182] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 59.392767][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 59.441403][ T5192] 0x000000000003-0x000000010001 : "" [ 59.447397][ T5192] ftl_cs: FTL header corrupt! [ 59.449954][ T5188] Invalid ELF header magic: != ELF [ 59.457163][ T5192] FAULT_INJECTION: forcing a failure. [ 59.457163][ T5192] name failslab, interval 1, probability 0, space 0, times 0 [ 59.460256][ T5190] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 59.463290][ T5190] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 59.466437][ T5192] CPU: 1 PID: 5192 Comm: syz.1.258 Not tainted syzkaller #0 [ 59.467773][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.469740][ T5192] Call trace: [ 59.470407][ T5192] dump_backtrace+0x1c4/0x1f0 [ 59.471399][ T5192] show_stack+0x2c/0x3c [ 59.472307][ T5192] __dump_stack+0x30/0x40 [ 59.473219][ T5192] dump_stack_lvl+0xf4/0x15c [ 59.474131][ T5192] dump_stack+0x1c/0x5c [ 59.474986][ T5192] should_fail_ex+0x3cc/0x524 [ 59.476038][ T5192] __should_failslab+0xc0/0x11c [ 59.477001][ T5192] should_failslab+0x10/0x28 [ 59.477968][ T5192] kmem_cache_alloc+0x88/0x310 [ 59.478929][ T5192] __kernfs_new_node+0xec/0x5fc [ 59.479950][ T5192] kernfs_new_node+0x120/0x230 [ 59.480957][ T5192] kernfs_create_dir_ns+0x58/0x138 [ 59.481972][ T5192] sysfs_create_dir_ns+0x120/0x264 [ 59.483002][ T5192] kobject_add_internal+0x5a8/0xb18 [ 59.484005][ T5192] kobject_add+0x144/0x20c [ 59.484919][ T5192] blk_mq_register_hctx+0xc4/0x37c [ 59.486017][ T5192] blk_mq_sysfs_register+0x1b4/0x518 [ 59.487197][ T5192] blk_register_queue+0xc4/0x334 [ 59.488314][ T5192] device_add_disk+0x53c/0xe04 [ 59.489243][ T5192] add_mtd_blktrans_dev+0xc48/0x1090 [ 59.490236][ T5192] mtdblock_add_mtd+0x158/0x218 [ 59.491270][ T5192] blktrans_notify_add+0xa8/0xf8 [ 59.492339][ T5192] add_mtd_device+0xe40/0x13b4 [ 59.493417][ T5192] mtd_add_partition+0x224/0x3bc [ 59.494508][ T5192] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 59.495582][ T5192] mtdchar_ioctl+0x1238/0x1aec [ 59.496728][ T5192] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 59.497832][ T5192] __arm64_sys_ioctl+0x14c/0x1c8 [ 59.498954][ T5192] invoke_syscall+0x98/0x290 [ 59.499906][ T5192] el0_svc_common+0x13c/0x258 [ 59.500842][ T5192] do_el0_svc+0x5c/0x134 [ 59.501690][ T5192] el0_svc+0x58/0x12c [ 59.502586][ T5192] el0t_64_sync_handler+0x84/0xf0 [ 59.503635][ T5192] el0t_64_sync+0x18c/0x190 [ 59.508456][ T5190] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #13: comm syz.3.257: iget: bad i_size value: 12154757448730 [ 59.514204][ T5190] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.257: couldn't read orphan inode 13 (err -117) [ 59.518111][ T5190] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.518543][ T5192] kobject_add_internal failed for 0 (error: -12 parent: mq) [ 59.576681][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 59.617820][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 59.620927][ T5200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.259'. [ 59.721502][ T5203] syz.3.257 (5203): drop_caches: 2 [ 60.050179][ T5212] FAULT_INJECTION: forcing a failure. [ 60.050179][ T5212] name failslab, interval 1, probability 0, space 0, times 0 [ 60.053142][ T5212] CPU: 0 PID: 5212 Comm: syz.1.265 Not tainted syzkaller #0 [ 60.054566][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.056580][ T5212] Call trace: [ 60.057282][ T5212] dump_backtrace+0x1c4/0x1f0 [ 60.058442][ T5212] show_stack+0x2c/0x3c [ 60.059277][ T5212] __dump_stack+0x30/0x40 [ 60.060170][ T5212] dump_stack_lvl+0xf4/0x15c [ 60.061110][ T5212] dump_stack+0x1c/0x5c [ 60.062021][ T5212] should_fail_ex+0x3cc/0x524 [ 60.063011][ T5212] __should_failslab+0xc0/0x11c [ 60.064059][ T5212] should_failslab+0x10/0x28 [ 60.065047][ T5212] slab_pre_alloc_hook+0x6c/0x31c [ 60.066122][ T5212] kmem_cache_alloc_lru+0x60/0x284 [ 60.067168][ T5212] sock_alloc_inode+0x2c/0xcc [ 60.068168][ T5212] new_inode_pseudo+0x68/0x1cc [ 60.069196][ T5212] __sock_create+0x138/0x8a8 [ 60.070188][ T5212] __sys_socket+0xc0/0x1b0 [ 60.071095][ T5212] __arm64_sys_socket+0x7c/0x94 [ 60.072121][ T5212] invoke_syscall+0x98/0x290 [ 60.073117][ T5212] el0_svc_common+0x13c/0x258 [ 60.074162][ T5212] do_el0_svc+0x5c/0x134 [ 60.075107][ T5212] el0_svc+0x58/0x12c [ 60.075980][ T5212] el0t_64_sync_handler+0x84/0xf0 [ 60.076964][ T5212] el0t_64_sync+0x18c/0x190 [ 60.081853][ T5212] socket: no more sockets [ 60.103558][ T5214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.266'. [ 60.146718][ T5218] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 60.155535][ T5218] 8021q: adding VLAN 0 to HW filter on device bond3 [ 60.161907][ T5218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 60.178692][ T5218] bond3: (slave bridge3): making interface the new active one [ 60.186604][ T5218] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 60.188549][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 60.212694][ T5221] device syzkaller0 entered promiscuous mode [ 60.253662][ T5225] 0x000000000003-0x000000010001 : "" [ 60.268635][ T5225] ftl_cs: FTL header corrupt! [ 60.276683][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 60.293270][ T5225] FAULT_INJECTION: forcing a failure. [ 60.293270][ T5225] name failslab, interval 1, probability 0, space 0, times 0 [ 60.296291][ T5225] CPU: 0 PID: 5225 Comm: syz.1.271 Not tainted syzkaller #0 [ 60.297860][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.299857][ T5225] Call trace: [ 60.300557][ T5225] dump_backtrace+0x1c4/0x1f0 [ 60.301549][ T5225] show_stack+0x2c/0x3c [ 60.302383][ T5225] __dump_stack+0x30/0x40 [ 60.303267][ T5225] dump_stack_lvl+0xf4/0x15c [ 60.304276][ T5225] dump_stack+0x1c/0x5c [ 60.305138][ T5225] should_fail_ex+0x3cc/0x524 [ 60.306165][ T5225] __should_failslab+0xc0/0x11c [ 60.307169][ T5225] should_failslab+0x10/0x28 [ 60.308168][ T5225] kmem_cache_alloc+0x88/0x310 [ 60.309228][ T5225] __kernfs_new_node+0xec/0x5fc [ 60.310346][ T5225] kernfs_new_node+0x120/0x230 [ 60.311411][ T5225] __kernfs_create_file+0x60/0x2e0 [ 60.312484][ T5225] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 60.313612][ T5225] internal_create_group+0x3e8/0xb24 [ 60.314750][ T5225] sysfs_create_groups+0x60/0x134 [ 60.315776][ T5225] kobject_add_internal+0x5e4/0xb18 [ 60.316885][ T5225] kobject_add+0x144/0x20c [ 60.317803][ T5225] blk_register_queue+0x84/0x334 [ 60.318880][ T5225] device_add_disk+0x53c/0xe04 [ 60.319957][ T5225] add_mtd_blktrans_dev+0xc48/0x1090 [ 60.321050][ T5225] mtdblock_add_mtd+0x158/0x218 [ 60.321960][ T5225] blktrans_notify_add+0xa8/0xf8 [ 60.322969][ T5225] add_mtd_device+0xe40/0x13b4 [ 60.324000][ T5225] mtd_add_partition+0x224/0x3bc [ 60.325129][ T5225] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 60.326258][ T5225] mtdchar_ioctl+0x1238/0x1aec [ 60.327247][ T5225] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 60.328270][ T5225] __arm64_sys_ioctl+0x14c/0x1c8 [ 60.329364][ T5225] invoke_syscall+0x98/0x290 [ 60.330298][ T5225] el0_svc_common+0x13c/0x258 [ 60.331109][ T5225] do_el0_svc+0x5c/0x134 [ 60.331942][ T5225] el0_svc+0x58/0x12c [ 60.332732][ T5225] el0t_64_sync_handler+0x84/0xf0 [ 60.333911][ T5225] el0t_64_sync+0x18c/0x190 [ 60.342708][ T5225] kobject_add_internal failed for queue (error: -12 parent: mtdblock8) [ 60.357488][ T5228] TC_ACT_REPEAT abuse ? [ 60.387155][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 60.388980][ T5230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.273'. [ 60.467894][ T5236] set_capacity_and_notify: 7 callbacks suppressed [ 60.467904][ T5236] loop1: detected capacity change from 0 to 512 [ 60.516890][ T5239] FAULT_INJECTION: forcing a failure. [ 60.516890][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 60.519883][ T5239] CPU: 0 PID: 5239 Comm: syz.2.277 Not tainted syzkaller #0 [ 60.521372][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.523470][ T5239] Call trace: [ 60.524244][ T5239] dump_backtrace+0x1c4/0x1f0 [ 60.525317][ T5239] show_stack+0x2c/0x3c [ 60.526208][ T5239] __dump_stack+0x30/0x40 [ 60.527130][ T5239] dump_stack_lvl+0xf4/0x15c [ 60.528074][ T5239] dump_stack+0x1c/0x5c [ 60.528929][ T5239] should_fail_ex+0x3cc/0x524 [ 60.529939][ T5239] __should_failslab+0xc0/0x11c [ 60.530990][ T5239] should_failslab+0x10/0x28 [ 60.531992][ T5239] kmem_cache_alloc+0x88/0x310 [ 60.533025][ T5239] security_inode_alloc+0x38/0x11c [ 60.534146][ T5239] inode_init_always+0x6c8/0xb28 [ 60.535315][ T5239] new_inode_pseudo+0x7c/0x1cc [ 60.536327][ T5239] __sock_create+0x138/0x8a8 [ 60.537155][ T5239] __sys_socket+0xc0/0x1b0 [ 60.538063][ T5239] __arm64_sys_socket+0x7c/0x94 [ 60.539161][ T5239] invoke_syscall+0x98/0x290 [ 60.540179][ T5239] el0_svc_common+0x13c/0x258 [ 60.541112][ T5239] do_el0_svc+0x5c/0x134 [ 60.542028][ T5239] el0_svc+0x58/0x12c [ 60.542912][ T5239] el0t_64_sync_handler+0x84/0xf0 [ 60.543906][ T5239] el0t_64_sync+0x18c/0x190 [ 60.560184][ T5239] socket: no more sockets [ 60.609014][ T5242] loop3: detected capacity change from 0 to 8192 [ 60.612995][ T5246] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 60.617547][ T5242] ======================================================= [ 60.617547][ T5242] WARNING: The mand mount option has been deprecated and [ 60.617547][ T5242] and is ignored by this kernel. Remove the mand [ 60.617547][ T5242] option from the mount to silence this warning. [ 60.617547][ T5242] ======================================================= [ 60.677106][ T5246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.711726][ T5249] Invalid ELF header magic: != ELF [ 60.720123][ T5256] 0x000000000003-0x000000010001 : "" [ 60.722934][ T5256] ftl_cs: FTL header corrupt! [ 60.738107][ T5246] bond2: (slave bridge2): making interface the new active one [ 60.750923][ T5254] loop4: detected capacity change from 0 to 512 [ 60.753979][ T5246] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 60.755841][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 60.782378][ T5254] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 60.784416][ T5254] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 60.785319][ T5263] device syzkaller0 entered promiscuous mode [ 60.786869][ T5254] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #13: comm syz.4.283: iget: bad i_size value: 12154757448730 [ 60.791542][ T5254] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.283: couldn't read orphan inode 13 (err -117) [ 60.803975][ T5254] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 60.922615][ T5269] syz.4.283 (5269): drop_caches: 2 [ 60.941244][ T5271] loop2: detected capacity change from 0 to 512 [ 60.991505][ T5273] loop1: detected capacity change from 0 to 512 [ 61.109150][ T5277] FAULT_INJECTION: forcing a failure. [ 61.109150][ T5277] name failslab, interval 1, probability 0, space 0, times 0 [ 61.116511][ T5277] CPU: 0 PID: 5277 Comm: syz.1.291 Not tainted syzkaller #0 [ 61.118022][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 61.120319][ T5277] Call trace: [ 61.121047][ T5277] dump_backtrace+0x1c4/0x1f0 [ 61.122052][ T5277] show_stack+0x2c/0x3c [ 61.122994][ T5277] __dump_stack+0x30/0x40 [ 61.123893][ T5277] dump_stack_lvl+0xf4/0x15c [ 61.124784][ T5277] dump_stack+0x1c/0x5c [ 61.125563][ T5277] should_fail_ex+0x3cc/0x524 [ 61.126486][ T5277] __should_failslab+0xc0/0x11c [ 61.127582][ T5277] should_failslab+0x10/0x28 [ 61.128678][ T5277] slab_pre_alloc_hook+0x6c/0x31c [ 61.129696][ T5277] kmem_cache_alloc_lru+0x60/0x284 [ 61.130742][ T5277] sock_alloc_inode+0x2c/0xcc [ 61.131692][ T5277] new_inode_pseudo+0x68/0x1cc [ 61.132628][ T5277] __sock_create+0x138/0x8a8 [ 61.133645][ T5277] __sys_socket+0xc0/0x1b0 [ 61.134632][ T5277] __arm64_sys_socket+0x7c/0x94 [ 61.135697][ T5277] invoke_syscall+0x98/0x290 [ 61.136661][ T5277] el0_svc_common+0x13c/0x258 [ 61.137678][ T5277] do_el0_svc+0x5c/0x134 [ 61.138545][ T5277] el0_svc+0x58/0x12c [ 61.139411][ T5277] el0t_64_sync_handler+0x84/0xf0 [ 61.140503][ T5277] el0t_64_sync+0x18c/0x190 [ 61.143708][ T5277] socket: no more sockets [ 61.474117][ T4333] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 61.481717][ T4333] FAT-fs (loop3): Filesystem has been set read-only [ 61.557476][ T5289] 0x000000000003-0x000000010001 : "" [ 61.564977][ T5289] ftl_cs: FTL header corrupt! [ 61.582302][ T5289] FAULT_INJECTION: forcing a failure. [ 61.582302][ T5289] name failslab, interval 1, probability 0, space 0, times 0 [ 61.584775][ T5289] CPU: 1 PID: 5289 Comm: syz.0.296 Not tainted syzkaller #0 [ 61.586108][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 61.587997][ T5289] Call trace: [ 61.588586][ T5289] dump_backtrace+0x1c4/0x1f0 [ 61.589454][ T5289] show_stack+0x2c/0x3c [ 61.590263][ T5289] __dump_stack+0x30/0x40 [ 61.591114][ T5289] dump_stack_lvl+0xf4/0x15c [ 61.591998][ T5289] dump_stack+0x1c/0x5c [ 61.592773][ T5289] should_fail_ex+0x3cc/0x524 [ 61.593718][ T5289] __should_failslab+0xc0/0x11c [ 61.594675][ T5289] should_failslab+0x10/0x28 [ 61.595605][ T5289] kmem_cache_alloc+0x88/0x310 [ 61.596602][ T5289] __kernfs_new_node+0xec/0x5fc [ 61.597547][ T5289] kernfs_new_node+0x120/0x230 [ 61.598464][ T5289] __kernfs_create_file+0x60/0x2e0 [ 61.599462][ T5289] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 61.600515][ T5289] internal_create_group+0x3e8/0xb24 [ 61.601509][ T5289] sysfs_create_groups+0x60/0x134 [ 61.602647][ T5289] kobject_add_internal+0x5e4/0xb18 [ 61.603854][ T5289] kobject_add+0x144/0x20c [ 61.604877][ T5289] blk_mq_register_hctx+0xc4/0x37c [ 61.605966][ T5289] blk_mq_sysfs_register+0x1b4/0x518 [ 61.607074][ T5289] blk_register_queue+0xc4/0x334 [ 61.608087][ T5289] device_add_disk+0x53c/0xe04 [ 61.609082][ T5289] add_mtd_blktrans_dev+0xc48/0x1090 [ 61.610145][ T5289] mtdblock_add_mtd+0x158/0x218 [ 61.611121][ T5289] blktrans_notify_add+0xa8/0xf8 [ 61.612217][ T5289] add_mtd_device+0xe40/0x13b4 [ 61.613261][ T5289] mtd_add_partition+0x224/0x3bc [ 61.614322][ T5289] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 61.615311][ T5289] mtdchar_ioctl+0x1238/0x1aec [ 61.616258][ T5289] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 61.617252][ T5289] __arm64_sys_ioctl+0x14c/0x1c8 [ 61.618229][ T5289] invoke_syscall+0x98/0x290 [ 61.619153][ T5289] el0_svc_common+0x13c/0x258 [ 61.620007][ T5289] do_el0_svc+0x5c/0x134 [ 61.620876][ T5289] el0_svc+0x58/0x12c [ 61.621675][ T5289] el0t_64_sync_handler+0x84/0xf0 [ 61.622621][ T5289] el0t_64_sync+0x18c/0x190 [ 61.627883][ T5289] kobject_add_internal failed for 0 (error: -12 parent: mq) [ 61.627997][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 61.667828][ T5292] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 61.682998][ T5292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.693591][ T5298] FAULT_INJECTION: forcing a failure. [ 61.693591][ T5298] name fail_futex, interval 1, probability 0, space 0, times 1 [ 61.695638][ T5292] bond1: (slave bridge1): making interface the new active one [ 61.698610][ T5298] CPU: 1 PID: 5298 Comm: syz.3.299 Not tainted syzkaller #0 [ 61.699870][ T5292] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 61.699906][ T5298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 61.701846][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 61.703893][ T5298] Call trace: [ 61.703901][ T5298] dump_backtrace+0x1c4/0x1f0 [ 61.706941][ T5298] show_stack+0x2c/0x3c [ 61.707814][ T5298] __dump_stack+0x30/0x40 [ 61.708717][ T5298] dump_stack_lvl+0xf4/0x15c [ 61.709744][ T5298] dump_stack+0x1c/0x5c [ 61.710650][ T5298] should_fail_ex+0x3cc/0x524 [ 61.711611][ T5298] should_fail+0x14/0x24 [ 61.712476][ T5298] get_futex_key+0x904/0xec0 [ 61.713480][ T5298] futex_wait_setup+0xbc/0x320 [ 61.714473][ T5298] futex_wait+0x178/0x488 [ 61.715451][ T5298] do_futex+0x2e8/0x340 [ 61.716343][ T5298] __arm64_sys_futex+0x390/0x414 [ 61.717399][ T5298] invoke_syscall+0x98/0x290 [ 61.718418][ T5298] el0_svc_common+0x13c/0x258 [ 61.719483][ T5298] do_el0_svc+0x5c/0x134 [ 61.720377][ T5298] el0_svc+0x58/0x12c [ 61.721269][ T5298] el0t_64_sync_handler+0x84/0xf0 [ 61.722346][ T5298] el0t_64_sync+0x18c/0x190 [ 61.773957][ T5303] loop4: detected capacity change from 0 to 512 [ 61.797735][ T5305] loop3: detected capacity change from 0 to 512 [ 61.921412][ T5315] FAULT_INJECTION: forcing a failure. [ 61.921412][ T5315] name failslab, interval 1, probability 0, space 0, times 0 [ 61.924143][ T5315] CPU: 1 PID: 5315 Comm: syz.0.305 Not tainted syzkaller #0 [ 61.925663][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 61.927517][ T5315] Call trace: [ 61.928071][ T5315] dump_backtrace+0x1c4/0x1f0 [ 61.928924][ T5315] show_stack+0x2c/0x3c [ 61.929728][ T5315] __dump_stack+0x30/0x40 [ 61.930615][ T5315] dump_stack_lvl+0xf4/0x15c [ 61.931577][ T5315] dump_stack+0x1c/0x5c [ 61.932432][ T5315] should_fail_ex+0x3cc/0x524 [ 61.933346][ T5315] __should_failslab+0xc0/0x11c [ 61.934420][ T5315] should_failslab+0x10/0x28 [ 61.935399][ T5315] slab_pre_alloc_hook+0x6c/0x31c [ 61.936455][ T5315] kmem_cache_alloc_lru+0x60/0x284 [ 61.937637][ T5315] sock_alloc_inode+0x2c/0xcc [ 61.938700][ T5315] new_inode_pseudo+0x68/0x1cc [ 61.939709][ T5315] __sock_create+0x138/0x8a8 [ 61.940598][ T5315] __sys_socket+0xc0/0x1b0 [ 61.941442][ T5315] __arm64_sys_socket+0x7c/0x94 [ 61.942369][ T5315] invoke_syscall+0x98/0x290 [ 61.943307][ T5315] el0_svc_common+0x13c/0x258 [ 61.944198][ T5315] do_el0_svc+0x5c/0x134 [ 61.945001][ T5315] el0_svc+0x58/0x12c [ 61.945756][ T5315] el0t_64_sync_handler+0x84/0xf0 [ 61.946773][ T5315] el0t_64_sync+0x18c/0x190 [ 61.955344][ T5315] socket: no more sockets [ 61.962532][ T5313] Invalid ELF header magic: != ELF [ 62.003421][ T5320] loop0: detected capacity change from 0 to 512 [ 62.033337][ T5320] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 62.035554][ T5320] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 62.038271][ T5320] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.307: iget: bad i_size value: 12154757448730 [ 62.041764][ T5320] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.307: couldn't read orphan inode 13 (err -117) [ 62.044458][ T5320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.060737][ T5325] 0x000000000003-0x000000010001 : "" [ 62.074895][ T5325] ftl_cs: FTL header corrupt! [ 62.077005][ T5325] FAULT_INJECTION: forcing a failure. [ 62.077005][ T5325] name failslab, interval 1, probability 0, space 0, times 0 [ 62.080076][ T5325] CPU: 0 PID: 5325 Comm: syz.1.309 Not tainted syzkaller #0 [ 62.081522][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 62.083509][ T5325] Call trace: [ 62.084214][ T5325] dump_backtrace+0x1c4/0x1f0 [ 62.085205][ T5325] show_stack+0x2c/0x3c [ 62.086105][ T5325] __dump_stack+0x30/0x40 [ 62.087000][ T5325] dump_stack_lvl+0xf4/0x15c [ 62.087922][ T5325] dump_stack+0x1c/0x5c [ 62.088784][ T5325] should_fail_ex+0x3cc/0x524 [ 62.089729][ T5325] __should_failslab+0xc0/0x11c [ 62.090775][ T5325] should_failslab+0x10/0x28 [ 62.091754][ T5325] kmem_cache_alloc+0x88/0x310 [ 62.092767][ T5325] __kernfs_new_node+0xec/0x5fc [ 62.093783][ T5325] kernfs_new_node+0x120/0x230 [ 62.094793][ T5325] __kernfs_create_file+0x60/0x2e0 [ 62.095780][ T5325] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 62.096926][ T5325] internal_create_group+0x3e8/0xb24 [ 62.098046][ T5325] sysfs_create_groups+0x60/0x134 [ 62.099127][ T5325] kobject_add_internal+0x5e4/0xb18 [ 62.100274][ T5325] kobject_add+0x144/0x20c [ 62.101257][ T5325] blk_register_queue+0x84/0x334 [ 62.102351][ T5325] device_add_disk+0x53c/0xe04 [ 62.103411][ T5325] add_mtd_blktrans_dev+0xc48/0x1090 [ 62.104606][ T5325] mtdblock_add_mtd+0x158/0x218 [ 62.105615][ T5325] blktrans_notify_add+0xa8/0xf8 [ 62.106663][ T5325] add_mtd_device+0xe40/0x13b4 [ 62.107662][ T5325] mtd_add_partition+0x224/0x3bc [ 62.108766][ T5325] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 62.109767][ T5325] mtdchar_ioctl+0x1238/0x1aec [ 62.110694][ T5325] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 62.111697][ T5325] __arm64_sys_ioctl+0x14c/0x1c8 [ 62.112696][ T5325] invoke_syscall+0x98/0x290 [ 62.113730][ T5325] el0_svc_common+0x13c/0x258 [ 62.114748][ T5325] do_el0_svc+0x5c/0x134 [ 62.115645][ T5325] el0_svc+0x58/0x12c [ 62.116471][ T5325] el0t_64_sync_handler+0x84/0xf0 [ 62.117573][ T5325] el0t_64_sync+0x18c/0x190 [ 62.120398][ T5325] kobject_add_internal failed for queue (error: -12 parent: mtdblock11) [ 62.157807][ T5329] syz.0.307 (5329): drop_caches: 2 [ 62.160462][ T5330] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 62.172812][ T5330] 8021q: adding VLAN 0 to HW filter on device bond4 [ 62.184178][ T5330] bond4: (slave bridge4): making interface the new active one [ 62.187291][ T5330] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 62.189464][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 62.453978][ T5337] loop2: detected capacity change from 0 to 512 [ 62.544780][ T5343] FAULT_INJECTION: forcing a failure. [ 62.544780][ T5343] name failslab, interval 1, probability 0, space 0, times 0 [ 62.552913][ T5342] loop1: detected capacity change from 0 to 512 [ 62.554402][ T5343] CPU: 1 PID: 5343 Comm: syz.2.316 Not tainted syzkaller #0 [ 62.555833][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 62.557938][ T5343] Call trace: [ 62.558581][ T5343] dump_backtrace+0x1c4/0x1f0 [ 62.559427][ T5343] show_stack+0x2c/0x3c [ 62.560253][ T5343] __dump_stack+0x30/0x40 [ 62.561094][ T5343] dump_stack_lvl+0xf4/0x15c [ 62.562080][ T5343] dump_stack+0x1c/0x5c [ 62.562941][ T5343] should_fail_ex+0x3cc/0x524 [ 62.563860][ T5343] __should_failslab+0xc0/0x11c [ 62.564796][ T5343] should_failslab+0x10/0x28 [ 62.565712][ T5343] slab_pre_alloc_hook+0x6c/0x31c [ 62.566773][ T5343] kmem_cache_alloc_lru+0x60/0x284 [ 62.567759][ T5343] sock_alloc_inode+0x2c/0xcc [ 62.568688][ T5343] new_inode_pseudo+0x68/0x1cc [ 62.569639][ T5343] __sock_create+0x138/0x8a8 [ 62.570545][ T5343] __sys_socket+0xc0/0x1b0 [ 62.571497][ T5343] __arm64_sys_socket+0x7c/0x94 [ 62.572387][ T5343] invoke_syscall+0x98/0x290 [ 62.573273][ T5343] el0_svc_common+0x13c/0x258 [ 62.574207][ T5343] do_el0_svc+0x5c/0x134 [ 62.575054][ T5343] el0_svc+0x58/0x12c [ 62.575844][ T5343] el0t_64_sync_handler+0x84/0xf0 [ 62.576861][ T5343] el0t_64_sync+0x18c/0x190 [ 62.628139][ T5343] socket: no more sockets [ 62.751920][ T5354] 0x000000000003-0x000000010001 : "" [ 62.761697][ T5354] ftl_cs: FTL header corrupt! [ 62.763797][ T5354] FAULT_INJECTION: forcing a failure. [ 62.763797][ T5354] name failslab, interval 1, probability 0, space 0, times 0 [ 62.766666][ T5354] CPU: 1 PID: 5354 Comm: syz.2.321 Not tainted syzkaller #0 [ 62.768174][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 62.770205][ T5354] Call trace: [ 62.770987][ T5354] dump_backtrace+0x1c4/0x1f0 [ 62.772001][ T5354] show_stack+0x2c/0x3c [ 62.772861][ T5354] __dump_stack+0x30/0x40 [ 62.773722][ T5354] dump_stack_lvl+0xf4/0x15c [ 62.774619][ T5354] dump_stack+0x1c/0x5c [ 62.775445][ T5354] should_fail_ex+0x3cc/0x524 [ 62.776473][ T5354] __should_failslab+0xc0/0x11c [ 62.777550][ T5354] should_failslab+0x10/0x28 [ 62.778549][ T5354] kmem_cache_alloc+0x88/0x310 [ 62.779596][ T5354] __kernfs_new_node+0xec/0x5fc [ 62.780624][ T5354] kernfs_new_node+0x120/0x230 [ 62.781662][ T5354] kernfs_create_dir_ns+0x58/0x138 [ 62.782730][ T5354] sysfs_create_dir_ns+0x120/0x264 [ 62.783851][ T5354] kobject_add_internal+0x5a8/0xb18 [ 62.784983][ T5354] kobject_add+0x144/0x20c [ 62.785990][ T5354] blk_mq_sysfs_register+0x154/0x518 [ 62.787137][ T5354] blk_register_queue+0xc4/0x334 [ 62.788156][ T5354] device_add_disk+0x53c/0xe04 [ 62.789154][ T5354] add_mtd_blktrans_dev+0xc48/0x1090 [ 62.790254][ T5354] mtdblock_add_mtd+0x158/0x218 [ 62.791333][ T5354] blktrans_notify_add+0xa8/0xf8 [ 62.792456][ T5354] add_mtd_device+0xe40/0x13b4 [ 62.793496][ T5354] mtd_add_partition+0x224/0x3bc [ 62.794476][ T5354] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 62.795500][ T5354] mtdchar_ioctl+0x1238/0x1aec [ 62.796509][ T5354] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 62.797711][ T5354] __arm64_sys_ioctl+0x14c/0x1c8 [ 62.798749][ T5354] invoke_syscall+0x98/0x290 [ 62.799724][ T5354] el0_svc_common+0x13c/0x258 [ 62.800730][ T5354] do_el0_svc+0x5c/0x134 [ 62.801684][ T5354] el0_svc+0x58/0x12c [ 62.802573][ T5354] el0t_64_sync_handler+0x84/0xf0 [ 62.803653][ T5354] el0t_64_sync+0x18c/0x190 [ 62.812950][ T5354] kobject_add_internal failed for mq (error: -12 parent: mtdblock12) [ 63.096681][ T5361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.246702][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 63.839641][ T5381] Invalid ELF header magic: != ELF [ 64.099268][ T5380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.138714][ T5383] FAULT_INJECTION: forcing a failure. [ 64.138714][ T5383] name failslab, interval 1, probability 0, space 0, times 0 [ 64.141715][ T5383] CPU: 1 PID: 5383 Comm: syz.4.332 Not tainted syzkaller #0 [ 64.142985][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.145000][ T5383] Call trace: [ 64.145742][ T5383] dump_backtrace+0x1c4/0x1f0 [ 64.146746][ T5383] show_stack+0x2c/0x3c [ 64.147556][ T5383] __dump_stack+0x30/0x40 [ 64.148404][ T5383] dump_stack_lvl+0xf4/0x15c [ 64.149309][ T5383] dump_stack+0x1c/0x5c [ 64.150118][ T5383] should_fail_ex+0x3cc/0x524 [ 64.151054][ T5383] __should_failslab+0xc0/0x11c [ 64.151935][ T5383] should_failslab+0x10/0x28 [ 64.152785][ T5383] kmem_cache_alloc+0x88/0x310 [ 64.153696][ T5383] security_inode_alloc+0x38/0x11c [ 64.154614][ T5383] inode_init_always+0x6c8/0xb28 [ 64.155509][ T5383] new_inode_pseudo+0x7c/0x1cc [ 64.156404][ T5383] __sock_create+0x138/0x8a8 [ 64.157434][ T5383] __sys_socket+0xc0/0x1b0 [ 64.158409][ T5383] __arm64_sys_socket+0x7c/0x94 [ 64.159454][ T5383] invoke_syscall+0x98/0x290 [ 64.160493][ T5383] el0_svc_common+0x13c/0x258 [ 64.161523][ T5383] do_el0_svc+0x5c/0x134 [ 64.162489][ T5383] el0_svc+0x58/0x12c [ 64.163385][ T5383] el0t_64_sync_handler+0x84/0xf0 [ 64.164534][ T5383] el0t_64_sync+0x18c/0x190 [ 64.167200][ T5383] socket: no more sockets [ 64.191786][ T5385] 0x000000000003-0x000000010001 : "" [ 64.195342][ T5385] ftl_cs: FTL header corrupt! [ 64.202094][ T5385] FAULT_INJECTION: forcing a failure. [ 64.202094][ T5385] name failslab, interval 1, probability 0, space 0, times 0 [ 64.205156][ T5385] CPU: 1 PID: 5385 Comm: syz.4.333 Not tainted syzkaller #0 [ 64.206765][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.209047][ T5385] Call trace: [ 64.209756][ T5385] dump_backtrace+0x1c4/0x1f0 [ 64.210752][ T5385] show_stack+0x2c/0x3c [ 64.211645][ T5385] __dump_stack+0x30/0x40 [ 64.212557][ T5385] dump_stack_lvl+0xf4/0x15c [ 64.213532][ T5385] dump_stack+0x1c/0x5c [ 64.214428][ T5385] should_fail_ex+0x3cc/0x524 [ 64.215460][ T5385] __should_failslab+0xc0/0x11c [ 64.216493][ T5385] should_failslab+0x10/0x28 [ 64.217417][ T5385] __kmem_cache_alloc_node+0x7c/0x318 [ 64.218587][ T5385] __kmalloc_node_track_caller+0xb8/0x174 [ 64.219819][ T5385] kstrdup_const+0x90/0xdc [ 64.220790][ T5385] __kernfs_new_node+0xb0/0x5fc [ 64.221769][ T5385] kernfs_new_node+0x120/0x230 [ 64.222835][ T5385] kernfs_create_dir_ns+0x58/0x138 [ 64.223843][ T5385] sysfs_create_dir_ns+0x120/0x264 [ 64.224934][ T5385] kobject_add_internal+0x5a8/0xb18 [ 64.225935][ T5385] kobject_add+0x144/0x20c [ 64.226836][ T5385] blk_mq_register_hctx+0xc4/0x37c [ 64.227884][ T5385] blk_mq_sysfs_register+0x1b4/0x518 [ 64.228999][ T5385] blk_register_queue+0xc4/0x334 [ 64.230070][ T5385] device_add_disk+0x53c/0xe04 [ 64.231052][ T5385] add_mtd_blktrans_dev+0xc48/0x1090 [ 64.232209][ T5385] mtdblock_add_mtd+0x158/0x218 [ 64.233189][ T5385] blktrans_notify_add+0xa8/0xf8 [ 64.234181][ T5385] add_mtd_device+0xe40/0x13b4 [ 64.235026][ T5385] mtd_add_partition+0x224/0x3bc [ 64.236033][ T5385] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 64.237099][ T5385] mtdchar_ioctl+0x1238/0x1aec [ 64.238101][ T5385] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 64.239222][ T5385] __arm64_sys_ioctl+0x14c/0x1c8 [ 64.240298][ T5385] invoke_syscall+0x98/0x290 [ 64.241212][ T5385] el0_svc_common+0x13c/0x258 [ 64.242196][ T5385] do_el0_svc+0x5c/0x134 [ 64.243003][ T5385] el0_svc+0x58/0x12c [ 64.243805][ T5385] el0t_64_sync_handler+0x84/0xf0 [ 64.244889][ T5385] el0t_64_sync+0x18c/0x190 [ 64.281049][ T5385] kobject_add_internal failed for 0 (error: -12 parent: mq) [ 64.319756][ T5389] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 64.321371][ T5389] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 64.323701][ T5389] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.335: iget: bad i_size value: 12154757448730 [ 64.326605][ T5389] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.335: couldn't read orphan inode 13 (err -117) [ 64.330480][ T5389] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.399323][ T5399] FAULT_INJECTION: forcing a failure. [ 64.399323][ T5399] name fail_futex, interval 1, probability 0, space 0, times 0 [ 64.408422][ T5399] CPU: 0 PID: 5399 Comm: syz.1.339 Not tainted syzkaller #0 [ 64.409883][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.412132][ T5399] Call trace: [ 64.412811][ T5399] dump_backtrace+0x1c4/0x1f0 [ 64.413887][ T5399] show_stack+0x2c/0x3c [ 64.414825][ T5399] __dump_stack+0x30/0x40 [ 64.415774][ T5399] dump_stack_lvl+0xf4/0x15c [ 64.416849][ T5399] dump_stack+0x1c/0x5c [ 64.417799][ T5399] should_fail_ex+0x3cc/0x524 [ 64.418912][ T5399] should_fail+0x14/0x24 [ 64.419912][ T5399] get_futex_key+0x904/0xec0 [ 64.420995][ T5399] futex_wait_setup+0xbc/0x320 [ 64.422136][ T5399] futex_wait+0x178/0x488 [ 64.423115][ T5399] do_futex+0x2e8/0x340 [ 64.424079][ T5399] __arm64_sys_futex+0x390/0x414 [ 64.425227][ T5399] invoke_syscall+0x98/0x290 [ 64.426307][ T5399] el0_svc_common+0x13c/0x258 [ 64.427325][ T5399] do_el0_svc+0x5c/0x134 [ 64.428170][ T5399] el0_svc+0x58/0x12c [ 64.429032][ T5399] el0t_64_sync_handler+0x84/0xf0 [ 64.430081][ T5399] el0t_64_sync+0x18c/0x190 [ 64.436725][ T5399] __nla_validate_parse: 9 callbacks suppressed [ 64.436736][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 64.441831][ T5403] syz.2.335 (5403): drop_caches: 2 [ 64.444365][ T5399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.339'. [ 64.491474][ T2068] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.492891][ T2068] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500604][ T5405] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 64.516439][ T5405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.521209][ T5405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 64.527541][ T5405] bond3: (slave bridge3): making interface the new active one [ 64.530343][ T5405] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 64.546328][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 64.583595][ T5411] FAULT_INJECTION: forcing a failure. [ 64.583595][ T5411] name failslab, interval 1, probability 0, space 0, times 0 [ 64.586226][ T5411] CPU: 0 PID: 5411 Comm: syz.4.343 Not tainted syzkaller #0 [ 64.587745][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.589949][ T5411] Call trace: [ 64.590610][ T5411] dump_backtrace+0x1c4/0x1f0 [ 64.591641][ T5411] show_stack+0x2c/0x3c [ 64.592556][ T5411] __dump_stack+0x30/0x40 [ 64.593511][ T5411] dump_stack_lvl+0xf4/0x15c [ 64.594528][ T5411] dump_stack+0x1c/0x5c [ 64.595422][ T5411] should_fail_ex+0x3cc/0x524 [ 64.596423][ T5411] __should_failslab+0xc0/0x11c [ 64.597458][ T5411] should_failslab+0x10/0x28 [ 64.598434][ T5411] kmem_cache_alloc+0x88/0x310 [ 64.599409][ T5411] security_inode_alloc+0x38/0x11c [ 64.600529][ T5411] inode_init_always+0x6c8/0xb28 [ 64.601556][ T5411] new_inode_pseudo+0x7c/0x1cc [ 64.602584][ T5411] __sock_create+0x138/0x8a8 [ 64.603593][ T5411] __sys_socket+0xc0/0x1b0 [ 64.604535][ T5411] __arm64_sys_socket+0x7c/0x94 [ 64.605517][ T5411] invoke_syscall+0x98/0x290 [ 64.606485][ T5411] el0_svc_common+0x13c/0x258 [ 64.607493][ T5411] do_el0_svc+0x5c/0x134 [ 64.608423][ T5411] el0_svc+0x58/0x12c [ 64.609292][ T5411] el0t_64_sync_handler+0x84/0xf0 [ 64.610436][ T5411] el0t_64_sync+0x18c/0x190 [ 64.612639][ T5411] socket: no more sockets [ 64.839152][ T5414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.044577][ T5309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.469609][ T5421] Invalid ELF header magic: != ELF [ 65.621760][ T5420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.700374][ T5425] 0x000000000003-0x000000010001 : "" [ 65.709201][ T5425] ftl_cs: FTL header corrupt! [ 65.718280][ T5425] FAULT_INJECTION: forcing a failure. [ 65.718280][ T5425] name failslab, interval 1, probability 0, space 0, times 0 [ 65.725614][ T5425] CPU: 0 PID: 5425 Comm: syz.1.347 Not tainted syzkaller #0 [ 65.727185][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 65.729186][ T5425] Call trace: [ 65.729790][ T5425] dump_backtrace+0x1c4/0x1f0 [ 65.730671][ T5425] show_stack+0x2c/0x3c [ 65.731502][ T5425] __dump_stack+0x30/0x40 [ 65.732342][ T5425] dump_stack_lvl+0xf4/0x15c [ 65.733288][ T5425] dump_stack+0x1c/0x5c [ 65.734158][ T5425] should_fail_ex+0x3cc/0x524 [ 65.735073][ T5425] __should_failslab+0xc0/0x11c [ 65.736069][ T5425] should_failslab+0x10/0x28 [ 65.737095][ T5425] __kmem_cache_alloc_node+0x7c/0x318 [ 65.738299][ T5425] __kmalloc_node_track_caller+0xb8/0x174 [ 65.739583][ T5425] kstrdup_const+0x90/0xdc [ 65.740530][ T5425] __kernfs_new_node+0xb0/0x5fc [ 65.741538][ T5425] kernfs_new_node+0x120/0x230 [ 65.742562][ T5425] kernfs_create_dir_ns+0x58/0x138 [ 65.743619][ T5425] sysfs_create_dir_ns+0x120/0x264 [ 65.744677][ T5425] kobject_add_internal+0x5a8/0xb18 [ 65.745718][ T5425] kobject_add+0x144/0x20c [ 65.746597][ T5425] blk_mq_register_hctx+0x1b4/0x37c [ 65.747615][ T5425] blk_mq_sysfs_register+0x1b4/0x518 [ 65.748756][ T5425] blk_register_queue+0xc4/0x334 [ 65.749814][ T5425] device_add_disk+0x53c/0xe04 [ 65.750835][ T5425] add_mtd_blktrans_dev+0xc48/0x1090 [ 65.751994][ T5425] mtdblock_add_mtd+0x158/0x218 [ 65.753132][ T5425] blktrans_notify_add+0xa8/0xf8 [ 65.754185][ T5425] add_mtd_device+0xe40/0x13b4 [ 65.755163][ T5425] mtd_add_partition+0x224/0x3bc [ 65.756188][ T5425] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 65.757257][ T5425] mtdchar_ioctl+0x1238/0x1aec [ 65.758306][ T5425] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 65.759446][ T5425] __arm64_sys_ioctl+0x14c/0x1c8 [ 65.760465][ T5425] invoke_syscall+0x98/0x290 [ 65.761408][ T5425] el0_svc_common+0x13c/0x258 [ 65.762407][ T5425] do_el0_svc+0x5c/0x134 [ 65.763381][ T5425] el0_svc+0x58/0x12c [ 65.764279][ T5425] el0t_64_sync_handler+0x84/0xf0 [ 65.765346][ T5425] el0t_64_sync+0x18c/0x190 [ 65.803490][ T5425] kobject_add_internal failed for cpu0 (error: -12 parent: 0) [ 65.909088][ T5437] set_capacity_and_notify: 8 callbacks suppressed [ 65.909098][ T5437] loop4: detected capacity change from 0 to 512 [ 66.053053][ T5443] device syzkaller0 entered promiscuous mode [ 66.180031][ T5455] loop1: detected capacity change from 0 to 2048 [ 66.201115][ T5455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.389679][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 66.641122][ T5463] Invalid ELF header magic: != ELF [ 66.957713][ T5466] 0x000000000003-0x000000010001 : "" [ 66.966207][ T5466] ftl_cs: FTL header corrupt! [ 66.968394][ T5466] FAULT_INJECTION: forcing a failure. [ 66.968394][ T5466] name failslab, interval 1, probability 0, space 0, times 0 [ 66.972772][ T5466] CPU: 0 PID: 5466 Comm: syz.1.362 Not tainted syzkaller #0 [ 66.974159][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 66.975988][ T5466] Call trace: [ 66.976588][ T5466] dump_backtrace+0x1c4/0x1f0 [ 66.977454][ T5466] show_stack+0x2c/0x3c [ 66.978311][ T5466] __dump_stack+0x30/0x40 [ 66.979141][ T5466] dump_stack_lvl+0xf4/0x15c [ 66.980126][ T5466] dump_stack+0x1c/0x5c [ 66.980924][ T5466] should_fail_ex+0x3cc/0x524 [ 66.981832][ T5466] __should_failslab+0xc0/0x11c [ 66.982757][ T5466] should_failslab+0x10/0x28 [ 66.983736][ T5466] __kmem_cache_alloc_node+0x7c/0x318 [ 66.984805][ T5466] __kmalloc_node_track_caller+0xb8/0x174 [ 66.986008][ T5466] kstrdup_const+0x90/0xdc [ 66.986868][ T5466] __kernfs_new_node+0xb0/0x5fc [ 66.987792][ T5466] kernfs_new_node+0x120/0x230 [ 66.988896][ T5466] kernfs_create_dir_ns+0x58/0x138 [ 66.989989][ T5466] sysfs_create_dir_ns+0x120/0x264 [ 66.991074][ T5466] kobject_add_internal+0x5a8/0xb18 [ 66.992154][ T5466] kobject_add+0x144/0x20c [ 66.993039][ T5466] blk_mq_register_hctx+0xc4/0x37c [ 66.994124][ T5466] blk_mq_sysfs_register+0x1b4/0x518 [ 66.995193][ T5466] blk_register_queue+0xc4/0x334 [ 66.996151][ T5466] device_add_disk+0x53c/0xe04 [ 66.997158][ T5466] add_mtd_blktrans_dev+0xc48/0x1090 [ 66.998249][ T5466] mtdblock_add_mtd+0x158/0x218 [ 66.999319][ T5466] blktrans_notify_add+0xa8/0xf8 [ 67.000471][ T5466] add_mtd_device+0xe40/0x13b4 [ 67.001535][ T5466] mtd_add_partition+0x224/0x3bc [ 67.002559][ T5466] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 67.003618][ T5466] mtdchar_ioctl+0x1238/0x1aec [ 67.004667][ T5466] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 67.005793][ T5466] __arm64_sys_ioctl+0x14c/0x1c8 [ 67.006858][ T5466] invoke_syscall+0x98/0x290 [ 67.007802][ T5466] el0_svc_common+0x13c/0x258 [ 67.008771][ T5466] do_el0_svc+0x5c/0x134 [ 67.009656][ T5466] el0_svc+0x58/0x12c [ 67.010505][ T5466] el0t_64_sync_handler+0x84/0xf0 [ 67.011593][ T5466] el0t_64_sync+0x18c/0x190 [ 67.015046][ T5466] kobject_add_internal failed for 0 (error: -12 parent: mq) [ 67.415650][ T5479] loop2: detected capacity change from 0 to 1024 [ 68.314212][ T5483] loop2: detected capacity change from 0 to 512 [ 68.364538][ T5485] loop2: detected capacity change from 0 to 512 [ 68.380724][ T5485] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 68.382224][ T5485] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 68.384433][ T5485] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.370: iget: bad i_size value: 12154757448730 [ 68.387521][ T5485] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.370: couldn't read orphan inode 13 (err -117) [ 68.392326][ T5485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.398404][ T5485] syz.2.370 (5485): drop_caches: 2 [ 68.414128][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 68.589605][ T5492] loop2: detected capacity change from 0 to 2048 [ 68.599861][ T5492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.049694][ T5451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.086222][ T5494] loop4: detected capacity change from 0 to 1024 [ 69.298154][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.301041][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.616667][ T24] cfg80211: failed to load regulatory.db [ 71.113073][ T5504] loop2: detected capacity change from 0 to 2048 [ 71.308510][ T5504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.169516][ T4335] Bluetooth: hci3: command 0x042a tx timeout [ 78.012654][ T5509] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 78.067315][ T5535] loop1: detected capacity change from 0 to 512 [ 78.104326][ T5537] loop0: detected capacity change from 0 to 512 [ 78.125304][ T5537] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 78.126814][ T5537] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 78.129133][ T5537] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.382: iget: bad i_size value: 12154757448730 [ 78.147722][ T5537] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.382: couldn't read orphan inode 13 (err -117) [ 78.218798][ T5544] Bluetooth: MGMT ver 1.22 [ 78.442522][ T5537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.465866][ T5545] siw: device registration error -23 [ 78.470924][ T5537] syz.0.382 (5537): drop_caches: 2 [ 78.496797][ T5545] FAULT_INJECTION: forcing a failure. [ 78.496797][ T5545] name fail_futex, interval 1, probability 0, space 0, times 0 [ 78.506914][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 78.513261][ T5545] CPU: 0 PID: 5545 Comm: syz.1.383 Not tainted syzkaller #0 [ 78.514866][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 78.517090][ T5545] Call trace: [ 78.517811][ T5545] dump_backtrace+0x1c4/0x1f0 [ 78.518830][ T5545] show_stack+0x2c/0x3c [ 78.519725][ T5545] __dump_stack+0x30/0x40 [ 78.520655][ T5545] dump_stack_lvl+0xf4/0x15c [ 78.521648][ T5545] dump_stack+0x1c/0x5c [ 78.522596][ T5545] should_fail_ex+0x3cc/0x524 [ 78.523817][ T5545] should_fail+0x14/0x24 [ 78.524740][ T5545] get_futex_key+0x904/0xec0 [ 78.525728][ T5545] futex_wake+0x10c/0x458 [ 78.526675][ T5545] do_futex+0x2c4/0x340 [ 78.527602][ T5545] __arm64_sys_futex+0x390/0x414 [ 78.528512][ T5545] invoke_syscall+0x98/0x290 [ 78.529457][ T5545] el0_svc_common+0x13c/0x258 [ 78.530485][ T5545] do_el0_svc+0x5c/0x134 [ 78.531422][ T5545] el0_svc+0x58/0x12c [ 78.532299][ T5545] el0t_64_sync_handler+0x84/0xf0 [ 78.533326][ T5545] el0t_64_sync+0x18c/0x190 [ 78.553550][ T5547] loop4: detected capacity change from 0 to 1024 [ 78.656033][ T5557] loop2: detected capacity change from 0 to 2048 [ 78.663080][ T5557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.233612][ T5577] device syzkaller0 entered promiscuous mode [ 79.343627][ T5559] loop1: detected capacity change from 0 to 2048 [ 79.374355][ T5559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.735239][ T5600] siw: device registration error -23 [ 80.058048][ T5605] loop4: detected capacity change from 0 to 2048 [ 80.111233][ T5605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.252247][ T4342] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 80.419510][ T4342] Bluetooth: hci2: command 0x0401 tx timeout [ 80.737244][ T5607] loop4: detected capacity change from 0 to 1024 [ 90.585296][ T5583] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 90.734971][ T5638] loop2: detected capacity change from 0 to 1024 [ 90.745376][ T5639] loop4: detected capacity change from 0 to 512 [ 90.774128][ T5642] loop3: detected capacity change from 0 to 1024 [ 90.892314][ T5653] siw: device registration error -23 [ 90.893973][ T5650] device syzkaller0 entered promiscuous mode [ 90.894516][ T5653] FAULT_INJECTION: forcing a failure. [ 90.894516][ T5653] name fail_futex, interval 1, probability 0, space 0, times 0 [ 90.897725][ T5653] CPU: 0 PID: 5653 Comm: syz.1.414 Not tainted syzkaller #0 [ 90.899152][ T5653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 90.901104][ T5653] Call trace: [ 90.901770][ T5653] dump_backtrace+0x1c4/0x1f0 [ 90.902731][ T5653] show_stack+0x2c/0x3c [ 90.903572][ T5653] __dump_stack+0x30/0x40 [ 90.904431][ T5653] dump_stack_lvl+0xf4/0x15c [ 90.905355][ T5653] dump_stack+0x1c/0x5c [ 90.906220][ T5653] should_fail_ex+0x3cc/0x524 [ 90.907208][ T5653] should_fail+0x14/0x24 [ 90.908116][ T5653] get_futex_key+0x904/0xec0 [ 90.909064][ T5653] futex_wait_setup+0xbc/0x320 [ 90.910025][ T5653] futex_wait+0x178/0x488 [ 90.910806][ T5653] do_futex+0x2e8/0x340 [ 90.911760][ T5653] __arm64_sys_futex+0x390/0x414 [ 90.912813][ T5653] invoke_syscall+0x98/0x290 [ 90.913807][ T5653] el0_svc_common+0x13c/0x258 [ 90.914778][ T5653] do_el0_svc+0x5c/0x134 [ 90.915648][ T5653] el0_svc+0x58/0x12c [ 90.916511][ T5653] el0t_64_sync_handler+0x84/0xf0 [ 90.917578][ T5653] el0t_64_sync+0x18c/0x190 [ 92.345979][ T5679] loop2: detected capacity change from 0 to 2048 [ 92.415278][ T5679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.049493][ T4342] Bluetooth: hci2: command 0x0409 tx timeout [ 93.209545][ T4342] Bluetooth: hci4: command 0x0409 tx timeout [ 102.420875][ T5665] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 102.544601][ T5712] netlink: 64 bytes leftover after parsing attributes in process `syz.1.427'. [ 102.547329][ T5708] loop4: detected capacity change from 0 to 512 [ 102.564575][ T5710] loop0: detected capacity change from 0 to 1024 [ 103.007234][ T5726] loop3: detected capacity change from 0 to 1024 [ 103.535530][ T5732] loop4: detected capacity change from 0 to 1024 [ 103.766768][ T5742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.769090][ T5742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.073853][ T5750] netlink: 'syz.0.439': attribute type 1 has an invalid length. [ 104.084090][ T5750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.092335][ T5750] bond2: (slave bridge2): making interface the new active one [ 104.094695][ T5750] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 104.096755][ T80] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 104.139795][ T5757] netlink: 52 bytes leftover after parsing attributes in process `syz.2.442'. [ 104.151696][ T5755] device syzkaller0 entered promiscuous mode [ 104.180804][ T5759] loop3: detected capacity change from 0 to 512 [ 104.212640][ T5761] loop2: detected capacity change from 0 to 512 [ 104.228240][ T5761] EXT4-fs error (device loop2): __ext4_iget:5135: inode #2: block 131072: comm syz.2.444: invalid block [ 104.231245][ T5761] EXT4-fs (loop2): get root inode failed [ 104.237726][ T5761] EXT4-fs (loop2): mount failed [ 104.969791][ T4342] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 104.971245][ T4335] Bluetooth: hci2: command 0x0401 tx timeout [ 104.987271][ T5778] loop1: detected capacity change from 0 to 1024 [ 105.529549][ T4339] Bluetooth: hci4: command 0x0409 tx timeout [ 105.531073][ T4335] Bluetooth: hci1: command 0x042a tx timeout [ 106.592189][ T5802] netlink: 52 bytes leftover after parsing attributes in process `syz.4.455'. [ 106.642769][ T5802] FAULT_INJECTION: forcing a failure. [ 106.642769][ T5802] name fail_futex, interval 1, probability 0, space 0, times 0 [ 106.646160][ T5802] CPU: 1 PID: 5802 Comm: syz.4.455 Not tainted syzkaller #0 [ 106.647680][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 106.649821][ T5802] Call trace: [ 106.650580][ T5802] dump_backtrace+0x1c4/0x1f0 [ 106.651617][ T5802] show_stack+0x2c/0x3c [ 106.652496][ T5802] __dump_stack+0x30/0x40 [ 106.653395][ T5802] dump_stack_lvl+0xf4/0x15c [ 106.654297][ T5802] dump_stack+0x1c/0x5c [ 106.655205][ T5802] should_fail_ex+0x3cc/0x524 [ 106.656101][ T5802] should_fail+0x14/0x24 [ 106.656949][ T5802] get_futex_key+0x904/0xec0 [ 106.657904][ T5802] futex_wake+0x10c/0x458 [ 106.658811][ T5802] do_futex+0x2c4/0x340 [ 106.659642][ T5802] __arm64_sys_futex+0x390/0x414 [ 106.660743][ T5802] invoke_syscall+0x98/0x290 [ 106.661764][ T5802] el0_svc_common+0x13c/0x258 [ 106.662748][ T5802] do_el0_svc+0x5c/0x134 [ 106.663625][ T5802] el0_svc+0x58/0x12c [ 106.664481][ T5802] el0t_64_sync_handler+0x84/0xf0 [ 106.665562][ T5802] el0t_64_sync+0x18c/0x190 [ 106.692781][ T5804] loop4: detected capacity change from 0 to 512 [ 106.806691][ T4342] Bluetooth: Wrong link type (-71) [ 108.234888][ T5818] loop4: detected capacity change from 0 to 512 [ 108.244709][ T5818] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 108.246633][ T5818] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 108.248750][ T5818] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #13: comm syz.4.463: iget: bad i_size value: 12154757448730 [ 108.253761][ T5818] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.463: couldn't read orphan inode 13 (err -117) [ 108.257135][ T5818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.382175][ T5822] syz.4.463 (5822): drop_caches: 2 [ 109.080275][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 112.103477][ T5824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.193638][ T5835] netlink: 52 bytes leftover after parsing attributes in process `syz.4.467'. [ 112.242215][ T5837] loop4: detected capacity change from 0 to 512 [ 112.308434][ T4339] Bluetooth: hci3: link tx timeout [ 112.309685][ T4339] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 115.779489][ T5794] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 115.876763][ T5879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.479'. [ 115.901282][ T5879] FAULT_INJECTION: forcing a failure. [ 115.901282][ T5879] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.903825][ T5879] CPU: 1 PID: 5879 Comm: syz.0.479 Not tainted syzkaller #0 [ 115.905205][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 115.907310][ T5879] Call trace: [ 115.907994][ T5879] dump_backtrace+0x1c4/0x1f0 [ 115.908970][ T5879] show_stack+0x2c/0x3c [ 115.909838][ T5879] __dump_stack+0x30/0x40 [ 115.910792][ T5879] dump_stack_lvl+0xf4/0x15c [ 115.911808][ T5879] dump_stack+0x1c/0x5c [ 115.912756][ T5879] should_fail_ex+0x3cc/0x524 [ 115.913823][ T5879] should_fail+0x14/0x24 [ 115.914798][ T5879] get_futex_key+0x904/0xec0 [ 115.915842][ T5879] futex_wake+0x10c/0x458 [ 115.916711][ T5879] do_futex+0x2c4/0x340 [ 115.917607][ T5879] __arm64_sys_futex+0x390/0x414 [ 115.918706][ T5879] invoke_syscall+0x98/0x290 [ 115.919702][ T5879] el0_svc_common+0x13c/0x258 [ 115.920732][ T5879] do_el0_svc+0x5c/0x134 [ 115.921655][ T5879] el0_svc+0x58/0x12c [ 115.922462][ T5879] el0t_64_sync_handler+0x84/0xf0 [ 115.923577][ T5879] el0t_64_sync+0x18c/0x190 [ 115.928855][ T5883] loop1: detected capacity change from 0 to 512 [ 116.036731][ T5893] loop4: detected capacity change from 0 to 1024 [ 116.044444][ T5896] loop0: detected capacity change from 0 to 1024 [ 116.084195][ T5899] loop1: detected capacity change from 0 to 1024 [ 116.430964][ T5901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.433935][ T5901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.804452][ T5907] loop2: detected capacity change from 0 to 1024 [ 117.022336][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.025639][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.501483][ T5915] device syzkaller0 entered promiscuous mode [ 118.797040][ T5867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.839904][ T5934] loop3: detected capacity change from 0 to 512 [ 119.123291][ T5940] loop3: detected capacity change from 0 to 2048 [ 119.321836][ T5940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.357804][ T5942] netlink: 44 bytes leftover after parsing attributes in process `syz.4.498'. [ 119.419621][ T5942] FAULT_INJECTION: forcing a failure. [ 119.419621][ T5942] name fail_futex, interval 1, probability 0, space 0, times 0 [ 119.422545][ T5942] CPU: 1 PID: 5942 Comm: syz.4.498 Not tainted syzkaller #0 [ 119.423961][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 119.426006][ T5942] Call trace: [ 119.426751][ T5942] dump_backtrace+0x1c4/0x1f0 [ 119.427711][ T5942] show_stack+0x2c/0x3c [ 119.428505][ T5942] __dump_stack+0x30/0x40 [ 119.429386][ T5942] dump_stack_lvl+0xf4/0x15c [ 119.430275][ T5942] dump_stack+0x1c/0x5c [ 119.431057][ T5942] should_fail_ex+0x3cc/0x524 [ 119.431989][ T5942] should_fail+0x14/0x24 [ 119.432836][ T5942] get_futex_key+0x904/0xec0 [ 119.433708][ T5942] futex_wake+0x10c/0x458 [ 119.434550][ T5942] do_futex+0x2c4/0x340 [ 119.435327][ T5942] __arm64_sys_futex+0x390/0x414 [ 119.436278][ T5942] invoke_syscall+0x98/0x290 [ 119.437155][ T5942] el0_svc_common+0x13c/0x258 [ 119.438165][ T5942] do_el0_svc+0x5c/0x134 [ 119.439074][ T5942] el0_svc+0x58/0x12c [ 119.439881][ T5942] el0t_64_sync_handler+0x84/0xf0 [ 119.441021][ T5942] el0t_64_sync+0x18c/0x190 [ 120.330984][ T5953] loop4: detected capacity change from 0 to 512 [ 120.362829][ T5953] EXT4-fs error (device loop4): __ext4_iget:5135: inode #2: block 131072: comm syz.4.502: invalid block [ 120.368874][ T5953] EXT4-fs (loop4): get root inode failed [ 120.370240][ T5953] EXT4-fs (loop4): mount failed [ 120.666669][ T5959] 9pnet_virtio: no channels available for device ./file0 [ 124.479004][ T5966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.522227][ T5973] loop4: detected capacity change from 0 to 512 [ 124.593651][ T5977] loop4: detected capacity change from 0 to 256 [ 124.603608][ T5977] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 124.647439][ T5979] netlink: 44 bytes leftover after parsing attributes in process `syz.4.510'. [ 124.928454][ T5988] loop4: detected capacity change from 0 to 2048 [ 124.983236][ T5988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.939824][ T2068] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.941139][ T2068] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.905871][ T5993] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 128.913375][ T5994] netlink: 68 bytes leftover after parsing attributes in process `syz.4.514'. [ 128.943597][ T6000] loop3: detected capacity change from 0 to 1024 [ 129.078020][ T6007] loop0: detected capacity change from 0 to 512 [ 129.163036][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.165434][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.407902][ T6022] netlink: 44 bytes leftover after parsing attributes in process `syz.2.522'. [ 129.669888][ T6030] loop2: detected capacity change from 0 to 2048 [ 129.839493][ T6030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.789277][ T6041] device syzkaller0 entered promiscuous mode [ 131.989488][ T6010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.025553][ T6056] loop3: detected capacity change from 0 to 128 [ 132.091264][ T6062] loop1: detected capacity change from 0 to 512 [ 132.457917][ T6071] netlink: 44 bytes leftover after parsing attributes in process `syz.1.535'. [ 132.500293][ T6071] FAULT_INJECTION: forcing a failure. [ 132.500293][ T6071] name fail_futex, interval 1, probability 0, space 0, times 0 [ 132.503009][ T6071] CPU: 1 PID: 6071 Comm: syz.1.535 Not tainted syzkaller #0 [ 132.504478][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 132.506474][ T6071] Call trace: [ 132.507136][ T6071] dump_backtrace+0x1c4/0x1f0 [ 132.508091][ T6071] show_stack+0x2c/0x3c [ 132.508925][ T6071] __dump_stack+0x30/0x40 [ 132.509773][ T6071] dump_stack_lvl+0xf4/0x15c [ 132.510765][ T6071] dump_stack+0x1c/0x5c [ 132.511703][ T6071] should_fail_ex+0x3cc/0x524 [ 132.512665][ T6071] should_fail+0x14/0x24 [ 132.513482][ T6071] get_futex_key+0x904/0xec0 [ 132.514360][ T6071] futex_wake+0x10c/0x458 [ 132.515243][ T6071] do_futex+0x2c4/0x340 [ 132.516066][ T6071] __arm64_sys_futex+0x390/0x414 [ 132.516985][ T6071] invoke_syscall+0x98/0x290 [ 132.517899][ T6071] el0_svc_common+0x13c/0x258 [ 132.518793][ T6071] do_el0_svc+0x5c/0x134 [ 132.519628][ T6071] el0_svc+0x58/0x12c [ 132.520450][ T6071] el0t_64_sync_handler+0x84/0xf0 [ 132.521507][ T6071] el0t_64_sync+0x18c/0x190 [ 132.881408][ T4333] FAT-fs (loop3): error, invalid access to FAT (entry 0xffff0000) [ 132.883102][ T4333] FAT-fs (loop3): Filesystem has been set read-only [ 132.886293][ T4333] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 132.888756][ T4333] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 141.715179][ T6058] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 141.724940][ T6067] netlink: 68 bytes leftover after parsing attributes in process `syz.0.532'. [ 142.204600][ T6101] loop2: detected capacity change from 0 to 1024 [ 142.324467][ T6108] loop1: detected capacity change from 0 to 512 [ 142.655657][ T6111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.547'. [ 142.657750][ T6111] FAULT_INJECTION: forcing a failure. [ 142.657750][ T6111] name failslab, interval 1, probability 0, space 0, times 0 [ 142.667269][ T6111] CPU: 0 PID: 6111 Comm: syz.0.547 Not tainted syzkaller #0 [ 142.668873][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 142.670973][ T6111] Call trace: [ 142.671643][ T6111] dump_backtrace+0x1c4/0x1f0 [ 142.672626][ T6111] show_stack+0x2c/0x3c [ 142.673416][ T6111] __dump_stack+0x30/0x40 [ 142.674243][ T6111] dump_stack_lvl+0xf4/0x15c [ 142.675201][ T6111] dump_stack+0x1c/0x5c [ 142.676147][ T6111] should_fail_ex+0x3cc/0x524 [ 142.677031][ T6111] __should_failslab+0xc0/0x11c [ 142.678039][ T6111] should_failslab+0x10/0x28 [ 142.678937][ T6111] __kmem_cache_alloc_node+0x7c/0x318 [ 142.680106][ T6111] kmalloc_trace+0x48/0x94 [ 142.681072][ T6111] nfnetlink_rcv+0xaac/0x1c54 [ 142.682159][ T6111] netlink_unicast+0x5fc/0x80c [ 142.683196][ T6111] netlink_sendmsg+0x6f0/0x9d8 [ 142.684250][ T6111] ____sys_sendmsg+0x588/0x90c [ 142.685188][ T6111] __sys_sendmsg+0x288/0x374 [ 142.686063][ T6111] __arm64_sys_sendmsg+0x80/0x94 [ 142.687005][ T6111] invoke_syscall+0x98/0x290 [ 142.687913][ T6111] el0_svc_common+0x13c/0x258 [ 142.688865][ T6111] do_el0_svc+0x5c/0x134 [ 142.689704][ T6111] el0_svc+0x58/0x12c [ 142.690455][ T6111] el0t_64_sync_handler+0x84/0xf0 [ 142.691441][ T6111] el0t_64_sync+0x18c/0x190 [ 142.754693][ T4339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.757518][ T4339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.759816][ T4339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.761671][ T4339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.763381][ T4339] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.764901][ T4339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.872810][ T80] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.897438][ T6117] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.977766][ T6117] chnl_net:caif_netlink_parms(): no params data found [ 142.997324][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.999164][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.001303][ T6117] device bridge_slave_0 entered promiscuous mode [ 143.314933][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.316543][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.318522][ T6117] device bridge_slave_1 entered promiscuous mode [ 143.325887][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.400818][ T80] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.405364][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.408690][ T6142] device syzkaller0 entered promiscuous mode [ 143.429279][ T6117] team0: Port device team_slave_0 added [ 143.434529][ T6117] team0: Port device team_slave_1 added [ 143.499544][ T80] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.536610][ T6151] loop2: detected capacity change from 0 to 2048 [ 143.658061][ T6151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.755942][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.762200][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.780164][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.836722][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.843470][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.848671][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.877351][ T6158] loop0: detected capacity change from 0 to 512 [ 143.911679][ T80] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.937652][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 143.964215][ T6162] FAULT_INJECTION: forcing a failure. [ 143.964215][ T6162] name fail_futex, interval 1, probability 0, space 0, times 0 [ 143.967324][ T6162] CPU: 1 PID: 6162 Comm: syz.0.561 Not tainted syzkaller #0 [ 143.968725][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 143.970868][ T6162] Call trace: [ 143.971545][ T6162] dump_backtrace+0x1c4/0x1f0 [ 143.972580][ T6162] show_stack+0x2c/0x3c [ 143.973486][ T6162] __dump_stack+0x30/0x40 [ 143.974391][ T6162] dump_stack_lvl+0xf4/0x15c [ 143.975390][ T6162] dump_stack+0x1c/0x5c [ 143.976256][ T6162] should_fail_ex+0x3cc/0x524 [ 143.977254][ T6162] should_fail+0x14/0x24 [ 143.978169][ T6162] get_futex_key+0x904/0xec0 [ 143.979148][ T6162] futex_wake+0x10c/0x458 [ 143.980002][ T6162] do_futex+0x2c4/0x340 [ 143.980892][ T6162] __arm64_sys_futex+0x390/0x414 [ 143.981868][ T6162] invoke_syscall+0x98/0x290 [ 143.982834][ T6162] el0_svc_common+0x13c/0x258 [ 143.983789][ T6162] do_el0_svc+0x5c/0x134 [ 143.984706][ T6162] el0_svc+0x58/0x12c [ 143.985564][ T6162] el0t_64_sync_handler+0x84/0xf0 [ 143.986615][ T6162] el0t_64_sync+0x18c/0x190 [ 144.062083][ T6117] device hsr_slave_0 entered promiscuous mode [ 144.109826][ T6117] device hsr_slave_1 entered promiscuous mode [ 144.149558][ T6117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.151245][ T6117] Cannot create hsr debugfs directory [ 144.418379][ T6198] loop2: detected capacity change from 0 to 512 [ 144.541675][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 144.543963][ T6117] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.593612][ T6202] device syzkaller0 entered promiscuous mode [ 144.688745][ T6117] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.743512][ T6117] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.781090][ T6117] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.819575][ T4339] Bluetooth: hci4: command 0x0409 tx timeout [ 144.900022][ T6228] loop1: detected capacity change from 0 to 2048 [ 144.924370][ T6228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.295010][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.423917][ T6256] loop0: detected capacity change from 0 to 512 [ 145.425836][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.427500][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.431052][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.733401][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 145.759133][ T6229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.763438][ T6229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.765319][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.766919][ T6229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.768567][ T6261] FAULT_INJECTION: forcing a failure. [ 145.768567][ T6261] name fail_futex, interval 1, probability 0, space 0, times 0 [ 145.775181][ T6229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.777103][ T6261] CPU: 0 PID: 6261 Comm: syz.1.583 Not tainted syzkaller #0 [ 145.778621][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 145.780791][ T6261] Call trace: [ 145.781494][ T6261] dump_backtrace+0x1c4/0x1f0 [ 145.782073][ T6229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.782467][ T6261] show_stack+0x2c/0x3c [ 145.784360][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.784873][ T6261] __dump_stack+0x30/0x40 [ 145.786445][ T6229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.787238][ T6261] dump_stack_lvl+0xf4/0x15c [ 145.789394][ T6229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.789568][ T6261] dump_stack+0x1c/0x5c [ 145.791606][ T6229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.791897][ T6261] should_fail_ex+0x3cc/0x524 [ 145.794169][ T6261] should_fail+0x14/0x24 [ 145.795044][ T6261] get_futex_key+0x904/0xec0 [ 145.795990][ T6261] futex_wake+0x10c/0x458 [ 145.796898][ T6261] do_futex+0x2c4/0x340 [ 145.797781][ T6261] __arm64_sys_futex+0x390/0x414 [ 145.798869][ T6261] invoke_syscall+0x98/0x290 [ 145.799814][ T6261] el0_svc_common+0x13c/0x258 [ 145.800779][ T6261] do_el0_svc+0x5c/0x134 [ 145.801701][ T6261] el0_svc+0x58/0x12c [ 145.802525][ T6261] el0t_64_sync_handler+0x84/0xf0 [ 145.803623][ T6261] el0t_64_sync+0x18c/0x190 [ 145.873250][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.884586][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.893375][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.936709][ T6117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.939099][ T6117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.948975][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.953092][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.956059][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.958906][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.964166][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.966597][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.968751][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.027354][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.031285][ T6291] device syzkaller0 entered promiscuous mode [ 146.313799][ T6308] loop2: detected capacity change from 0 to 2048 [ 146.317335][ T6308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.395545][ T6314] loop1: detected capacity change from 0 to 512 [ 146.495780][ T6320] loop1: detected capacity change from 0 to 1024 [ 146.890482][ T4339] Bluetooth: hci4: command 0x041b tx timeout [ 146.918420][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.924290][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.926131][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.578538][ T6355] device syzkaller0 entered promiscuous mode [ 147.592247][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.594706][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.596855][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.610636][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.613698][ T6117] device veth0_vlan entered promiscuous mode [ 147.617139][ T6117] device veth1_vlan entered promiscuous mode [ 147.628287][ T80] device hsr_slave_0 left promiscuous mode [ 147.642486][ T6377] loop2: detected capacity change from 0 to 512 [ 147.669861][ T80] device hsr_slave_1 left promiscuous mode [ 147.720033][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.721777][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.724021][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.725790][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.727537][ T80] device bridge_slave_1 left promiscuous mode [ 147.729646][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.781101][ T80] device bridge_slave_0 left promiscuous mode [ 147.782556][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.899782][ T80] device veth1_macvtap left promiscuous mode [ 147.901237][ T80] device veth0_macvtap left promiscuous mode [ 147.902534][ T80] device veth1_vlan left promiscuous mode [ 147.903736][ T80] device veth0_vlan left promiscuous mode [ 147.992563][ T80] bond2 (unregistering): (slave bridge2): Releasing active interface [ 148.720440][ T80] bond2 (unregistering): Released all slaves [ 148.760620][ T80] bond1 (unregistering): (slave bridge1): Releasing active interface [ 148.969979][ T4339] Bluetooth: hci4: command 0x040f tx timeout [ 149.482397][ T80] bond1 (unregistering): Released all slaves [ 151.049905][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 151.541255][ T4339] ------------[ cut here ]------------ [ 151.542571][ T4339] WARNING: CPU: 1 PID: 4339 at net/bluetooth/hci_conn.c:691 hci_conn_timeout+0x204/0x41c [ 151.544242][ T4339] Modules linked in: [ 151.544990][ T4339] CPU: 1 PID: 4339 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 151.546386][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 151.548282][ T4339] Workqueue: hci3 hci_conn_timeout [ 151.549266][ T4339] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 151.550841][ T4339] pc : hci_conn_timeout+0x204/0x41c [ 151.551915][ T4339] lr : hci_conn_timeout+0x204/0x41c [ 151.552987][ T4339] sp : ffff800021b47b60 [ 151.553959][ T4339] x29: ffff800021b47b60 x28: 0000000000000001 x27: ffff0000da0da330 [ 151.555725][ T4339] x26: 0000000000000002 x25: ffff0000f00a4400 x24: ffff0000c4bd6800 [ 151.557537][ T4339] x23: ffff0000c0bd1818 x22: dfff800000000000 x21: 00000000ffffffff [ 151.559230][ T4339] x20: ffff0000da0da000 x19: ffff0000da0da330 x18: 1fffe00033c2597e [ 151.560948][ T4339] x17: ffff8000163dd000 x16: ffff800011ba16d0 x15: ffff00019e12cbfc [ 151.562661][ T4339] x14: 0000000000000001 x13: 1fffe0001b41b402 x12: 0000000000000000 [ 151.564378][ T4339] x11: ff00800010d6f9bc x10: 0000000000000000 x9 : ffff800010d6f9bc [ 151.566092][ T4339] x8 : ffff0000d5bdb800 x7 : ffff80000820cd04 x6 : 0000000000000000 [ 151.567914][ T4339] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800010d6f7f4 [ 151.569607][ T4339] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 151.571334][ T4339] Call trace: [ 151.572039][ T4339] hci_conn_timeout+0x204/0x41c [ 151.573099][ T4339] process_one_work+0x7e4/0x13bc [ 151.574213][ T4339] worker_thread+0x8cc/0xfe8 [ 151.575236][ T4339] kthread+0x254/0x2e0 [ 151.576169][ T4339] ret_from_fork+0x10/0x20 [ 151.577097][ T4339] irq event stamp: 6124 [ 151.577964][ T4339] hardirqs last enabled at (6123): [] _raw_spin_unlock_irq+0x3c/0x90 [ 151.580063][ T4339] hardirqs last disabled at (6124): [] el1_dbg+0x24/0x80 [ 151.581956][ T4339] softirqs last enabled at (5026): [] handle_softirqs+0xb1c/0xc90 [ 151.584189][ T4339] softirqs last disabled at (4985): [] __do_softirq+0x14/0x20 [ 151.586287][ T4339] ---[ end trace 0000000000000000 ]--- [ 151.590588][ T80] team0 (unregistering): Port device team_slave_1 removed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 151.761156][ T80] team0 (unregistering): Port device team_slave_0 removed [ 151.930257][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.140350][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.609674][ T4339] Bluetooth: hci1: command 0x0406 tx timeout [ 153.611142][ T4339] Bluetooth: hci2: command 0x0406 tx timeout [ 153.660839][ T80] bond0 (unregistering): Released all slaves [ 158.979514][ T4335] Bluetooth: hci3: command 0x0406 tx timeout