last executing test programs: 33.62288212s ago: executing program 4 (id=11): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1daa0000000000006110200000000000950000000000000030e8a96bd11f4767f9f7dad8595c4050f7ff855a05e125ebb750c60b22ceef38fa3ace6047a16c3696f79a1f9e99c2edad92ed351b796dbc8bfa7e01b5604f750561d8e92b72215fe73f21979bb10345b42a7cf094a119d7c100191db345ee3320c586afad6766ccf2179fa381b718395d94b77bf2cc2cedbb83832db2ceb0"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e07010814"], 0xa) r0 = socket$inet6(0xa, 0xa, 0x1) bind$inet6(r0, &(0x7f0000000ac0)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000b00)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000c00)=""/227, 0xe3}], 0x2}, 0x10009}, {{0x0, 0x0, 0x0}, 0x6}], 0x4000000000002f8, 0x100, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x4ff, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000880)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000440)={0x1d, &(0x7f0000000480)=[{0x11, '\x00', @data=0x3}, {0x3, '\x00', @buffer={"ad1d5204a0095b2d11b1d2b7e3f90a71d8b72e15c4a47003109c9e5304ecd221", 0x20}}, {0x2c, '\x00', @data=0x1}, {0x22}]}) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x89901) open_tree(r4, &(0x7f0000000600)='\x00', 0x81101) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000000)="a8", 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/215, 0xd7}, 0xfffffbff}], 0x1, 0x10120, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000280)=0xa40, 0x4) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000680)=ANY=[], 0xfc, 0x2c6, &(0x7f0000000f00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0xd2942, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) io_setup(0x20ff, &(0x7f0000001280)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000001300)={0x0, 0x0, 0x0, 0x6, 0x0, r5, &(0x7f0000001340)='p', 0x1, 0x600}]) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000980)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) 31.860431819s ago: executing program 4 (id=25): socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={0xffffffffffffffff, r0, 0x16, 0x0, @void}, 0x10) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000940)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x24000840) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0xc3, @empty, 0x5}}, 0x86, 0xfffd}, &(0x7f0000000300)=0x90) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) socket$igmp(0x2, 0x3, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x183001, 0x0) r6 = epoll_create1(0x80000) epoll_pwait(r6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000005c0)={0x30000019}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000640)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000006c0)="6797f04cdb6f338ff1c922acb0da67dc3bf442976f", 0x15}], 0x1}, 0x30008b08) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x4e21, @remote}, 0x10) setns(0xc9, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000880)="120000001200e76f00341658a585107b462e", 0x12, 0x24004000, 0x0, 0x0) 30.964038429s ago: executing program 4 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sec\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) write(0xca, &(0x7f0000000980)="040e0c01030400", 0x7) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000ac0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) r5 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @desc1}, &(0x7f0000000d40)={0x0, "fdd9fe992c9e67fcd3b0dad812bb0ecf499922a4b67d34735cf1809f8d83cbe23c1197182a3ae3aa20a2c55e0620711831a056272370d42514192cfe5bc968fb", 0x1f}, 0x48, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x3, 0x0}}}}, 0x108) ppoll(&(0x7f0000000640)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000680)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @multicast2}}}, 0x108) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f00000007c0)=""/203, &(0x7f00000008c0)=0xcb) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x6}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 30.06528913s ago: executing program 4 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000a00)=ANY=[@ANYBLOB="1201000002000040f5ada1a44000010203010902"], 0x0) (async) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) (async) r0 = fanotify_init(0xf00, 0x0) fanotify_mark(r0, 0x115, 0x5000003a, 0xffffffffffffffff, 0x0) (async, rerun: 64) mount$fuse(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) (rerun: 64) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0/file0/../file0\x00', 0x180020, &(0x7f0000000f00)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="f7f146541c2abb305e34512005cc9f30ed9302a732c8d0244176cbbfe04aed0cfe41fad8dbd4335cd441cfee05b841dd265bd3c9c5c8e7f911d041ee77b60aef7f5bc03569bed2d9d98141c9574e87fb5d13293094795052724a4c952e8b483058689bb8e3f5eb38ab15a3ab2778b3b71b8ab1a937dc19b83445e257de9aa9505eb01837987850e3ebd4ac8a0cb403caecd99388296a2adb1a650582baadedfe7ded01dcf65766341119aa557d0c87848b223e5c01ce3abf7312cafba81eff047d95a7677f791e45f3962fbeaf71e8819c2e864989ee0bf8b97713150e1b8dd4eb4dc9de552e1eea5da2b978465e00cc51a9fa220c83c3b41b20f6dcc12f8f6e317b697c51a758068864a143a191d2be650b6800e87df776fe68a72dcdb5bdabacb3bcb83c7b2d50f294da803055ed0b070a188a670fd9342f8fb85d2b00a93aa0c009ef505562a2394beef6da5ad52f3ad37e64f8900afeaca0a12d5225e4419372bc896f528eb23b7218a326bdd20ee8cccaa058fda315674656d0c01a565b4045a941465252eef7502a10168bc7e1218a10e77b2259811595b2398de173718a098ba081ef95c9b08fa9d6e7e5e41357397cbbfe1211b84920066b53e51d1e88b7dbf496d8e0e5e3466f35a3966eb8bf6371b704f48f548a0801da4d0968d1776994ba5b326061c70ef9dc15ee757e22d924e01742e0c922f64299afc1a77b130cb06f64454a83017fadd565ff7461a42d24a063350331765c82060f94bda02734c13a21ff188f7ab7609d2a0b0ed3a0eb12ea20389328b58e8b0ddb42a4c0c7cc5fef903e510e4db28a144204ff2a07b4bf71df4734a742809cdc830c1dcd2180289b8fb3c06833fec1a7f9f255d1d4951aee514076d0280731f8ed14cad150e2a5a6748c5a785736355b8901f87cb6140e6e092d4c64be383ea2c7217b463ce1c07aa64dfb3202565f0a8815ddd085b33a2019d2420713fd25d7622f153c7cf2f25fb1e94bbdceeccb2ee3079d39a8396112d0b090152ac69e4ecf4ce7cc68d79a0a2f54d77a2837930d8e51d354ab0bf1bd24850e7bc6cc91b38903edf36c23b51b387e77f1e2cc4bbfa53745329d5168b23e9f05be96cc7b56f36403f2f64c94a319817af7c7a61b3178f71659ceae7d4b292cf7d2078dcc6eb8b7e0fa2069ca68183f22f1ca6e07d26bdb0ef56ac1ef6b7353f36c2f438e4c44d27331a670301019374ebd0ce3c33e6e56cb83d88a8011188729bed0db2b8f5cb79d0284914e56697e9169650387624edb20d1db686d0db54ec089081094605c333c983dc0035ec46cd086afad2f19fd9d51b51abb46b80bb04ca7d3a484b22f6c567043413ca972a7847e7a2ca14b95343efe0846934a5d55ffb20424bd8c483a62dd7e517aa765239e876555d7b5da972e085779bf152c88d6ec10da7120ef01c35d5e37ab73adb94ebf0a70a378986d16442ce8dfb32e4a36c011e9389fa5c355cdea7946ff8a1f84e90505011eed621cc35668039898a8d505ffc880683ae0c98dc26268d87d8a8dbfe0006ae15c2d3602d3454ae2aaf90845e70c08b793125722011b3153b1bdd7f4ebdc19f34bb833185eca1094461d68c4198ee9d2d22bf6f2b79ac5a1103116a4763178559a6b8a3dee977b6e8ffda747f8f01162a4f29be79d3b58fd4b065c0d3c9224d7645c5e434dfc32e2a5f91313064c8ab2261b6a72354357d56bcb197fa5944b7da4853e2b065e308eeae977ad85ab258e6060058ee0aeec08d6b7cd57e93980478e40b619f18cc084d5b2875dbfa4f79ed655de6be917f4656328bbd9436fe5f936ccd248109857c445f0c162bc2f4705a7aeaa93371e48919d7a0805addd171ca642fcfe074b8c17af1b34aeb0a354d16bd42f859bf07232ed7022fd3c92d50eba0d357598b4208c5e8b05548c72b3f3e54921a2268861836122eaeb1132ccaeeed945f5736acd6ff2b77c6dc067330d574fab2a65f36e2a15c114306a35bf61cae885c4a134e5eece08041e3142a0310d7b65aba7b9ff94adb2ee71b6ffc27d3eb2e805a98da6cb513e738c51cade68a9d88e04b47e0d4c1af3b61ff6ca8af808f19e43fcb6556f5c948aea5bd123a8354288c3bc55b59a0d7c52dcb10d0d73698031e1f64dbba2579741d5677d99dc7acbd9f3daf4eb84f0a638360aeebdf43c270af9262fd0ff16afd08e7dc82214668d3d168a4c42c96cca6e3b8f5e7bdd3ae5adb3d9ca69a5e69d2c0c296a696056091f7a4f82f3f13a4da29a0387582e6899dd87ff5a069fbbc35d32d8adb3c4107d6a93ac4427ce46ad4a10c42fea4c61fc8e4e8a063c8fcd98e3fcd44ad2717144a72f6eba69588e76a18173c285216f74120192688b07d2ebc614f9eb9efa42947647270a0d62795bc7e51e9b24fc5f437d38f1f29caa8db6f7d67ebeb7559095d4ea20dae0588928335f686abe2a21ddf1edcfc512546983b8d0aee09d5d24fee455ddc15865a17338001bd426be13c07f765a38c34497b4c34accc270b2660568cf1c4e4b06a9b3a57d688b54fe39d80f27f00cd7907d04b93f8394a1e40fa79a403c7d053bcb2f2f7623c946c79aa4b84474bbda2cb2e478f3e7b5ecdc3d40748d61c6d3405db4f41645aab1f7a00d2311070f06c9a3c1aa623ffb262f834705c69ef3c06ac7779ca1a2bda7e991e3c67a2b04086dbe081007400c3492fb0b8fc56dd397d90ad59d90d9ec6678b46e42ae7afbd11873c2255124c794f0f59ef9adf2059b7877f5e903a7cefa580777090ffc47966cee7faf5357d28f094680e5a4c05275fdcc78a109094a6da62fd58b4854ee49d3100595f3c69c77167acc0756e03def27157eb423056e426846a9c3858ac3b0266da5926a43bb053339796c273059cc71f68626794a8f40af644e0b115dc31a9c451c3ff64847f4fed7c7ddc3a5fd59f2843323b0090e8ca9d5adea97f791ed62d0561a8a4746717b09226775992955e7a904c02901f529565d6f216adb1c692ad79f8a5b93df862cc27a01fd05f294f76fdcf8b551fdef62568e402bf66ff3d71998051a69c4d20d76cff950c76dce75382c449f65bbe96e78a8bf6990d6787e7736e2c7fa434cbd82d4e892316eec0b66165d29d97df5fd8ad225f808f9a5573cd428c1b05a930bd5720bb6532416dd19398f7382411ff105d5ce6faafde24295af747553dbbcdeead604fa02be47d74ab28608b64bbde78a8dce9abf6c44c213dc92ad0fa36885fcbdf1ea9098262a82358ab10667b86476b7b15d19cd045927ee5ca43801e4d04539382ceb3d1ca3c5787ca861077216dbc8b4ac89b751c3753d04d290a76cb0a8ba03c8584ff78fd50857355f6d05853b8899c2ad5d6dec9b6c4f8dec71a78f5bc53f3eb9272312de7d1cf2e7e8debf04d2a1f10add8311fb281b7b49f2e1ff0af0ce7da9fbaabf07480e28e3af8c6cb22f136d0ca29a8159b0202b54529827aeec3620306316d6326b4c2871ac3aedcaa5e5f0a2383790cc11799c2500ac79448f99c4ecc9636dced875ca7f574425ee9ced36bb5c91d4e52940cf7fb7d31bfc949b3b4242d6ec1833404e61ba54714d2d857ff5d4d7bb9a6f04abd04a3cb385843bc09f5ae5bbb8fcdf397b09fc70fc06cced32260414a93188e1839671ffe55b5b72b08ecad0d1c8f765efa5a714a5d0828d1a35102da85b6c4245d81dece3e31f94ea79df674129610940d30fb25a6b408e8c0975653468739af064a03efea8afc91c7ace6472c2e6991c2c200cde67d79c02d3c4682e1e73653adce7b587e29646ef63cf08451fd8258ad69cb7adf587c60e975d7a1521d3556f552b958e1aa4ad97618943861ada22217ea9f597d056123d998eee75bcc7e007f7d8fd67cca3ebe2362fa76cc5c6ca9a1463030784bb8f33dfa07c05d3f3de8f5165baf4e8edb5a489d1ca012ac9a68b69264bc3bbfd2b12bbc04e23fafa3b91ae77d64535bfb6eee1df3dd2f899dd29c547c686ab7d43b944b12190e0bd8f940f14d2e307bd1f1148041d4d38a50b23a38777d4b3cb066f93d16080463e4b40ac8492eaaaca854b620d5adf2f63228e03bfa879b17dde002f3cf243d4d770ada8580b6f4b55d026b233f89abf197a02a9c917f6b006c89720d3f652cf661f9a01fc65451793c3da1e7689e1aac7d46cacf2c27e3b8f1ffe4127444549f169ccf6874471b1bde015062633836c5632c374db671d28dc510a054e25b0d5a8c693c80d05bbd70e103960ab6c6b92afafc9e5b7ddd009bdaec866472bcf884110bd7b146df4d601648bde9ea8c513fcd78e1cbd17ea0856f9573e0b2b7a22551ef82491d437fadc2e8f2992f3b970226be7cc9b427c2a2561ee2672ac4f4b95beded53e8b561f70690d1cb27ffa05ab3ce7d834036ed03e787ca31dea478e0825c2f7be840c6fef0e494680e993c194a005941dd1bf6f2abf59221da7cae4db336dcbb6452db4711c38e5eaf4ee220e5379aa1955123c3987f72ac6dd2922a19c1074a8ae725122b65761f0a5bf4a3456c54215a236c8a4aef8ea4b1fe44ded0cad8a99d5a59dd07999dda8686ea753313cdba9e1b0b23f4aea8b6b5a9bf607479763b3d90fcdf2f8cbd969c1e7976ec5f3b4d4eb6c937410e4fdc9d98adff8e98bb09b3fbf6650ad12976e8d4aa8adcbe65933c2627c9c10fbe958b4c998696c2cb9b14c318eb5ed5ae08291455444779ca11a29a58e0c19c71e1808af81502a63c0c9030e201508981ecdde7116152fd341d9461011afa449ae99b753ede43b8e4d9329eb5b85e2024d6d1e141034948ee842823f0a9b02c90994a3e48dfc254e7c6b62077e2618a13860efa064c104f9b5913cf1aaf82b61ea077bd5acb2a3628e7cfc5dcf5b4bd0fb481316cf2dc44097eb7c623e58924a28c271ecfd9574024ad4004c004df01006452b4f48707c0f6d321286227cd1a8d5d0ec3d451701da95e7182d058266fc1e83061ab47109f0607ba989159689189fcfbc904eb709c6f01a1a02ff564e2f5b87ab8451b464967d721a7a4e854fee39dcb4d63b1279c26d9ea473205cb216211ddc2020cb2ce00720cf740ee0bff2a9063266ed1bd83fa9a6d500b49f457a728a839a5e301a101b9d990ccccedd6edf499d66b326d2abe8aecd1c11753b82e8565ecb50c472574b647e314254dd210d78e8416a2f2db820bd7a7c1c382b2b5cfc4e1407f9e3f1e9bfe88d2de0143e13e4af3b3522a0da3840e85c61140548136a018081e99a7b9792eacd9b48d7efede68fa11ef4f0bbff1bf8ec524ca2d9ca115532809e9b09201c937076c0a6122eae0f0f2a7cde47c6b35fc7f83fb5b793cabf0e4b9891abf3eaf954668d7991c2fbad28bb51817e980feefbacccedeb09458f07c4a57c4bdc9250e2a7ae4f397b7a6bf9725e62ee2f5318b74ac81e2c97a24a5b2a6d4e556b4e4e57b26a473d827cb9d32867629093e12f9c6607ac995c6aeecad5b20e8d1495136975c58343444c15639248bccaab5a5d005d79e075dc6c9346147e0c2cdeaa1049b9217125db9c1ff734bcf12c0998960ce630afbda39fbe3d85e1cbcfd34962098836ff494364acd065315ca4bbedce08a33678330cf256c55064f6e1b37e50f90c055eb4e1cbbdef65bd77e70fc07e45537e4b255d0cfaa0d6b383d8fe815b02885416ac6e6ef6e32fa6ec1774832412968f61df731e4e73d12f7593d902a50ac024a19fbe0e9f6bc1eefb2027f047c9b0b25d75d9d6127c568092186915712c543e1615ad7b328c9c39a8c720dcdf513097bf", @ANYRES64=r1, @ANYRES16=r1], 0x1, 0x394, &(0x7f0000000b40)="$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") setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000ac0)='./proc_mnt\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000000), 0x4924b68, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 29.022757433s ago: executing program 4 (id=51): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f0000000580)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001140)='.\x00', 0x0, 0x82) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x270, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000007480)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0}]) syz_open_dev$vim2m(&(0x7f00000074c0), 0x7, 0x2) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001180)={0x8, 0x40000ccaa, 0x10003}) 27.599801633s ago: executing program 4 (id=64): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$dm_control(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000b40)={0x4, 0x2000000, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@thin_pool={0x0, 0x2000, 0x0, 0x70, 'thin-pool\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '64', 0x20, 0x1f, ' 1 no_discard_passdown'}}]}) 27.528497738s ago: executing program 32 (id=64): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = openat$dm_control(0xffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000a00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000b40)={0x4, 0x2000000, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@thin_pool={0x0, 0x2000, 0x0, 0x70, 'thin-pool\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '64', 0x20, 0x1f, ' 1 no_discard_passdown'}}]}) 15.136638487s ago: executing program 1 (id=202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x0) 15.07955565s ago: executing program 1 (id=204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x7c1f1000) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x14985, 0x3, 0x3}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0xa7c, r2}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000cc0)) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000d00)={'wlan0\x00', @random="7cf1e97c9e4f"}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f00000006c0)={[{@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8no}]}, 0x81, 0x305, &(0x7f0000000900)="$eJzs3T+LY1UUAPDz8m+SVUwKKxF8oIXVsLufYAYZYXEqJYU2OrhZkLywkEBgVjEzlY2VYOV3sNsPYGdjY22jYCt2biE+yXt5kz+b3c3izqwsv1+TM7nnvHvvmTczIZA7n7w+Gt6+O7lz/sWv0W4nUTuIg3iQRC9qUTkLAOBF8iDP48+89KTc1tpXjdplrgsAuDw7//2vX9mSAIBL9sGHH713eHx89H6atiNGX037SZSP5fjhnfgsshjE9ejG3xH5hTJ++dbxUTTStHozYNqJfsTo458iX75imNffiG70NuurdxTSQrw1j4v5Z9N+M64lEYd5UqbcjG68GpE3Y3GR8uHdW8dHN9Oqfl43X/loFv1WvP3md4v1/zOI/ejGz5/G3cjidnGJZf2XN9L0nfzbvz4vd9CPSGbT/l6RF1//tlhj7hUQAAAAAAAAAAAAAAAAAAAAAADPzH56obd6fk51GuD+/uZ4ox/xxyjOynN5lucDHURxPtDihJ/Zyvk619M0rY7xmfabi/N9GvFaIxrPcesAAAAAAAAAAAAAAAAAAADwvzE5vTc8ye7HuAyyQRH8kM+DzlrOYmhrUGVWz1Qf63981UZwLaJaxvD7iB2rnjKIerXUZH2K2rIn2WDc2fWC9x8xtPdwcl4Ev8R5Mcl40p5PVQx1Vlp3URW1R/WwkUXSjIjhN0/fhDdi21zZK0Wwt2jA2lAndpyiFyfzVdVO7w2rTg5PkihyWivdXa9qb9ngaWQrd115c80vnex8Qw7G+ZbW1bcnd8eT1pMuWN+tCa2Xtgz9uMt3pxPbhpLFzmO5+7Mqp73RzOYz/knZkPyXXzMAAAAAAAAAAAAAAAAAAMAOlh/6jd8fGjx/LksCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCtX/P//TjYYF0E2D6K3CC6e2Qxm9bK4eKb2+OS98WTLtL2r3icAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvtn8DAAD//y9OOBE=") openat(0xffffffffffffff9c, &(0x7f0000000c40)='./bus\x00', 0xc2143, 0x11) mknodat$null(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x0, 0x103) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) landlock_restrict_self(r1, 0x1) connect$unix(r5, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 14.901768139s ago: executing program 1 (id=207): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000480), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'macsec0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000600)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 13.887151401s ago: executing program 1 (id=217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000380), 0x2, 0x522, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000001680)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f00000016c0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r1, &(0x7f0000001700)={0x2020}, 0xfffffeb1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000300)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0xd, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xae}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) unshare(0x22020400) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) pread64(r2, &(0x7f0000000140)=""/4, 0x4, 0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mlock(&(0x7f0000158000/0x4000)=nil, 0x4000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone3(&(0x7f0000000240)={0x204801600, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) write(r4, &(0x7f00000002c0)='\a', 0x1) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) 13.64832325s ago: executing program 1 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sec\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) write(0xca, &(0x7f0000000980)="040e0c01030400", 0x7) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000ac0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) r4 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @desc1}, &(0x7f0000000d40)={0x0, "fdd9fe992c9e67fcd3b0dad812bb0ecf499922a4b67d34735cf1809f8d83cbe23c1197182a3ae3aa20a2c55e0620711831a056272370d42514192cfe5bc968fb", 0x1f}, 0x48, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x3, 0x0}}}}, 0x108) 12.717127449s ago: executing program 1 (id=227): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000700)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) (fail_nth: 4) 12.563337473s ago: executing program 33 (id=227): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000700)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) (fail_nth: 4) 3.181468024s ago: executing program 3 (id=321): socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={0xffffffffffffffff, r0, 0x16, 0x0, @void}, 0x10) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000940)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x24000840) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0xc3, @empty, 0x5}}, 0x86, 0xfffd}, &(0x7f0000000300)=0x90) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) socket$igmp(0x2, 0x3, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x183001, 0x0) r6 = epoll_create1(0x80000) epoll_pwait(r6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000005c0)={0x30000019}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000640)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000006c0)="6797f04cdb6f338ff1c922acb0da67dc3bf442976f", 0x15}], 0x1}, 0x30008b08) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x4e21, @remote}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000880)="120000001200e76f00341658a585107b462e", 0x12, 0x24004000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a00)=""/217, 0xd9}, {&(0x7f0000001f00)=""/125, 0x7d}, {&(0x7f0000000b80)=""/4099, 0x1003}, {&(0x7f0000000b00)=""/84, 0x54}, {&(0x7f0000001cc0)=""/293, 0x125}, {&(0x7f0000000000)=""/233, 0xe9}, {&(0x7f0000001bc0)=""/250, 0xfa}], 0x7}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f75}], 0x3, 0x0, 0x0) 2.412513324s ago: executing program 6 (id=326): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.361056509s ago: executing program 0 (id=328): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs_dir\x00', &(0x7f0000000280)='tracefs\x00', 0x200802, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x1, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 2.360585468s ago: executing program 6 (id=329): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0xfffffffffffffffb, 0x40) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000140)={{0x8, 0x0, 0x0, 0x737a, 0x7fff}, [{0x4, 0x6, 0x2, 0x7f}, {0x9, 0x3, 0x10, 0x3}, {0x6, 0x10001, 0x9}, {0x3, 0x1, 0x9, 0x80}, {0xf, 0x1, 0x2, 0x7f}]}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz1\x00', {0x8000}, 0x0, [0x9, 0x1, 0x0, 0x0, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x400, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x27], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xfffffffb, 0x806, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f01a, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0xa, 0x0, 0xffffffffffffffff) r4 = syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES8], 0x0, 0x1cc, &(0x7f00000002c0)="$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") ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x4010586e, &(0x7f00000000c0)={0xffffffffffffff01, 0x7}) 2.310088655s ago: executing program 3 (id=330): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c052f20"], 0xf) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x20114a00, 0xfff, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x80, 0xfffffffe}}, 0x50) r3 = semget(0x1, 0x4, 0x69c) semop(r3, &(0x7f0000000000)=[{0x1, 0x8001, 0x1000}], 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000300)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000000100)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000200)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000240), 0x4) sendto$inet(r5, &(0x7f0000000280), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f00000002c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) read$FUSE(r0, &(0x7f000000d080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 2.269916535s ago: executing program 0 (id=331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000010000000700000a38000000030a030000000000000000000a0000070900030073797a30000000000900010073797a31000000000c0002"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.944920052s ago: executing program 6 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x14, 0x10, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r0}, &(0x7f0000001140), &(0x7f0000001180)=r2}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000011c0)=@generic={&(0x7f0000000e80)='./file0\x00', r2}, 0x18) setns(0xc9, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000bc0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000c80)={0x0, {{0xa, 0x0, 0x3, @mcast1, 0x1}}, {{0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000dc0)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x81}}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b40), 0x0, 0x10, &(0x7f0000000b80), 0xfffffffffffffd00}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xaa00, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) sendmmsg$inet6(r3, &(0x7f00000023c0)=[{{&(0x7f0000002400)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000002480)='mYz', 0x3}], 0x1}}], 0x1, 0x0) 1.888240253s ago: executing program 0 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x82) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1800006acbe9c853d2b9adfb57b38100091401"], 0x18}}, 0x2000c050) fanotify_init(0x81, 0x40000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x970a40, 0x6ab858183a7ef6bf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000002c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) sendmsg$can_raw(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1d, r4}, 0x10, &(0x7f0000000680)={&(0x7f0000000700)=@can={{0x2, 0x1}, 0x9, 0x6, 0x0, 0x0, "00ff1000"}, 0x10}}, 0x4001) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x200440c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/sys/kernel/core_pattern\x00', 0x901, 0x188) write(r5, &(0x7f0000000c80)="7c3f1f37225bdfe5385a40e255da7bab022b4fb75989b4ba89c34217984ac0a7505de2b627f29a465d4387c1669cda5657b5eccae4343e4681f08779a8e1104f0e4e9e8a1364ef22d04f72d214b4e84890a5cad712636554b6a899c174fc572659dcd0d053431eb48362d6befca3baf22afc2b760ff1f20439927d8e7ca312", 0x7f) 1.769474307s ago: executing program 6 (id=334): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x4000000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'macsec0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000600)={0x11, 0x0, r3, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100), 0x3b, 0x40800, &(0x7f0000000140)={0x11, 0x19, r6, 0x1, 0xea, 0x6, @random="4189f1ee00"}, 0x14) 1.708361302s ago: executing program 5 (id=335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x80) 1.610898152s ago: executing program 5 (id=336): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000600)="5500000005000102970108", 0xb) 1.610422442s ago: executing program 5 (id=337): r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x800007a1) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"67e9817f25c7496cf40d16580f4c4d439272cbc95a49b7f067e1a70fc682f077", 0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{r0, 0x1000}, {r1, 0x8060}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0xa79]}, 0x8) 1.30154021s ago: executing program 2 (id=341): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000208000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000005c0)={0x3ffffffffffffe96, &(0x7f00000006c0)=[{0x4000, 0x5}]}) 1.201660262s ago: executing program 2 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000740)='proc\x00', &(0x7f0000000780)='./proc/net/rpc/use-gss-proxy\x00', 0xffffffffffffffff) 1.178719783s ago: executing program 2 (id=343): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x280440e, &(0x7f00000004c0)={[{@debug}, {@test_dummy_encryption_v1}, {@resuid={'resuid', 0x3d, 0xee01}}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@nodelalloc}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001a00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) lseek(r1, 0x50000000, 0x3) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000106010000000000000500000505000100070000000500010007000000050001000700000005000100b90000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1b1) write(r2, &(0x7f0000000180)='27', 0x2) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000800000d"], &(0x7f0000000580)=""/4089, 0x66, 0xff9, 0x8}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000002640)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f00000002c0)='./proc\x00', r3}, 0x18) 1.062322179s ago: executing program 0 (id=344): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000480), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'macsec0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000600)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 990.16816ms ago: executing program 2 (id=345): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x9, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xebffffff, 0x0) 883.751412ms ago: executing program 3 (id=346): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracefs_dir\x00', &(0x7f0000000280)='tracefs\x00', 0x200802, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x1, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000000dbc0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 849.655508ms ago: executing program 3 (id=347): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) (async) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r1, 0x84, 0x7f, 0xfffffffffffffffe, &(0x7f00000000c0)=0x77) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0x4, 0x1, &(0x7f0000000080)={0x10, "14a6c62707da000000b100000000000028000000000000000000000000002000"}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r6, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x48000) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x48000) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000204902ca1e1cf29c5451582efa910401a52890f1c2b5939043954da45ac6f2ba5063719b472c929174a3af65e8cc29f7be2dddc793d005ddf23bb434c8859c7506cf8c59e783dd54b6b8b29eaf09018c659cdd95d923b04122d691ec49bf3a44558853e4bc4d26d74f19fa56044b52619a3a2cc9901ee3bb5b51410b66b04d68aff8da3915e6a0447636eb7c2a6134922b96a75926956cdee6c0f1d1", @ANYRES16=r8, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x4804) 603.640881ms ago: executing program 6 (id=348): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}, 0x90}, 0x1c) r1 = socket(0x2, 0x3, 0xff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cf0401000000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="040013000a000600ffffffffffff000006001200040800000600b500c90200000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x10, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000a80)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') fchdir(r5) syz_read_part_table(0x59d, &(0x7f0000000380)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") 566.328401ms ago: executing program 3 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000014c0)='./proc\x00', &(0x7f0000001500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x100}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket(0x2c, 0x80000, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 566.123758ms ago: executing program 5 (id=350): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x4000000006, 0x101) pwrite64(r1, 0x0, 0x0, 0x6) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, 0x0, &(0x7f00000000c0), 0x0, 0x7000}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) r5 = dup(r4) r6 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000180)={0x1, r5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000540)='GPL\x00'}, 0x48) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x70bd2c, 0x259fdbfe, {0x5ddb50577fbb1f2d, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24008880) 565.319504ms ago: executing program 3 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sec\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) write(0xca, &(0x7f0000000980)="040e0c01030400", 0x7) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000ac0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) r5 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @desc1}, &(0x7f0000000d40)={0x0, "fdd9fe992c9e67fcd3b0dad812bb0ecf499922a4b67d34735cf1809f8d83cbe23c1197182a3ae3aa20a2c55e0620711831a056272370d42514192cfe5bc968fb", 0x1f}, 0x48, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x3, 0x0}}}}, 0x108) ppoll(&(0x7f0000000640)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x6}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 530.428951ms ago: executing program 6 (id=352): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = gettid() timer_create(0x5, &(0x7f0000000140)={0x0, 0x4, 0x4, @thr={&(0x7f0000000200)="beea15830e71e970b64520039379ef7cca33c8ac2abb5621f42e0073936863c761f46949d4622604c6aabc7dbc9f6b9d951a77fb8a1b8ad34a0d931a07ad5822a411aacd2f2d83f1c09fe45347376e5e244fc93c75a8eab3acd841b52e25cc1d8a80ddc4738dafb08eac2300d21f15f7362c7eb0f14993c6c75ee468a02f1d1699d7b9e411a5b7954339dc3451f6fd5e1ced049e8e90144e3a774f446d682c4e594d9a24b6ae2b9c32eaf078d1a7e90765751198662c89aadb09877358c0e44e59f8f58ad65dddfab5df292219c8c245762c183380d319b274094b7faa59f33c38b20101d4d7b196a337eb73b7323c048826eb3b98f2be838b", &(0x7f0000000300)="b8e4f88575b171f394a4348db1f04c20f018ddda477cccc856df1eba8d0c10bec1bcc63ab2112278414c5333fca6e61343a510c0c6c0686de859bf465521cf33b5ebda7eade86d57eb931cb1329b5427f9c42750ae7049f84280d2cf9120f4d0c09a8de88cac44bf582bfceb66b5632eb24c5110a2267681cdad1ac3fd29f3e0f84c9ed73e6e30e53a63ee43b0ef649ba3ae556dba4f11b3bdfdd27c2b297750ae1b331a64960894ddd35e0430c5b591708b1d3a23b9b8845560"}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe) socket$inet6(0xa, 0x3, 0x8000000003c) socket$kcm(0x2, 0x1, 0x84) (async) socket$kcm(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x4000800) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x4000800) brk(0xdc0000000000) (async) brk(0xdc0000000000) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f00000000c0), 0xa6) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket$rxrpc(0x21, 0x2, 0x2) (async) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r6 = getpid() prlimit64(r6, 0x1, &(0x7f0000000900)={0x2, 0x2}, 0x0) (async) prlimit64(r6, 0x1, &(0x7f0000000900)={0x2, 0x2}, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000940)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) connect$unix(r7, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r7, &(0x7f0000000a80), 0x10106, 0x2, 0x0) (async) recvmmsg(r7, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6) 444.491685ms ago: executing program 5 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000740)='proc\x00', &(0x7f0000000780)='./proc/net/rpc/use-gss-proxy\x00', 0xffffffffffffffff) 444.094231ms ago: executing program 5 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x82) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1800006acbe9c853d2b9adfb57b38100091401"], 0x18}}, 0x2000c050) fanotify_init(0x81, 0x40000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x970a40, 0x6ab858183a7ef6bf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000002c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) sendmsg$can_raw(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1d, r4}, 0x10, &(0x7f0000000680)={&(0x7f0000000700)=@can={{0x2, 0x1}, 0x9, 0x6, 0x0, 0x0, "00ff1000"}, 0x10}}, 0x4001) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x200440c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/sys/kernel/core_pattern\x00', 0x901, 0x188) write(r5, &(0x7f0000000c80)="7c3f1f37225bdfe5385a40e255da7bab022b4fb75989b4ba89c34217984ac0a7505de2b627f29a465d4387c1669cda5657b5eccae4343e4681f08779a8e1104f0e4e9e8a1364ef22d04f72d214b4e84890a5cad712636554b6a899c174fc572659dcd0d053431eb48362d6befca3baf22afc2b760ff1f20439927d8e7ca312", 0x7f) 112.392163ms ago: executing program 0 (id=355): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000001600)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000003600)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000003640)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000003680)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003700)={'lo\x00', 0x0}) bind$xdp(r3, &(0x7f0000003740)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r3, 0x100000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 74.737567ms ago: executing program 2 (id=356): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc041389810039000000060fe30c00fffd000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) (fail_nth: 19) 276.806µs ago: executing program 2 (id=357): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000380)={0x40, 0x1}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000f236b7c49f093bfa4c6e2c601c3603e72a459c98b438c258836648a52ad8200146191c2e066fb6fb1b8f2123765ef46d188de37f11990342c1521e3b29a69b9006872fec52f6e4dff0d51465dad760e4dc03f7b94fbedb3ad49c35fb170b4a6308d3a7ba7b019f406ecb", @ANYRES16=r2, @ANYBLOB="435725bd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) sendto(r3, &(0x7f0000000340)="3e0000000b000101000000000000000000", 0x11, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100028bd08000000df25000000000600060002000000080202000100000014000b00200100020000000000000004007f000001"], 0x40}, 0x1, 0x0, 0x0, 0x44805}, 0x8000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 0s ago: executing program 0 (id=358): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000880), 0x2) r1 = memfd_create(&(0x7f00000008c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000004) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000002000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000800000000000000080"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 28.531016][ T4699] cgroup: Unknown subsys name 'net' [ 28.650985][ T4699] cgroup: Unknown subsys name 'cpuset' [ 28.653510][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.822995][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.309940][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.309998][ T4724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.310610][ T4725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.310874][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.311101][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.311597][ T4725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.311597][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.311885][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.312152][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.312191][ T4725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.312337][ T4725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.312595][ T4725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.312642][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.312785][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.313024][ T4725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.313167][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.313552][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.313947][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.313991][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.314354][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.314489][ T4727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.314695][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.314939][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.315922][ T4716] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.316180][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.506509][ T4712] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.506798][ T4712] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.507133][ T4712] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.510232][ T4711] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.535384][ T4710] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.577245][ T4713] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.590105][ T4719] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.597876][ T4712] infiniband rxe0: set active [ 30.598180][ T1527] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.599681][ T4712] infiniband rxe0: added rxe_eth0 [ 30.617067][ T4712] RDS/IB: rxe0: added [ 30.617139][ T4712] smc: adding ib device rxe0 with port count 1 [ 30.617164][ T4712] smc: ib device rxe0 port 1 has no pnetid [ 30.630154][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.632910][ T4712] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.686650][ T4713] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.726315][ T4719] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.767386][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.767745][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.767853][ T4711] bridge_slave_0: entered allmulticast mode [ 30.768390][ T4711] bridge_slave_0: entered promiscuous mode [ 30.774060][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.774087][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.774145][ T4711] bridge_slave_1: entered allmulticast mode [ 30.774564][ T4711] bridge_slave_1: entered promiscuous mode [ 30.781676][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.782523][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.789409][ T4711] team0: Port device team_slave_0 added [ 30.795662][ T4712] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.795998][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.798140][ T4711] team0: Port device team_slave_1 added [ 30.820535][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.828942][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.828998][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.829052][ T4710] bridge_slave_0: entered allmulticast mode [ 30.836073][ T4710] bridge_slave_0: entered promiscuous mode [ 30.844569][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.844581][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.844593][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.845466][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.845473][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.845485][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.847938][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.847966][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.848028][ T4710] bridge_slave_1: entered allmulticast mode [ 30.848439][ T4710] bridge_slave_1: entered promiscuous mode [ 30.856691][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.857545][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.870094][ T4710] team0: Port device team_slave_0 added [ 30.885135][ T4710] team0: Port device team_slave_1 added [ 30.901021][ T4712] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.909039][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.909051][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.909062][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.909840][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.909848][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.909861][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.945258][ T4711] hsr_slave_0: entered promiscuous mode [ 30.945594][ T4711] hsr_slave_1: entered promiscuous mode [ 30.968727][ T4710] hsr_slave_0: entered promiscuous mode [ 30.969028][ T4710] hsr_slave_1: entered promiscuous mode [ 30.969227][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.969235][ T4710] Cannot create hsr debugfs directory [ 31.017644][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.017712][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.017820][ T4713] bridge_slave_0: entered allmulticast mode [ 31.018174][ T4713] bridge_slave_0: entered promiscuous mode [ 31.019598][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.019620][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.019670][ T4713] bridge_slave_1: entered allmulticast mode [ 31.020037][ T4713] bridge_slave_1: entered promiscuous mode [ 31.026752][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.027651][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.036786][ T4713] team0: Port device team_slave_0 added [ 31.037515][ T4713] team0: Port device team_slave_1 added [ 31.047792][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.047805][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.047817][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.048356][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.048363][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.048375][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.096015][ T4713] hsr_slave_0: entered promiscuous mode [ 31.096323][ T4713] hsr_slave_1: entered promiscuous mode [ 31.096502][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 31.096510][ T4713] Cannot create hsr debugfs directory [ 31.117334][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.117400][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.117495][ T4719] bridge_slave_0: entered allmulticast mode [ 31.117880][ T4719] bridge_slave_0: entered promiscuous mode [ 31.118945][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.118966][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.119018][ T4719] bridge_slave_1: entered allmulticast mode [ 31.119486][ T4719] bridge_slave_1: entered promiscuous mode [ 31.126919][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.127820][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.134881][ T4719] team0: Port device team_slave_0 added [ 31.148261][ T4719] team0: Port device team_slave_1 added [ 31.163066][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.163079][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.163093][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.182332][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.182346][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.182360][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.199338][ T4719] hsr_slave_0: entered promiscuous mode [ 31.199986][ T4719] hsr_slave_1: entered promiscuous mode [ 31.200167][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 31.200175][ T4719] Cannot create hsr debugfs directory [ 31.205921][ T4711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.207380][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.217775][ T4711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.218818][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.238789][ T4711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.240506][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.240855][ T4711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.241825][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.246687][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.246739][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.246862][ T4712] bridge_slave_0: entered allmulticast mode [ 31.247273][ T4712] bridge_slave_0: entered promiscuous mode [ 31.259039][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.259092][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.259200][ T4712] bridge_slave_1: entered allmulticast mode [ 31.259759][ T4712] bridge_slave_1: entered promiscuous mode [ 31.266316][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.268528][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.282709][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.284211][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.285296][ T4712] team0: Port device team_slave_0 added [ 31.286155][ T4712] team0: Port device team_slave_1 added [ 31.296592][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.297812][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.314625][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.315681][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.316146][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.316155][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.316168][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.317645][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.317678][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.317826][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.317854][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.324857][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.331463][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.334541][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.334551][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.334564][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.360521][ T4712] hsr_slave_0: entered promiscuous mode [ 31.361174][ T4712] hsr_slave_1: entered promiscuous mode [ 31.361362][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 31.361370][ T4712] Cannot create hsr debugfs directory [ 31.367230][ T4713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.369410][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.383775][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.383825][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.383890][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.383921][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.385206][ T4713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.386109][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.388829][ T4713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.393473][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.410463][ T4713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.411736][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.413988][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.425107][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.426268][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.434530][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.435695][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.436359][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.437294][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.439020][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.440779][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.447139][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.447164][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.447246][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.447275][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.462301][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.466517][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.477360][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.478152][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.478180][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.478253][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.478281][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.482495][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.498452][ T225] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.498953][ T225] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.505468][ T225] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.505739][ T225] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.517927][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.531494][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.536831][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.536871][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.537529][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.537551][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.549208][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.554329][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.557653][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.557668][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.595412][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.595451][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.596183][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.596206][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.616629][ T4712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.625759][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.635323][ T4712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.636783][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.652470][ T4712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.653525][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.653862][ T4712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.655327][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.729596][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.733413][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.738207][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.738252][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.738807][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.738827][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.805285][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.836337][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.855623][ T4719] veth0_vlan: entered promiscuous mode [ 31.857636][ T4719] veth1_vlan: entered promiscuous mode [ 31.866413][ T4711] veth0_vlan: entered promiscuous mode [ 31.868121][ T4711] veth1_vlan: entered promiscuous mode [ 31.879107][ T4719] veth0_macvtap: entered promiscuous mode [ 31.891422][ T4711] veth0_macvtap: entered promiscuous mode [ 31.894072][ T4711] veth1_macvtap: entered promiscuous mode [ 31.898275][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.899340][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.907558][ T186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.908001][ T186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.916095][ T4719] veth1_macvtap: entered promiscuous mode [ 31.923195][ T206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.923246][ T206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.924565][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.933572][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.944497][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.984650][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.028553][ T4710] veth0_vlan: entered promiscuous mode [ 32.036482][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.036492][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.054007][ T4710] veth1_vlan: entered promiscuous mode [ 32.058071][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.058084][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.084025][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.084039][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.084434][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.084443][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.087782][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.099657][ T206] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.099887][ T206] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.100070][ T206] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.100085][ T206] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.123569][ T4713] veth0_vlan: entered promiscuous mode [ 32.126653][ T4713] veth1_vlan: entered promiscuous mode [ 32.127756][ T4710] veth0_macvtap: entered promiscuous mode [ 32.129087][ T4710] veth1_macvtap: entered promiscuous mode [ 32.136702][ T4712] veth0_vlan: entered promiscuous mode [ 32.138750][ T4712] veth1_vlan: entered promiscuous mode [ 32.143293][ T4713] veth0_macvtap: entered promiscuous mode [ 32.144438][ T4713] veth1_macvtap: entered promiscuous mode [ 32.147951][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.154319][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.155757][ T206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.155998][ T206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.177903][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.181639][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.200042][ T225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.200077][ T225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.200095][ T225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.227351][ T4712] veth0_macvtap: entered promiscuous mode [ 32.232874][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.232888][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.246913][ T4712] veth1_macvtap: entered promiscuous mode [ 32.250992][ T4719] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.267084][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.267100][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.269775][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.270017][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.291993][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.293576][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.302124][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.302140][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.310158][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.310300][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.310319][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.310334][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.326377][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.326395][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.350168][ T4723] Bluetooth: hci3: command tx timeout [ 32.350277][ T4723] Bluetooth: hci0: command tx timeout [ 32.350343][ T4723] Bluetooth: hci1: command tx timeout [ 32.350406][ T4723] Bluetooth: hci2: command tx timeout [ 32.354965][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.354978][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.358303][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.358315][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.361415][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.392207][ T4918] loop0: detected capacity change from 0 to 33792 [ 32.397958][ T4918] ======================================================= [ 32.397958][ T4918] WARNING: The mand mount option has been deprecated and [ 32.397958][ T4918] and is ignored by this kernel. Remove the mand [ 32.397958][ T4918] option from the mount to silence this warning. [ 32.397958][ T4918] ======================================================= [ 32.399131][ T4918] EXT4-fs: Ignoring removed oldalloc option [ 32.399195][ T4918] EXT4-fs: Ignoring removed orlov option [ 32.399318][ T4918] ext2: Unknown parameter 'fowner>00000000000808464906' [ 32.489686][ T4722] Bluetooth: hci4: command tx timeout [ 32.661601][ T4918] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 32.693935][ T4928] ip_tables: iptables: counters copy to user failed while replacing table [ 32.699310][ T4928] dummy0: mtu less than device minimum [ 32.702833][ T4928] ip_tables: iptables: counters copy to user failed while replacing table [ 32.703956][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 32.793912][ T4935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.848423][ T4947] xt_hashlimit: size too large, truncated to 1048576 [ 32.877617][ T4723] block nbd0: Receive control failed (result -32) [ 32.877651][ T4722] block nbd0: Receive control failed (result -32) [ 32.888096][ T4935] syzkaller0: entered promiscuous mode [ 32.888114][ T4935] syzkaller0: entered allmulticast mode [ 33.238204][ T4957] loop3: detected capacity change from 0 to 49152 [ 33.280289][ T4957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 33.457588][ T4974] loop4: detected capacity change from 0 to 256 [ 33.491523][ T4723] Bluetooth: hci1: unexpected subevent 0x37 length: 25 > 13 [ 34.090877][ T4986] fuse: Unknown parameter '&d¨àI°Ø ö5' [ 34.134003][ T4986] loop2: detected capacity change from 0 to 49152 [ 34.134437][ T4986] EXT4-fs: Ignoring removed i_version option [ 34.135736][ T4986] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 34.145135][ T4986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: journalled. [ 34.237068][ T4996] loop0: detected capacity change from 0 to 33280 [ 34.244375][ T4996] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.248951][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.256337][ T4996] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.17: inode has both inline data and extents flags [ 34.256404][ T4996] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.257144][ T4996] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.17: couldn't read orphan inode 15 (err -117) [ 34.257183][ T4996] loop0: lost filesystem error report for type 5 error -117 [ 34.259663][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 34.259672][ C0] EXT4-fs (loop0): initial error at time 34: ext4_orphan_get:1404: inode 15 [ 34.259690][ C0] EXT4-fs (loop0): last error at time 34: ext4_orphan_get:1409 [ 34.261370][ T4996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.327828][ T5001] ip_tables: iptables: counters copy to user failed while replacing table [ 34.329014][ T5001] dummy0: mtu less than device minimum [ 34.330875][ T5001] ip_tables: iptables: counters copy to user failed while replacing table [ 34.333041][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 34.334668][ T4996] fscrypt: AES-256-XTS using blk-crypto-fallback [ 34.429624][ T4723] Bluetooth: hci2: command tx timeout [ 34.429642][ T4722] Bluetooth: hci1: command tx timeout [ 34.429656][ T4723] Bluetooth: hci0: command tx timeout [ 34.504923][ T5013] loop2: detected capacity change from 0 to 8 [ 34.513431][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.521204][ T4721] Bluetooth: hci4: command tx timeout [ 34.527548][ T5013] Bluetooth: MGMT ver 1.23 [ 35.292141][ T5022] device-mapper: table: 248:0: thin: Error opening pool device (-ENOENT) [ 35.292156][ T5022] device-mapper: ioctl: error adding target to table [ 35.310028][ T4721] Bluetooth: hci3: command tx timeout [ 35.353198][ T5022] loop1: detected capacity change from 0 to 8192 [ 35.354645][ T5022] vfat: Unknown parameter '' [ 35.429157][ T5030] loop1: detected capacity change from 0 to 36864 [ 35.448189][ T5030] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.470442][ T5030] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.473608][ T5030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.507707][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.538819][ T5035] Zero length message leads to an empty skb [ 35.561741][ T5037] FAULT_INJECTION: forcing a failure. [ 35.561741][ T5037] name failslab, interval 1, probability 0, space 0, times 1 [ 35.561761][ T5037] CPU: 1 UID: 0 PID: 5037 Comm: syz.3.30 Not tainted syzkaller #0 PREEMPT [ 35.561773][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 35.561779][ T5037] Call trace: [ 35.561781][ T5037] show_stack+0x2c/0x3c (C) [ 35.561796][ T5037] __dump_stack+0x30/0x40 [ 35.561804][ T5037] dump_stack_lvl+0xd8/0x12c [ 35.561811][ T5037] dump_stack+0x1c/0x28 [ 35.561818][ T5037] should_fail_ex+0x3fc/0x570 [ 35.561830][ T5037] should_failslab+0xc4/0x120 [ 35.561838][ T5037] __kmalloc_noprof+0x108/0x6c8 [ 35.561846][ T5037] __memcg_list_lru_alloc+0x1c4/0x4e8 [ 35.561854][ T5037] memcg_list_lru_alloc+0xc4/0xf8 [ 35.561861][ T5037] __memcg_slab_post_alloc_hook+0x22c/0x824 [ 35.561872][ T5037] kmem_cache_alloc_lru_noprof+0x32c/0x5d8 [ 35.561880][ T5037] debugfs_alloc_inode+0x2c/0x3c [ 35.561891][ T5037] alloc_inode+0x68/0x198 [ 35.561901][ T5037] new_inode+0x20/0x50 [ 35.561911][ T5037] debugfs_get_inode+0x20/0x7c [ 35.561920][ T5037] debugfs_create_dir+0x6c/0x2f4 [ 35.561930][ T5037] ieee80211_debugfs_recreate_netdev+0x17c/0x11e8 [ 35.561939][ T5037] drv_remove_interface+0x1b8/0x594 [ 35.561950][ T5037] __ieee80211_suspend+0x630/0xfd0 [ 35.561958][ T5037] reset_write+0x84/0x1d4 [ 35.561968][ T5037] short_proxy_write+0x120/0x164 [ 35.561975][ T5037] vfs_write+0x2a4/0xa0c [ 35.561982][ T5037] ksys_write+0x12c/0x228 [ 35.561990][ T5037] __arm64_sys_write+0x84/0x98 [ 35.561997][ T5037] invoke_syscall+0x98/0x244 [ 35.562005][ T5037] el0_svc_common+0xec/0x23c [ 35.562012][ T5037] do_el0_svc+0x4c/0x5c [ 35.562019][ T5037] el0_svc+0x60/0x1d8 [ 35.562028][ T5037] el0t_64_sync_handler+0x44/0x104 [ 35.562036][ T5037] el0t_64_sync+0x198/0x19c [ 35.562056][ T5037] debugfs: out of free dentries, can not create directory 'netdev:wlan0' [ 35.727822][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.054908][ T5055] FAULT_INJECTION: forcing a failure. [ 36.054908][ T5055] name failslab, interval 1, probability 0, space 0, times 0 [ 36.054927][ T5055] CPU: 0 UID: 0 PID: 5055 Comm: syz.2.34 Not tainted syzkaller #0 PREEMPT [ 36.054939][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 36.054946][ T5055] Call trace: [ 36.054949][ T5055] show_stack+0x2c/0x3c (C) [ 36.054966][ T5055] __dump_stack+0x30/0x40 [ 36.054975][ T5055] dump_stack_lvl+0xd8/0x12c [ 36.054983][ T5055] dump_stack+0x1c/0x28 [ 36.054991][ T5055] should_fail_ex+0x3fc/0x570 [ 36.055005][ T5055] should_failslab+0xc4/0x120 [ 36.055013][ T5055] __kvmalloc_node_noprof+0x160/0x7fc [ 36.055024][ T5055] v4l2_ctrl_new+0x788/0x1238 [ 36.055036][ T5055] v4l2_ctrl_new_custom+0x4b0/0x6b4 [ 36.055046][ T5055] vim2m_open+0x17c/0x5b8 [ 36.055056][ T5055] v4l2_open+0x198/0x338 [ 36.055067][ T5055] chrdev_open+0x398/0x3e8 [ 36.055079][ T5055] do_dentry_open+0x5bc/0xfb4 [ 36.055092][ T5055] vfs_open_consume+0x54/0x2ec [ 36.055099][ T5055] path_openat+0x1098/0x1910 [ 36.055110][ T5055] do_file_open+0x1c8/0x2e8 [ 36.055121][ T5055] do_sys_openat2+0x114/0x1ec [ 36.055129][ T5055] do_sys_open+0xb0/0xe0 [ 36.055136][ T5055] __arm64_sys_openat+0xa8/0xc4 [ 36.055144][ T5055] invoke_syscall+0x98/0x244 [ 36.055157][ T5055] el0_svc_common+0xec/0x23c [ 36.055165][ T5055] do_el0_svc+0x4c/0x5c [ 36.055173][ T5055] el0_svc+0x60/0x1d8 [ 36.055184][ T5055] el0t_64_sync_handler+0x44/0x104 [ 36.055194][ T5055] el0t_64_sync+0x198/0x19c [ 36.111371][ T5059] bridge0: port 3(syz_tun) entered blocking state [ 36.111448][ T5059] bridge0: port 3(syz_tun) entered disabled state [ 36.111549][ T5059] syz_tun: entered allmulticast mode [ 36.111586][ T5059] FAULT_INJECTION: forcing a failure. [ 36.111586][ T5059] name failslab, interval 1, probability 0, space 0, times 0 [ 36.111598][ T5059] CPU: 1 UID: 0 PID: 5059 Comm: syz.3.35 Not tainted syzkaller #0 PREEMPT [ 36.111608][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 36.111613][ T5059] Call trace: [ 36.111616][ T5059] show_stack+0x2c/0x3c (C) [ 36.111631][ T5059] __dump_stack+0x30/0x40 [ 36.111639][ T5059] dump_stack_lvl+0xd8/0x12c [ 36.111647][ T5059] dump_stack+0x1c/0x28 [ 36.111653][ T5059] should_fail_ex+0x3fc/0x570 [ 36.111665][ T5059] should_failslab+0xc4/0x120 [ 36.111673][ T5059] kmem_cache_alloc_noprof+0x94/0x5d4 [ 36.111681][ T5059] __kernfs_new_node+0xf0/0x7d8 [ 36.111692][ T5059] kernfs_new_node+0xf4/0x148 [ 36.111702][ T5059] kernfs_create_link+0xc4/0x20c [ 36.111709][ T5059] sysfs_do_create_link_sd+0x8c/0x120 [ 36.111717][ T5059] sysfs_create_link+0x74/0x94 [ 36.111725][ T5059] br_sysfs_addif+0x74/0x1f4 [ 36.111736][ T5059] br_add_if+0x334/0xc80 [ 36.111744][ T5059] br_add_slave+0x34/0x48 [ 36.111751][ T5059] do_set_master+0x400/0x56c [ 36.111760][ T5059] do_setlink+0xca8/0x32d4 [ 36.111768][ T5059] rtnl_setlink+0x3d4/0x558 [ 36.111775][ T5059] rtnetlink_rcv_msg+0x66c/0x9bc [ 36.111783][ T5059] netlink_rcv_skb+0x238/0x414 [ 36.111792][ T5059] rtnetlink_rcv+0x28/0x38 [ 36.111799][ T5059] netlink_unicast+0x73c/0x934 [ 36.111808][ T5059] netlink_sendmsg+0x670/0x98c [ 36.111816][ T5059] __sock_sendmsg+0xc8/0x188 [ 36.111825][ T5059] ____sys_sendmsg+0x3d0/0x6c8 [ 36.111833][ T5059] ___sys_sendmsg+0x198/0x224 [ 36.111842][ T5059] __sys_sendmsg+0x158/0x204 [ 36.111854][ T5059] __arm64_sys_sendmsg+0x88/0x9c [ 36.111863][ T5059] invoke_syscall+0x98/0x244 [ 36.111870][ T5059] el0_svc_common+0xec/0x23c [ 36.111877][ T5059] do_el0_svc+0x4c/0x5c [ 36.111884][ T5059] el0_svc+0x60/0x1d8 [ 36.111893][ T5059] el0t_64_sync_handler+0x44/0x104 [ 36.111901][ T5059] el0t_64_sync+0x198/0x19c [ 36.112283][ T5059] syz_tun: left allmulticast mode [ 36.460572][ T5067] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 36.473314][ T5067] loop1: detected capacity change from 0 to 2048 [ 36.525367][ T4722] Bluetooth: hci0: command tx timeout [ 36.525396][ T4722] Bluetooth: hci2: command tx timeout [ 36.525463][ T4721] Bluetooth: hci1: command tx timeout [ 36.546836][ T5073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.548102][ T5073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.553962][ T5072] loop4: detected capacity change from 0 to 512 [ 36.558555][ T5067] Alternate GPT is invalid, using primary GPT. [ 36.558646][ T5067] loop1: p2 p3 p7 [ 36.580390][ T4345] Alternate GPT is invalid, using primary GPT. [ 36.580470][ T4345] loop1: p2 p3 p7 [ 36.905752][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 36.906294][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 36.907017][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 36.935793][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 36.936274][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 36.947383][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 36.990328][ T5085] FAULT_INJECTION: forcing a failure. [ 36.990328][ T5085] name failslab, interval 1, probability 0, space 0, times 0 [ 36.990351][ T5085] CPU: 1 UID: 0 PID: 5085 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT [ 36.990363][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 36.990370][ T5085] Call trace: [ 36.990373][ T5085] show_stack+0x2c/0x3c (C) [ 36.990390][ T5085] __dump_stack+0x30/0x40 [ 36.990399][ T5085] dump_stack_lvl+0xd8/0x12c [ 36.990408][ T5085] dump_stack+0x1c/0x28 [ 36.990415][ T5085] should_fail_ex+0x3fc/0x570 [ 36.990432][ T5085] should_failslab+0xc4/0x120 [ 36.990441][ T5085] kmem_cache_alloc_noprof+0x94/0x5d4 [ 36.990451][ T5085] skb_clone+0x1ac/0x320 [ 36.990465][ T5085] nfnetlink_rcv+0x3c0/0x16ec [ 36.990475][ T5085] netlink_unicast+0x73c/0x934 [ 36.990486][ T5085] netlink_sendmsg+0x670/0x98c [ 36.990497][ T5085] __sock_sendmsg+0xc8/0x188 [ 36.990506][ T5085] ____sys_sendmsg+0x3d0/0x6c8 [ 36.990517][ T5085] ___sys_sendmsg+0x198/0x224 [ 36.990527][ T5085] __sys_sendmsg+0x158/0x204 [ 36.990537][ T5085] __arm64_sys_sendmsg+0x88/0x9c [ 36.990547][ T5085] invoke_syscall+0x98/0x244 [ 36.990556][ T5085] el0_svc_common+0xec/0x23c [ 36.990564][ T5085] do_el0_svc+0x4c/0x5c [ 36.990572][ T5085] el0_svc+0x60/0x1d8 [ 36.990583][ T5085] el0t_64_sync_handler+0x44/0x104 [ 36.990593][ T5085] el0t_64_sync+0x198/0x19c [ 37.383794][ T5096] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 37.393245][ T5099] coredump: 1(syz.1.48): |?7"[ßå8Z@âUÚ{«+O·Y‰´º‰ÃB˜JÀ§P]â¶'òšF]C‡ÁfœÚVWµìÊä4>Fð‡y¨áONžŠdï"ÐOrÒ´èH¥Ê×ceT¶¨™ÁtüW&YÜÐÐSC´ƒbÖ¾ü£ºò*ü+vñò9’}Ž|£ pipe failed [ 37.437876][ T5096] loop3: detected capacity change from 0 to 49152 [ 37.439137][ T5096] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 37.449092][ T5096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: journalled. [ 37.528890][ T5096] evm: overlay not supported [ 37.538873][ T5104] loop1: detected capacity change from 0 to 33280 [ 37.539260][ T5104] ext4: Bad value for 'sb' [ 37.546229][ T5096] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 37.546593][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 37.599276][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.656113][ T5110] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 37.658423][ T5111] ublk_ctrl_add_dev: dev id not match 4294967295 14 [ 38.051595][ T5119] FAULT_INJECTION: forcing a failure. [ 38.051595][ T5119] name failslab, interval 1, probability 0, space 0, times 0 [ 38.051613][ T5119] CPU: 0 UID: 0 PID: 5119 Comm: syz.2.57 Not tainted syzkaller #0 PREEMPT [ 38.051626][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 38.051633][ T5119] Call trace: [ 38.051637][ T5119] show_stack+0x2c/0x3c (C) [ 38.051653][ T5119] __dump_stack+0x30/0x40 [ 38.051662][ T5119] dump_stack_lvl+0xd8/0x12c [ 38.051670][ T5119] dump_stack+0x1c/0x28 [ 38.051678][ T5119] should_fail_ex+0x3fc/0x570 [ 38.051691][ T5119] should_failslab+0xc4/0x120 [ 38.051700][ T5119] __kmalloc_cache_noprof+0x94/0x5fc [ 38.051710][ T5119] wakeup_source_register+0x64/0x2fc [ 38.051721][ T5119] ep_create_wakeup_source+0xf4/0x240 [ 38.051730][ T5119] ep_insert+0xab8/0x12d4 [ 38.051737][ T5119] do_epoll_ctl_file+0xa0c/0xbd4 [ 38.051745][ T5119] do_epoll_ctl+0xa0/0x140 [ 38.051753][ T5119] __arm64_sys_epoll_ctl+0x164/0x1b8 [ 38.051761][ T5119] invoke_syscall+0x98/0x244 [ 38.051769][ T5119] el0_svc_common+0xec/0x23c [ 38.051777][ T5119] do_el0_svc+0x4c/0x5c [ 38.051785][ T5119] el0_svc+0x60/0x1d8 [ 38.051795][ T5119] el0t_64_sync_handler+0x44/0x104 [ 38.051805][ T5119] el0t_64_sync+0x198/0x19c [ 38.055240][ T5121] dummy0: mtu less than device minimum [ 38.063408][ T5116] loop3: detected capacity change from 0 to 49152 [ 38.110526][ T4723] Bluetooth: hci4: command tx timeout [ 38.113216][ T5116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 38.152801][ T5126] loop2: detected capacity change from 0 to 49152 [ 38.196365][ T5126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 38.206458][ T5126] Illegal XDP return value 16 on prog (id 6) dev N/A, expect packet loss! [ 38.227803][ T4723] Bluetooth: hci1: unexpected subevent 0x37 length: 25 > 13 [ 38.561192][ T5143] ip6t_ah: unknown flags 7 [ 38.562576][ T5143] FAULT_INJECTION: forcing a failure. [ 38.562576][ T5143] name failslab, interval 1, probability 0, space 0, times 0 [ 38.562591][ T5143] CPU: 1 UID: 0 PID: 5143 Comm: syz.1.61 Not tainted syzkaller #0 PREEMPT [ 38.562602][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 38.562607][ T5143] Call trace: [ 38.562610][ T5143] show_stack+0x2c/0x3c (C) [ 38.562626][ T5143] __dump_stack+0x30/0x40 [ 38.562634][ T5143] dump_stack_lvl+0xd8/0x12c [ 38.562642][ T5143] dump_stack+0x1c/0x28 [ 38.562650][ T5143] should_fail_ex+0x3fc/0x570 [ 38.562664][ T5143] should_failslab+0xc4/0x120 [ 38.562673][ T5143] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 38.562682][ T5143] tracefs_alloc_inode+0x38/0x120 [ 38.562693][ T5143] alloc_inode+0x68/0x198 [ 38.562705][ T5143] new_inode+0x20/0x50 [ 38.562717][ T5143] tracefs_get_inode+0x20/0x7c [ 38.562726][ T5143] eventfs_get_inode+0x58/0x3cc [ 38.562736][ T5143] eventfs_root_lookup+0x1f8/0x780 [ 38.562746][ T5143] __lookup_slow+0x1e4/0x2b4 [ 38.562756][ T5143] lookup_slow+0x60/0x84 [ 38.562766][ T5143] link_path_walk+0xaa4/0x1488 [ 38.562779][ T5143] path_openat+0x158/0x1910 [ 38.562793][ T5143] do_file_open+0x1c8/0x2e8 [ 38.562803][ T5143] do_sys_openat2+0x114/0x1ec [ 38.562811][ T5143] do_sys_open+0xb0/0xe0 [ 38.562819][ T5143] __arm64_sys_openat+0xa8/0xc4 [ 38.562827][ T5143] invoke_syscall+0x98/0x244 [ 38.562835][ T5143] el0_svc_common+0xec/0x23c [ 38.562843][ T5143] do_el0_svc+0x4c/0x5c [ 38.562851][ T5143] el0_svc+0x60/0x1d8 [ 38.562862][ T5143] el0t_64_sync_handler+0x44/0x104 [ 38.562871][ T5143] el0t_64_sync+0x198/0x19c [ 38.591529][ T4723] Bluetooth: hci1: command tx timeout [ 38.591560][ T4723] Bluetooth: hci2: command tx timeout [ 38.591579][ T4723] Bluetooth: hci0: command tx timeout [ 38.958611][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.012251][ T206] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.084776][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.405452][ T4723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.406703][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.407769][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.408166][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.408391][ T4723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.420351][ T206] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.513299][ T206] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.700506][ T206] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.741783][ C0] vxcan0: j1939_tp_rxtimer: 0x000000004035df6e: rx timeout, send abort [ 39.794001][ T5155] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.905967][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.906210][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.982487][ T206] bridge_slave_1: left allmulticast mode [ 39.982512][ T206] bridge_slave_1: left promiscuous mode [ 39.982961][ T206] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.986855][ T206] bridge_slave_0: left allmulticast mode [ 39.986874][ T206] bridge_slave_0: left promiscuous mode [ 39.987003][ T206] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.106356][ T206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.114320][ T206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.117126][ T206] bond0 (unregistering): Released all slaves [ 40.129618][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.129651][ T5155] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.129722][ T5155] bridge_slave_0: entered allmulticast mode [ 40.130796][ T5155] bridge_slave_0: entered promiscuous mode [ 40.138616][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.139069][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.139145][ T5155] bridge_slave_1: entered allmulticast mode [ 40.146496][ T5155] bridge_slave_1: entered promiscuous mode [ 40.156904][ T5155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.158195][ T5155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.171418][ T5155] team0: Port device team_slave_0 added [ 40.172423][ T5155] team0: Port device team_slave_1 added [ 40.178262][ T5155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.178274][ T5155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.178287][ T5155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.178777][ T5155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.178783][ T5155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.178797][ T5155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.222523][ T5155] hsr_slave_0: entered promiscuous mode [ 40.222831][ T5155] hsr_slave_1: entered promiscuous mode [ 40.223238][ T5155] debugfs: 'hsr0' already exists in 'hsr' [ 40.223246][ T5155] Cannot create hsr debugfs directory [ 40.241932][ C0] vxcan0: j1939_tp_rxtimer: 0x000000004035df6e: abort rx timeout. Force session deactivation [ 40.242794][ C0] vxcan0: j1939_tp_rxtimer: 0x00000000ca08fa47: rx timeout, send abort [ 40.299083][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.363620][ T5155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.365955][ T5155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.371869][ T5155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.375022][ T5155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.376521][ T5155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.380691][ T5155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.383472][ T5155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.387643][ T5155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.435246][ T5255] FAULT_INJECTION: forcing a failure. [ 40.435246][ T5255] name failslab, interval 1, probability 0, space 0, times 0 [ 40.435270][ T5255] CPU: 1 UID: 0 PID: 5255 Comm: syz.0.73 Not tainted syzkaller #0 PREEMPT [ 40.435285][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.435292][ T5255] Call trace: [ 40.435295][ T5255] show_stack+0x2c/0x3c (C) [ 40.435310][ T5255] __dump_stack+0x30/0x40 [ 40.435319][ T5255] dump_stack_lvl+0xd8/0x12c [ 40.435327][ T5255] dump_stack+0x1c/0x28 [ 40.435334][ T5255] should_fail_ex+0x3fc/0x570 [ 40.435348][ T5255] should_failslab+0xc4/0x120 [ 40.435357][ T5255] __kmalloc_cache_noprof+0x94/0x5fc [ 40.435366][ T5255] init_srcu_struct_fields+0x94/0xac0 [ 40.435375][ T5255] __init_srcu_struct_common+0x5c/0x70 [ 40.435387][ T5255] init_srcu_struct_lockdep+0x40/0x70 [ 40.435400][ T5255] nvme_init_ctrl+0xe0/0xa14 [ 40.435412][ T5255] nvme_tcp_create_ctrl+0xad0/0xfe4 [ 40.435423][ T5255] nvmf_dev_write+0x1998/0x20a0 [ 40.435435][ T5255] vfs_write+0x2a4/0xa0c [ 40.435444][ T5255] ksys_write+0x12c/0x228 [ 40.435452][ T5255] __arm64_sys_write+0x84/0x98 [ 40.435461][ T5255] invoke_syscall+0x98/0x244 [ 40.435470][ T5255] el0_svc_common+0x19c/0x23c [ 40.435477][ T5255] do_el0_svc+0x4c/0x5c [ 40.435485][ T5255] el0_svc+0x60/0x1d8 [ 40.435496][ T5255] el0t_64_sync_handler+0x44/0x104 [ 40.435506][ T5255] el0t_64_sync+0x198/0x19c [ 40.481690][ T5282] FAULT_INJECTION: forcing a failure. [ 40.481690][ T5282] name failslab, interval 1, probability 0, space 0, times 0 [ 40.481707][ T5282] CPU: 0 UID: 0 PID: 5282 Comm: syz.2.74 Not tainted syzkaller #0 PREEMPT [ 40.481716][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 40.481721][ T5282] Call trace: [ 40.481724][ T5282] show_stack+0x2c/0x3c (C) [ 40.481738][ T5282] __dump_stack+0x30/0x40 [ 40.481745][ T5282] dump_stack_lvl+0xd8/0x12c [ 40.481752][ T5282] dump_stack+0x1c/0x28 [ 40.481759][ T5282] should_fail_ex+0x3fc/0x570 [ 40.481771][ T5282] should_failslab+0xc4/0x120 [ 40.481779][ T5282] __kvmalloc_node_noprof+0x160/0x7fc [ 40.481787][ T5282] bpf_check+0x1258/0x2948 [ 40.481795][ T5282] bpf_prog_load+0xf6c/0x15a4 [ 40.481805][ T5282] __sys_bpf+0x7e8/0x840 [ 40.481813][ T5282] __arm64_sys_bpf+0xd0/0xec [ 40.481821][ T5282] invoke_syscall+0x98/0x244 [ 40.481828][ T5282] el0_svc_common+0xec/0x23c [ 40.481835][ T5282] do_el0_svc+0x4c/0x5c [ 40.481842][ T5282] el0_svc+0x60/0x1d8 [ 40.481851][ T5282] el0t_64_sync_handler+0x44/0x104 [ 40.481859][ T5282] el0t_64_sync+0x198/0x19c [ 40.569156][ T5291] loop2: detected capacity change from 0 to 36864 [ 40.571648][ T5291] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.586682][ T5291] EXT4-fs (loop2): Test dummy encryption mode enabled [ 40.588284][ T5291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.742829][ C0] vxcan0: j1939_tp_rxtimer: 0x00000000ca08fa47: abort rx timeout. Force session deactivation [ 40.871632][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.964523][ T5155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.969678][ T5310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 40.969728][ T5310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 40.973403][ T5155] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.000057][ T5310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 41.011679][ T5310] FAULT_INJECTION: forcing a failure. [ 41.011679][ T5310] name failslab, interval 1, probability 0, space 0, times 0 [ 41.011701][ T5310] CPU: 1 UID: 0 PID: 5310 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT [ 41.011711][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.011723][ T5310] Call trace: [ 41.011726][ T5310] show_stack+0x2c/0x3c (C) [ 41.011741][ T5310] __dump_stack+0x30/0x40 [ 41.011750][ T5310] dump_stack_lvl+0xd8/0x12c [ 41.011758][ T5310] dump_stack+0x1c/0x28 [ 41.011765][ T5310] should_fail_ex+0x3fc/0x570 [ 41.011776][ T5310] should_failslab+0xc4/0x120 [ 41.011784][ T5310] __kmalloc_cache_noprof+0x94/0x5fc [ 41.011793][ T5310] mgmt_security_level_changed+0xe8/0x478 [ 41.011803][ T5310] hci_conn_unlink+0x258/0x620 [ 41.011811][ T5310] hci_conn_del+0x64/0xfcc [ 41.011819][ T5310] hci_conn_failed+0x254/0x37c [ 41.011827][ T5310] hci_abort_conn_sync+0x638/0x9fc [ 41.011835][ T5310] hci_disconnect_all_sync+0x1e0/0x390 [ 41.011842][ T5310] hci_suspend_sync+0x324/0xa34 [ 41.011850][ T5310] hci_suspend_dev+0x214/0x444 [ 41.011857][ T5310] hci_suspend_notifier+0xe4/0x2b0 [ 41.011864][ T5310] notifier_call_chain+0x1a4/0x4cc [ 41.011874][ T5310] notifier_call_chain_robust+0x54/0xc4 [ 41.011883][ T5310] blocking_notifier_call_chain_robust+0x74/0xa8 [ 41.011892][ T5310] pm_notifier_call_chain_robust+0x34/0x60 [ 41.011903][ T5310] snapshot_open+0x17c/0x270 [ 41.011910][ T5310] misc_open+0x2dc/0x338 [ 41.011920][ T5310] chrdev_open+0x398/0x3e8 [ 41.011930][ T5310] do_dentry_open+0x5bc/0xfb4 [ 41.011940][ T5310] vfs_open_consume+0x54/0x2ec [ 41.011946][ T5310] path_openat+0x1098/0x1910 [ 41.011955][ T5310] do_file_open+0x1c8/0x2e8 [ 41.011964][ T5310] do_sys_openat2+0x114/0x1ec [ 41.011971][ T5310] do_sys_open+0xb0/0xe0 [ 41.011977][ T5310] __arm64_sys_openat+0xa8/0xc4 [ 41.011984][ T5310] invoke_syscall+0x98/0x244 [ 41.011992][ T5310] el0_svc_common+0xec/0x23c [ 41.011999][ T5310] do_el0_svc+0x4c/0x5c [ 41.012006][ T5310] el0_svc+0x60/0x1d8 [ 41.012015][ T5310] el0t_64_sync_handler+0x44/0x104 [ 41.012023][ T5310] el0t_64_sync+0x198/0x19c [ 41.024157][ T5310] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 41.024501][ T5310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 41.033107][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.033138][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.039234][ T5310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 41.043745][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.043774][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.156988][ T5310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 41.157037][ T5310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 41.169044][ T5310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 41.443692][ T5310] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 41.443749][ T5310] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 41.468100][ T5310] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 41.481195][ T4721] Bluetooth: hci3: command tx timeout [ 41.488569][ T5310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 41.488651][ T5310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 41.505030][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 41.513924][ T5310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 41.563144][ T206] hsr_slave_0: left promiscuous mode [ 41.564195][ T206] hsr_slave_1: left promiscuous mode [ 41.566595][ T206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.566629][ T206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.568481][ T206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.568493][ T206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.649206][ T206] veth1_macvtap: left promiscuous mode [ 41.649250][ T206] veth0_macvtap: left promiscuous mode [ 41.649339][ T206] veth1_vlan: left promiscuous mode [ 41.649383][ T206] veth0_vlan: left promiscuous mode [ 41.923148][ T5339] netlink: 272 bytes leftover after parsing attributes in process `syz.3.85'. [ 41.953044][ T5341] loop3: detected capacity change from 0 to 33280 [ 41.956262][ T5342] capability: warning: `syz.3.86' uses 32-bit capabilities (legacy support in use) [ 41.974392][ T5341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.018402][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.122833][ T206] team0 (unregistering): Port device team_slave_1 removed [ 42.129230][ T206] team0 (unregistering): Port device team_slave_0 removed [ 42.130234][ T4824] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.247230][ T5354] loop3: detected capacity change from 0 to 36864 [ 42.249948][ T5354] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.258051][ T5354] EXT4-fs (loop3): Test dummy encryption mode enabled [ 42.293006][ T5354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.302311][ T4824] usb 1-1: Using ep0 maxpacket: 8 [ 42.303888][ T4824] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 42.305658][ T4824] usb 1-1: config 0 has no interfaces? [ 42.305684][ T4824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.327646][ T4824] usb 1-1: config 0 descriptor?? [ 42.372579][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.493653][ T5378] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 42.495051][ T5375] loop3: detected capacity change from 0 to 33280 [ 42.514867][ T5378] loop2: detected capacity change from 0 to 2048 [ 42.536033][ T5155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.543460][ T5375] EXT4-fs (loop3): Test dummy encryption mode enabled [ 42.543482][ T5375] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 42.543490][ T5375] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.543498][ T5375] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.558178][ T5375] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.93: bad orphan inode 131083 [ 42.558200][ T5375] loop3: lost filesystem error report for type 5 error -117 [ 42.559477][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 42.559490][ C0] EXT4-fs (loop3): initial error at time 42: ext4_orphan_get:1430 [ 42.559502][ C0] EXT4-fs (loop3): last error at time 42: ext4_orphan_get:1430 [ 42.574567][ T5375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.584632][ T4816] usb 1-1: USB disconnect, device number 2 [ 42.594703][ T5378] Alternate GPT is invalid, using primary GPT. [ 42.594805][ T5378] loop2: p2 p3 p7 [ 42.662799][ T5375] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 42.691271][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 42.695504][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 42.697518][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 42.730613][ T40] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.730643][ T40] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.730731][ T40] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.730836][ T40] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.737917][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 42.813429][ T5155] veth0_vlan: entered promiscuous mode [ 42.831545][ T5155] veth1_vlan: entered promiscuous mode [ 42.846741][ T5401] FAULT_INJECTION: forcing a failure. [ 42.846741][ T5401] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.846759][ T5401] CPU: 1 UID: 0 PID: 5401 Comm: syz.2.96 Not tainted syzkaller #0 PREEMPT [ 42.846773][ T5401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 42.846787][ T5401] Call trace: [ 42.846791][ T5401] show_stack+0x2c/0x3c (C) [ 42.846805][ T5401] __dump_stack+0x30/0x40 [ 42.846814][ T5401] dump_stack_lvl+0xd8/0x12c [ 42.846823][ T5401] dump_stack+0x1c/0x28 [ 42.846831][ T5401] should_fail_ex+0x3fc/0x570 [ 42.846845][ T5401] should_fail+0x14/0x24 [ 42.846857][ T5401] should_fail_usercopy+0x20/0x30 [ 42.846865][ T5401] _inline_copy_from_user+0x3c/0x174 [ 42.846876][ T5401] vt_ioctl+0xd68/0x1d4c [ 42.846885][ T5401] tty_ioctl+0x82c/0xd04 [ 42.846898][ T5401] __arm64_sys_ioctl+0x154/0x1cc [ 42.846908][ T5401] invoke_syscall+0x98/0x244 [ 42.846917][ T5401] el0_svc_common+0xec/0x23c [ 42.846925][ T5401] do_el0_svc+0x4c/0x5c [ 42.846933][ T5401] el0_svc+0x60/0x1d8 [ 42.846944][ T5401] el0t_64_sync_handler+0x44/0x104 [ 42.846954][ T5401] el0t_64_sync+0x198/0x19c [ 42.892012][ T5155] veth0_macvtap: entered promiscuous mode [ 42.896871][ T5155] veth1_macvtap: entered promiscuous mode [ 42.916053][ T5155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.923583][ T5155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.926742][ T5413] loop2: detected capacity change from 0 to 32896 [ 42.951069][ T5275] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.951093][ T5275] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.951109][ T5275] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.951124][ T5275] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.982560][ T5413] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.000369][ T4723] Bluetooth: hci1: command 0x0c1a tx timeout [ 43.017694][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 43.026666][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.054600][ T5275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.054614][ T5275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.073899][ T4723] Bluetooth: hci0: command 0x0c1a tx timeout [ 43.078775][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.078784][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.085628][ T4723] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 43.155127][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.194330][ T4723] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 43.616198][ T4723] Bluetooth: hci4: command 0x0c1a tx timeout [ 43.617288][ T4723] Bluetooth: hci3: command 0x040f tx timeout [ 43.635709][ T5275] net_ratelimit: 132 callbacks suppressed [ 43.672572][ T1089] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.716066][ T5445] loop5: detected capacity change from 0 to 256 [ 44.085632][ T5476] netlink: 'syz.0.106': attribute type 5 has an invalid length. [ 44.099698][ T5478] loop2: detected capacity change from 0 to 36864 [ 44.104842][ T5478] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.112324][ T5478] EXT4-fs (loop2): Test dummy encryption mode enabled [ 44.124431][ T5478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.126993][ T5480] device-mapper: table: 248:1: thin-pool: Invalid block size (-EINVAL) [ 44.127008][ T5480] device-mapper: ioctl: error adding target to table [ 44.142621][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.924797][ T5491] nbd3: detected capacity change from 0 to 18 [ 44.925084][ T4722] block nbd3: Receive control failed (result -107) [ 44.950379][ T5491] nbd3: detected capacity change from 18 to 8190 [ 44.951056][ T4523] block nbd3: Dead connection, failed to find a fallback [ 44.951072][ T4523] block nbd3: shutting down sockets [ 44.951097][ T4523] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 44.951126][ T4523] Buffer I/O error on dev nbd3, logical block 0, async page read [ 44.951328][ T4523] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 44.951340][ T4523] Buffer I/O error on dev nbd3, logical block 0, async page read [ 44.951405][ T4523] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 44.951416][ T4523] Buffer I/O error on dev nbd3, logical block 0, async page read [ 44.951560][ T4523] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 44.951571][ T4523] Buffer I/O error on dev nbd3, logical block 0, async page read [ 44.951613][ T4523] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 44.951624][ T4523] Buffer I/O error on dev nbd3, logical block 0, async page read [ 44.951755][ T4523] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 44.951768][ T4523] Buffer I/O error on dev nbd3, logical block 0, async page read [ 44.951816][ T4523] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 44.951827][ T4523] Buffer I/O error on dev nbd3, logical block 0, async page read [ 44.951866][ T4523] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 44.951876][ T4523] Buffer I/O error on dev nbd3, logical block 0, async page read [ 44.951892][ T5131] ldm_validate_partition_table(): Disk read failed. [ 44.951922][ T4523] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 44.951933][ T4523] Buffer I/O error on dev nbd3, logical block 0, async page read [ 44.951971][ T4523] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 44.951981][ T4523] Buffer I/O error on dev nbd3, logical block 0, async page read [ 44.952061][ T5131] Dev nbd3: unable to read RDB block 0 [ 44.952496][ T5131] nbd3: unable to read partition table [ 44.956352][ T5131] ldm_validate_partition_table(): Disk read failed. [ 44.956587][ T5131] Dev nbd3: unable to read RDB block 0 [ 44.956740][ T5131] nbd3: unable to read partition table [ 44.965848][ T5131] ldm_validate_partition_table(): Disk read failed. [ 44.965986][ T5131] Dev nbd3: unable to read RDB block 0 [ 44.966131][ T5131] nbd3: unable to read partition table [ 44.971165][ T5131] ldm_validate_partition_table(): Disk read failed. [ 44.971344][ T5131] Dev nbd3: unable to read RDB block 0 [ 44.971660][ T5131] nbd3: unable to read partition table [ 45.018869][ T5494] misc userio: The device must be registered before sending interrupts [ 45.150411][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 45.291673][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 45.629492][ T4722] Bluetooth: hci3: command 0x040f tx timeout [ 45.629499][ T4721] Bluetooth: hci4: command 0x0c1a tx timeout [ 46.713596][ T5448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.772589][ T5515] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 46.784489][ T5515] loop1: detected capacity change from 0 to 2048 [ 46.787108][ T5511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'. [ 46.805328][ T5515] Alternate GPT is invalid, using primary GPT. [ 46.805416][ T5515] loop1: p2 p3 p7 [ 46.829726][ T5516] wlan1 speed is unknown, defaulting to 1000 [ 46.830086][ T5516] wlan1 speed is unknown, defaulting to 1000 [ 46.830367][ T5516] wlan1 speed is unknown, defaulting to 1000 [ 46.865255][ T5131] udevd[5131]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 46.866643][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 46.868548][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 46.904199][ T5516] infiniband syz1: set active [ 46.904235][ T9] wlan1 speed is unknown, defaulting to 1000 [ 46.904266][ T5516] infiniband syz1: added wlan1 [ 46.936471][ T5516] RDS/IB: syz1: added [ 46.936490][ T5516] smc: adding ib device syz1 with port count 1 [ 46.936500][ T5516] smc: ib device syz1 port 1 has no pnetid [ 46.936532][ T9] wlan1 speed is unknown, defaulting to 1000 [ 46.937605][ T5516] wlan1 speed is unknown, defaulting to 1000 [ 46.945189][ T5525] netlink: 'syz.0.124': attribute type 5 has an invalid length. [ 46.947778][ T5527] FAULT_INJECTION: forcing a failure. [ 46.947778][ T5527] name failslab, interval 1, probability 0, space 0, times 0 [ 46.947795][ T5527] CPU: 0 UID: 0 PID: 5527 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT [ 46.947809][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 46.947824][ T5527] Call trace: [ 46.947827][ T5527] show_stack+0x2c/0x3c (C) [ 46.947842][ T5527] __dump_stack+0x30/0x40 [ 46.947851][ T5527] dump_stack_lvl+0xd8/0x12c [ 46.947859][ T5527] dump_stack+0x1c/0x28 [ 46.947866][ T5527] should_fail_ex+0x3fc/0x570 [ 46.947878][ T5527] should_failslab+0xc4/0x120 [ 46.947886][ T5527] kmem_cache_alloc_node_noprof+0x98/0x604 [ 46.947895][ T5527] __alloc_skb+0x1f0/0x610 [ 46.947905][ T5527] netlink_alloc_large_skb+0xd4/0x114 [ 46.947915][ T5527] netlink_sendmsg+0x4ac/0x98c [ 46.947924][ T5527] __sock_sendmsg+0xc8/0x188 [ 46.947932][ T5527] ____sys_sendmsg+0x3d0/0x6c8 [ 46.947941][ T5527] ___sys_sendmsg+0x198/0x224 [ 46.947950][ T5527] __sys_sendmsg+0x158/0x204 [ 46.947958][ T5527] __arm64_sys_sendmsg+0x88/0x9c [ 46.947967][ T5527] invoke_syscall+0x98/0x244 [ 46.947975][ T5527] el0_svc_common+0xec/0x23c [ 46.947982][ T5527] do_el0_svc+0x4c/0x5c [ 46.947989][ T5527] el0_svc+0x60/0x1d8 [ 46.947999][ T5527] el0t_64_sync_handler+0x44/0x104 [ 46.948007][ T5527] el0t_64_sync+0x198/0x19c [ 47.016846][ T5516] wlan1 speed is unknown, defaulting to 1000 [ 47.075080][ T5516] wlan1 speed is unknown, defaulting to 1000 [ 47.076715][ T5532] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.128308][ T5536] mmap: syz.1.126 (5536): VmData 37625856 exceed data ulimit 43071. Update limits or use boot option ignore_rlimit_data. [ 47.147614][ T5516] wlan1 speed is unknown, defaulting to 1000 [ 47.188333][ T5546] netlink: 100 bytes leftover after parsing attributes in process `syz.1.128'. [ 47.230713][ T4721] Bluetooth: hci0: command 0x0c1a tx timeout [ 47.237375][ T5532] wlan1 speed is unknown, defaulting to 1000 [ 47.287240][ T5516] wlan1 speed is unknown, defaulting to 1000 [ 47.289368][ T5556] FAULT_INJECTION: forcing a failure. [ 47.289368][ T5556] name failslab, interval 1, probability 0, space 0, times 0 [ 47.289380][ T5556] CPU: 1 UID: 0 PID: 5556 Comm: syz.2.131 Not tainted syzkaller #0 PREEMPT [ 47.289390][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 47.289403][ T5556] Call trace: [ 47.289405][ T5556] show_stack+0x2c/0x3c (C) [ 47.289417][ T5556] __dump_stack+0x30/0x40 [ 47.289425][ T5556] dump_stack_lvl+0xd8/0x12c [ 47.289432][ T5556] dump_stack+0x1c/0x28 [ 47.289442][ T5556] should_fail_ex+0x3fc/0x570 [ 47.289455][ T5556] should_failslab+0xc4/0x120 [ 47.289463][ T5556] __kmalloc_noprof+0x108/0x6c8 [ 47.289471][ T5556] tomoyo_realpath_from_path+0xbc/0x4dc [ 47.289482][ T5556] tomoyo_path_number_perm+0x1f0/0x500 [ 47.289490][ T5556] tomoyo_file_ioctl+0x2c/0x3c [ 47.289499][ T5556] security_file_ioctl+0xdc/0x2b0 [ 47.289508][ T5556] __arm64_sys_ioctl+0xb0/0x1cc [ 47.289516][ T5556] invoke_syscall+0x98/0x244 [ 47.289524][ T5556] el0_svc_common+0xec/0x23c [ 47.289531][ T5556] do_el0_svc+0x4c/0x5c [ 47.289538][ T5556] el0_svc+0x60/0x1d8 [ 47.289548][ T5556] el0t_64_sync_handler+0x44/0x104 [ 47.289556][ T5556] el0t_64_sync+0x198/0x19c [ 47.295434][ T5556] ERROR: Out of memory at tomoyo_realpath_from_path. [ 47.354669][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 47.415592][ T5561] loop1: detected capacity change from 0 to 33280 [ 47.441354][ T5569] loop2: detected capacity change from 0 to 33792 [ 47.441918][ T5569] EXT4-fs: Ignoring removed oldalloc option [ 47.441925][ T5569] EXT4-fs: Ignoring removed orlov option [ 47.441934][ T5569] ext2: Unknown parameter 'fowner>00000000000808464906' [ 47.448924][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.137'. [ 47.464001][ T5561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.521909][ T5568] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.527798][ T5569] netlink: 'syz.2.135': attribute type 5 has an invalid length. [ 47.579831][ T4721] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 47.682015][ T5588] FAULT_INJECTION: forcing a failure. [ 47.682015][ T5588] name failslab, interval 1, probability 0, space 0, times 0 [ 47.682029][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.0.142 Not tainted syzkaller #0 PREEMPT [ 47.682039][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 47.682051][ T5588] Call trace: [ 47.682054][ T5588] show_stack+0x2c/0x3c (C) [ 47.682069][ T5588] __dump_stack+0x30/0x40 [ 47.682078][ T5588] dump_stack_lvl+0xd8/0x12c [ 47.682085][ T5588] dump_stack+0x1c/0x28 [ 47.682093][ T5588] should_fail_ex+0x3fc/0x570 [ 47.682105][ T5588] should_failslab+0xc4/0x120 [ 47.682114][ T5588] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 47.682123][ T5588] kstrdup+0x50/0x104 [ 47.682131][ T5588] ovl_parse_param_lowerdir+0xdc/0x7cc [ 47.682140][ T5588] ovl_parse_param+0x1f4/0xab8 [ 47.682149][ T5588] vfs_parse_fs_param+0x1bc/0x2f8 [ 47.682159][ T5588] vfs_parse_fs_qstr+0x138/0x1cc [ 47.682168][ T5588] vfs_parse_monolithic_sep+0x1e4/0x268 [ 47.682177][ T5588] ovl_parse_monolithic+0x30/0x40 [ 47.682185][ T5588] parse_monolithic_mount_data+0x78/0x8c [ 47.682195][ T5588] do_new_mount+0x270/0x538 [ 47.682205][ T5588] path_mount+0x5f0/0xa88 [ 47.682223][ T5588] do_mount+0xe8/0x148 [ 47.682233][ T5588] __arm64_sys_mount+0x33c/0x388 [ 47.682243][ T5588] invoke_syscall+0x98/0x244 [ 47.682252][ T5588] el0_svc_common+0xec/0x23c [ 47.682260][ T5588] do_el0_svc+0x4c/0x5c [ 47.682267][ T5588] el0_svc+0x60/0x1d8 [ 47.682276][ T5588] el0t_64_sync_handler+0x44/0x104 [ 47.682286][ T5588] el0t_64_sync+0x198/0x19c [ 47.710244][ T4721] Bluetooth: hci3: command 0x040f tx timeout [ 47.720313][ T4721] Bluetooth: hci4: command 0x0c1a tx timeout [ 47.784943][ T5602] capability: warning: `syz.2.145' uses deprecated v2 capabilities in a way that may be insecure [ 47.804519][ T5604] loop2: detected capacity change from 0 to 33792 [ 47.813037][ T5604] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (40992!=35945) [ 47.813103][ T5604] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.815643][ T5604] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.815799][ T5604] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.816063][ T5604] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (134223872 > 6144). [ 47.816176][ T5604] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 47.816189][ T5604] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 47.817020][ T5604] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.145: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.817042][ T5604] loop2: lost filesystem error report for type 5 error -117 [ 47.819492][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 47.819512][ C1] EXT4-fs (loop2): initial error at time 47: ext4_free_blocks:6717 [ 47.819525][ C1] EXT4-fs (loop2): last error at time 47: ext4_free_blocks:6717 [ 47.853024][ T5604] EXT4-fs (loop2): 1 truncate cleaned up [ 47.854964][ T5604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.978264][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.086270][ T5621] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 48.090024][ T5622] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 48.115142][ T5622] loop2: detected capacity change from 0 to 2048 [ 48.152053][ T4721] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 48.153033][ T5622] Alternate GPT is invalid, using primary GPT. [ 48.153115][ T5622] loop2: p2 p3 p7 [ 48.214545][ T5629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.155'. [ 48.214607][ T5629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.155'. [ 48.233128][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 48.233420][ T5131] udevd[5131]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 48.235402][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 48.237297][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.516697][ T5633] syzkaller0: entered promiscuous mode [ 48.516712][ T5633] syzkaller0: entered allmulticast mode [ 48.535719][ T5640] syzkaller0: entered promiscuous mode [ 48.535728][ T5640] syzkaller0: entered allmulticast mode [ 48.537915][ T5640] FAULT_INJECTION: forcing a failure. [ 48.537915][ T5640] name failslab, interval 1, probability 0, space 0, times 0 [ 48.537931][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT [ 48.537940][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 48.537952][ T5640] Call trace: [ 48.537955][ T5640] show_stack+0x2c/0x3c (C) [ 48.537969][ T5640] __dump_stack+0x30/0x40 [ 48.537978][ T5640] dump_stack_lvl+0xd8/0x12c [ 48.537985][ T5640] dump_stack+0x1c/0x28 [ 48.537992][ T5640] should_fail_ex+0x3fc/0x570 [ 48.538005][ T5640] should_failslab+0xc4/0x120 [ 48.538013][ T5640] kmem_cache_alloc_node_noprof+0x98/0x604 [ 48.538022][ T5640] __alloc_skb+0x1f0/0x610 [ 48.538031][ T5640] alloc_skb_with_frags+0xb8/0x690 [ 48.538039][ T5640] sock_alloc_send_pskb+0x72c/0x83c [ 48.538046][ T5640] packet_sendmsg+0x28ac/0x40c8 [ 48.538057][ T5640] __sock_sendmsg+0xc8/0x188 [ 48.538066][ T5640] __sys_sendto+0x250/0x328 [ 48.538074][ T5640] __arm64_sys_sendto+0xec/0x10c [ 48.538083][ T5640] invoke_syscall+0x98/0x244 [ 48.538091][ T5640] el0_svc_common+0xec/0x23c [ 48.538098][ T5640] do_el0_svc+0x4c/0x5c [ 48.538105][ T5640] el0_svc+0x60/0x1d8 [ 48.538114][ T5640] el0t_64_sync_handler+0x44/0x104 [ 48.538130][ T5640] el0t_64_sync+0x198/0x19c [ 48.622799][ T4823] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 48.622811][ T4823] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 48.640397][ T4823] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 48.706766][ T5655] net_ratelimit: 520 callbacks suppressed [ 48.706776][ T5655] dummy0: mtu less than device minimum [ 49.253674][ T5660] FAULT_INJECTION: forcing a failure. [ 49.253674][ T5660] name failslab, interval 1, probability 0, space 0, times 0 [ 49.253688][ T5660] CPU: 0 UID: 0 PID: 5660 Comm: syz.1.162 Not tainted syzkaller #0 PREEMPT [ 49.253699][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 49.253712][ T5660] Call trace: [ 49.253715][ T5660] show_stack+0x2c/0x3c (C) [ 49.253730][ T5660] __dump_stack+0x30/0x40 [ 49.253738][ T5660] dump_stack_lvl+0xd8/0x12c [ 49.253745][ T5660] dump_stack+0x1c/0x28 [ 49.253752][ T5660] should_fail_ex+0x3fc/0x570 [ 49.253765][ T5660] should_failslab+0xc4/0x120 [ 49.253773][ T5660] __kmalloc_cache_noprof+0x94/0x5fc [ 49.253782][ T5660] sctp_add_bind_addr+0x9c/0x2e8 [ 49.253791][ T5660] sctp_copy_local_addr_list+0x2f8/0x4a4 [ 49.253800][ T5660] sctp_copy_one_addr+0xb0/0x1e0 [ 49.253808][ T5660] sctp_bind_addr_copy+0xa8/0x284 [ 49.253816][ T5660] sctp_assoc_set_bind_addr_from_ep+0x128/0x184 [ 49.253826][ T5660] sctp_connect_new_asoc+0x28c/0x5ec [ 49.253836][ T5660] sctp_sendmsg+0xdd8/0x17bc [ 49.253844][ T5660] inet_sendmsg+0xb4/0xd8 [ 49.253855][ T5660] __sock_sendmsg+0xc8/0x188 [ 49.253864][ T5660] ____sys_sendmsg+0x3d0/0x6c8 [ 49.253872][ T5660] ___sys_sendmsg+0x198/0x224 [ 49.253881][ T5660] __sys_sendmsg+0x158/0x204 [ 49.253890][ T5660] __arm64_sys_sendmsg+0x88/0x9c [ 49.253899][ T5660] invoke_syscall+0x98/0x244 [ 49.253907][ T5660] el0_svc_common+0xec/0x23c [ 49.253914][ T5660] do_el0_svc+0x4c/0x5c [ 49.253921][ T5660] el0_svc+0x60/0x1d8 [ 49.253930][ T5660] el0t_64_sync_handler+0x44/0x104 [ 49.253939][ T5660] el0t_64_sync+0x198/0x19c [ 49.523434][ T5663] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 49.587391][ T5663] loop3: detected capacity change from 0 to 2048 [ 49.625630][ T4721] Bluetooth: hci0: unexpected event for opcode 0x0403 [ 49.633740][ T5665] 9p: Bad value for 'rfdno' [ 49.734243][ T5674] overlay: ./file0 is not a directory [ 49.927554][ T5663] Alternate GPT is invalid, using primary GPT. [ 49.927641][ T5663] loop3: p2 p3 p7 [ 50.143766][ T5680] netlink: 48 bytes leftover after parsing attributes in process `syz.5.171'. [ 50.148326][ T5680] loop5: detected capacity change from 0 to 8 [ 50.151912][ T5680] Filesystem uses "lzo" compression. This is not supported [ 50.180404][ T5688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 50.271968][ T5694] overlayfs: failed to resolve './file1': -2 [ 50.276057][ T5694] fuse: Bad value for 'fd' [ 50.324674][ T5698] loop2: detected capacity change from 0 to 33280 [ 50.327769][ T5698] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 50.327788][ T5698] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.343270][ T5698] EXT4-fs (loop2): 1 truncate cleaned up [ 50.344515][ T5698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.487466][ T5705] trusted_key: device-mapper: crypt: Selected cipher does not support IVs [ 50.487552][ T5705] device-mapper: table: 248:3: crypt: Error decoding and setting key (-EINVAL) [ 50.487562][ T5705] device-mapper: ioctl: error adding target to table [ 50.597496][ T5719] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 50.682958][ T5719] loop5: detected capacity change from 0 to 2048 [ 50.721605][ T5723] loop1: detected capacity change from 0 to 33280 [ 50.722114][ T5723] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.733509][ T5719] Alternate GPT is invalid, using primary GPT. [ 50.733589][ T5719] loop5: p2 p3 p7 [ 50.744728][ T5723] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.187: corrupted in-inode xattr: e_value size too large [ 50.744747][ T5723] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.744948][ T5723] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.187: couldn't read orphan inode 15 (err -117) [ 50.744963][ T5723] loop1: lost filesystem error report for type 5 error -117 [ 50.745826][ T5723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.771413][ T5723] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.187: Logical block already allocated [ 50.797039][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.836305][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 50.838204][ T5721] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.838256][ T5721] block device autoloading is deprecated and will be removed. [ 50.855236][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 50.856330][ T5131] udevd[5131]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 50.882198][ T5731] vxlan0: entered promiscuous mode [ 50.965953][ T5737] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 51.090164][ T5742] FAULT_INJECTION: forcing a failure. [ 51.090164][ T5742] name failslab, interval 1, probability 0, space 0, times 0 [ 51.090182][ T5742] CPU: 0 UID: 0 PID: 5742 Comm: syz.0.196 Not tainted syzkaller #0 PREEMPT [ 51.090192][ T5742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 51.090207][ T5742] Call trace: [ 51.090216][ T5742] show_stack+0x2c/0x3c (C) [ 51.090231][ T5742] __dump_stack+0x30/0x40 [ 51.090241][ T5742] dump_stack_lvl+0xd8/0x12c [ 51.090251][ T5742] dump_stack+0x1c/0x28 [ 51.090260][ T5742] should_fail_ex+0x3fc/0x570 [ 51.090274][ T5742] should_failslab+0xc4/0x120 [ 51.090283][ T5742] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 51.090294][ T5742] kstrdup+0x50/0x104 [ 51.090302][ T5742] kstrdup_const+0x54/0x6c [ 51.090310][ T5742] __kernfs_new_node+0xb0/0x7d8 [ 51.090324][ T5742] kernfs_new_node+0xf4/0x148 [ 51.090336][ T5742] __kernfs_create_file+0x60/0x2e0 [ 51.090344][ T5742] cgroup_addrm_files+0x678/0xadc [ 51.090354][ T5742] css_populate_dir+0x230/0x348 [ 51.090367][ T5742] cgroup_mkdir+0x78c/0xc30 [ 51.090379][ T5742] kernfs_iop_mkdir+0xe0/0x128 [ 51.090392][ T5742] vfs_mkdir+0x2ec/0x4cc [ 51.090403][ T5742] filename_mkdirat+0x228/0x420 [ 51.090415][ T5742] __arm64_sys_mkdirat+0x9c/0xc0 [ 51.090427][ T5742] invoke_syscall+0x98/0x244 [ 51.090436][ T5742] el0_svc_common+0xec/0x23c [ 51.090444][ T5742] do_el0_svc+0x4c/0x5c [ 51.090452][ T5742] el0_svc+0x60/0x1d8 [ 51.090463][ T5742] el0t_64_sync_handler+0x44/0x104 [ 51.090473][ T5742] el0t_64_sync+0x198/0x19c [ 51.090484][ T5742] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 [ 51.117081][ T5745] loop1: detected capacity change from 0 to 33792 [ 51.118956][ T5745] EXT4-fs: Ignoring removed oldalloc option [ 51.118965][ T5745] EXT4-fs: Ignoring removed orlov option [ 51.118974][ T5745] ext2: Unknown parameter 'fowner>00000000000808464906' [ 51.165012][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.168867][ T5745] netlink: 'syz.1.197': attribute type 5 has an invalid length. [ 51.464270][ T5751] overlayfs: failed to resolve './file7': -2 [ 51.543779][ T5765] process 'syz.0.205' launched '/dev/fd/4' with NULL argv: empty string added [ 51.561673][ T5763] warning: `syz.1.204' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.563646][ T5763] loop1: detected capacity change from 0 to 256 [ 51.738397][ T5769] FAULT_INJECTION: forcing a failure. [ 51.738397][ T5769] name failslab, interval 1, probability 0, space 0, times 0 [ 51.738413][ T5769] CPU: 1 UID: 0 PID: 5769 Comm: syz.2.206 Not tainted syzkaller #0 PREEMPT [ 51.738425][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 51.738439][ T5769] Call trace: [ 51.738443][ T5769] show_stack+0x2c/0x3c (C) [ 51.738459][ T5769] __dump_stack+0x30/0x40 [ 51.738468][ T5769] dump_stack_lvl+0xd8/0x12c [ 51.738477][ T5769] dump_stack+0x1c/0x28 [ 51.738485][ T5769] should_fail_ex+0x3fc/0x570 [ 51.738499][ T5769] should_failslab+0xc4/0x120 [ 51.738508][ T5769] __kmalloc_cache_noprof+0x94/0x5fc [ 51.738518][ T5769] x509_cert_parse+0xa4/0x65c [ 51.738529][ T5769] x509_key_preparse+0x74/0x630 [ 51.738539][ T5769] asymmetric_key_preparse+0xcc/0x1c0 [ 51.738549][ T5769] __key_create_or_update+0x26c/0x804 [ 51.738558][ T5769] key_create_or_update+0x60/0x7c [ 51.738566][ T5769] __arm64_sys_add_key+0x384/0x43c [ 51.738576][ T5769] invoke_syscall+0x98/0x244 [ 51.738585][ T5769] el0_svc_common+0xec/0x23c [ 51.738593][ T5769] do_el0_svc+0x4c/0x5c [ 51.738601][ T5769] el0_svc+0x60/0x1d8 [ 51.738612][ T5769] el0t_64_sync_handler+0x44/0x104 [ 51.738622][ T5769] el0t_64_sync+0x198/0x19c [ 52.019709][ T5780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 52.336805][ T5791] loop3: detected capacity change from 0 to 33280 [ 52.407808][ T5791] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 52.407826][ T5791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 52.407865][ T5791] System zones: 1-12 [ 52.407962][ T5791] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 52.407971][ T5791] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 52.408375][ T5791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.440430][ T5791] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 52.679147][ T5795] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #2: block 3: comm syz.3.215: lblock 0 mapped to illegal pblock 3 (length 1) [ 52.685123][ T5795] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.215: error -EUCLEAN reading directory block [ 52.685670][ T5791] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #2: block 3: comm syz.3.215: lblock 0 mapped to illegal pblock 3 (length 1) [ 52.694043][ T5791] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.215: error -EUCLEAN reading directory block [ 52.723897][ T5798] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.739240][ T5798] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.785165][ T5801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 52.805989][ T5795] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #2: block 3: comm syz.3.215: lblock 0 mapped to illegal pblock 3 (length 1) [ 52.806385][ T5795] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.215: error -EUCLEAN reading directory block [ 52.829880][ T5811] set_capacity_and_notify: 2 callbacks suppressed [ 52.829886][ T5811] loop5: detected capacity change from 0 to 8 [ 52.908164][ T4710] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 52.908212][ T4710] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 52.908257][ T4710] EXT4-fs error (device loop1): ext4_acquire_dquot:7120: comm syz-executor: Failed to acquire dquot type 0 [ 53.324718][ T5831] loop2: detected capacity change from 0 to 33280 [ 53.325183][ T5831] ext2: Unexpected value for 'nobarrier' [ 53.339380][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.404056][ T5842] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 53.414313][ T5842] loop3: detected capacity change from 0 to 2048 [ 53.416834][ T4721] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 53.485015][ T5842] Alternate GPT is invalid, using primary GPT. [ 53.485099][ T5842] loop3: p2 p3 p7 [ 53.629546][ C1] ipvlan_process_outbound: 7 callbacks suppressed [ 53.709473][ C1] net_ratelimit: 123 callbacks suppressed [ 53.852282][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.001144][ T5858] FAULT_INJECTION: forcing a failure. [ 54.001144][ T5858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.001161][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz.3.229 Not tainted syzkaller #0 PREEMPT [ 54.001170][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 54.001185][ T5858] Call trace: [ 54.001188][ T5858] show_stack+0x2c/0x3c (C) [ 54.001203][ T5858] __dump_stack+0x30/0x40 [ 54.001221][ T5858] dump_stack_lvl+0xd8/0x12c [ 54.001228][ T5858] dump_stack+0x1c/0x28 [ 54.001236][ T5858] should_fail_ex+0x3fc/0x570 [ 54.001249][ T5858] should_fail+0x14/0x24 [ 54.001259][ T5858] should_fail_usercopy+0x20/0x30 [ 54.001267][ T5858] _inline_copy_from_user+0x3c/0x174 [ 54.001275][ T5858] kstrtouint_from_user+0xcc/0x174 [ 54.001283][ T5858] proc_fail_nth_write+0x9c/0x234 [ 54.001294][ T5858] vfs_write+0x2a4/0xa0c [ 54.001302][ T5858] ksys_write+0x12c/0x228 [ 54.001310][ T5858] __arm64_sys_write+0x84/0x98 [ 54.001318][ T5858] invoke_syscall+0x98/0x244 [ 54.001326][ T5858] el0_svc_common+0xec/0x23c [ 54.001333][ T5858] do_el0_svc+0x4c/0x5c [ 54.001340][ T5858] el0_svc+0x60/0x1d8 [ 54.001350][ T5858] el0t_64_sync_handler+0x44/0x104 [ 54.001361][ T5858] el0t_64_sync+0x198/0x19c [ 54.158664][ T5862] futex_wake_op: syz.0.228 tries to shift op by -1; fix this program [ 54.247682][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.249173][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.256918][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.290161][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.291138][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.344930][ T5872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.233'. [ 54.392322][ T5878] loop2: detected capacity change from 0 to 34816 [ 54.406874][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.475760][ T5878] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 54.487185][ T5878] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 54.487216][ T5878] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.487216][ T5878] [ 54.487225][ T5878] EXT4-fs (loop2): Total free blocks count 0 [ 54.487234][ T5878] EXT4-fs (loop2): Free/Dirty block details [ 54.487258][ T5878] EXT4-fs (loop2): free_blocks=2415919504 [ 54.487276][ T5878] EXT4-fs (loop2): dirty_blocks=16 [ 54.487284][ T5878] EXT4-fs (loop2): Block reservation details [ 54.487290][ T5878] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 54.518245][ T5878] syzkaller1: entered promiscuous mode [ 54.518257][ T5878] syzkaller1: entered allmulticast mode [ 54.582805][ T5864] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.614746][ T5864] wlan1 speed is unknown, defaulting to 1000 [ 54.621393][ T5876] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.738253][ T4721] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 54.842409][ T5925] loop5: detected capacity change from 0 to 8 [ 55.126882][ T5925] Bluetooth: MGMT ver 1.23 [ 55.604468][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.605588][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.605904][ T5864] bridge_slave_0: entered allmulticast mode [ 55.606408][ T5864] bridge_slave_0: entered promiscuous mode [ 55.619489][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.619515][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.619609][ T5864] bridge_slave_1: entered allmulticast mode [ 55.621120][ T5864] bridge_slave_1: entered promiscuous mode [ 55.634679][ T4721] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 55.702780][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.705204][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.732952][ T5864] team0: Port device team_slave_0 added [ 55.733965][ T5864] team0: Port device team_slave_1 added [ 55.986142][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.986149][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.986163][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.986841][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.986847][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.986861][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.010917][ T5951] loop2: detected capacity change from 0 to 49152 [ 56.023643][ T5951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 56.077551][ T5864] hsr_slave_0: entered promiscuous mode [ 56.077966][ T5864] hsr_slave_1: entered promiscuous mode [ 56.078214][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 56.078227][ T5864] Cannot create hsr debugfs directory [ 56.202111][ T5864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 56.204823][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.205179][ T5864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 56.234951][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.235340][ T5864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 56.264991][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.272764][ T5864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 56.285315][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 ** 15 printk messages dropped ** ** 13 printk messages dropped ** ** 1 printk messages dropped ** ** 1 printk messages dropped ** [ 56.370248][ T5973] netlink: 'syz.0.245': attribute type 5 has an invalid length. [ 56.379615][ T4721] Bluetooth: hci0: command tx timeout ** 142 printk messages dropped ** ** 294 printk messages dropped ** ** 204 printk messages dropped ** [ 56.476602][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 ** 93 printk messages dropped ** [ 56.573457][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.596691][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.596714][ T5286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.600372][ T4721] Bluetooth: hci1: unexpected event for opcode 0x0403 ** 891 printk messages dropped ** [ 56.666025][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.666058][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.731453][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.092917][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. ** 122 printk messages dropped ** [ 57.662949][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.731445][ T6029] rdma_rxe: rxe_newlink: failed to add wlan1 [ 57.810784][ T6038] FAULT_INJECTION: forcing a failure. [ 57.810784][ T6038] name failslab, interval 1, probability 0, space 0, times 0 [ 57.810802][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.3.254 Not tainted syzkaller #0 PREEMPT [ 57.810818][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 57.810835][ T6038] Call trace: [ 57.810839][ T6038] show_stack+0x2c/0x3c (C) [ 57.810854][ T6038] __dump_stack+0x30/0x40 [ 57.810864][ T6038] dump_stack_lvl+0xd8/0x12c [ 57.810872][ T6038] dump_stack+0x1c/0x28 [ 57.810880][ T6038] should_fail_ex+0x3fc/0x570 [ 57.810895][ T6038] should_failslab+0xc4/0x120 [ 57.810904][ T6038] kmem_cache_alloc_noprof+0x94/0x5d4 [ 57.810913][ T6038] new_userfaultfd+0xa8/0x368 [ 57.810925][ T6038] __arm64_sys_userfaultfd+0x8c/0xac [ 57.810936][ T6038] invoke_syscall+0x98/0x244 [ 57.810945][ T6038] el0_svc_common+0x19c/0x23c [ 57.810954][ T6038] do_el0_svc+0x4c/0x5c [ 57.810962][ T6038] el0_svc+0x60/0x1d8 [ 57.810973][ T6038] el0t_64_sync_handler+0x44/0x104 [ 57.810983][ T6038] el0t_64_sync+0x198/0x19c [ 57.813490][ T5864] veth0_vlan: entered promiscuous mode [ 57.818203][ T5864] veth1_vlan: entered promiscuous mode [ 57.880306][ T5864] veth0_macvtap: entered promiscuous mode [ 57.883536][ T5864] veth1_macvtap: entered promiscuous mode [ 57.887480][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.895486][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.912920][ T92] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.912983][ T92] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.913021][ T92] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.913036][ T92] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.931445][ T5280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.931453][ T5280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.963119][ T5286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.963127][ T5286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.126391][ T4721] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 58.483392][ T6053] FAULT_INJECTION: forcing a failure. [ 58.483392][ T6053] name failslab, interval 1, probability 0, space 0, times 0 [ 58.483411][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.2.257 Not tainted syzkaller #0 PREEMPT [ 58.483421][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 58.483435][ T6053] Call trace: [ 58.483439][ T6053] show_stack+0x2c/0x3c (C) [ 58.483453][ T6053] __dump_stack+0x30/0x40 [ 58.483461][ T6053] dump_stack_lvl+0xd8/0x12c [ 58.483469][ T6053] dump_stack+0x1c/0x28 [ 58.483476][ T6053] should_fail_ex+0x3fc/0x570 [ 58.483488][ T6053] should_failslab+0xc4/0x120 [ 58.483496][ T6053] kmem_cache_alloc_noprof+0x94/0x5d4 [ 58.483504][ T6053] __nf_conntrack_alloc+0x94/0x3fc [ 58.483515][ T6053] init_conntrack+0x1a8/0xd6c [ 58.483524][ T6053] nf_conntrack_in+0x89c/0x1130 [ 58.483534][ T6053] tcf_ct_act+0x13e4/0x3770 [ 58.483543][ T6053] tcf_action_exec+0x164/0x51c [ 58.483552][ T6053] mall_classify+0x150/0x21c [ 58.483562][ T6053] tcf_classify+0x448/0xdc0 [ 58.483570][ T6053] tc_run+0x394/0x6d4 [ 58.483580][ T6053] __netif_receive_skb_core+0x1128/0x2a94 [ 58.483591][ T6053] __netif_receive_skb_one_core+0x70/0x110 [ 58.483600][ T6053] __netif_receive_skb+0x34/0x128 [ 58.483610][ T6053] netif_receive_skb+0x1e0/0x888 [ 58.483619][ T6053] tun_rx_batched+0x180/0x620 [ 58.483629][ T6053] tun_get_user+0x23e4/0x37e0 [ 58.483637][ T6053] tun_chr_write_iter+0xfc/0x168 [ 58.483645][ T6053] vfs_write+0x51c/0xa0c [ 58.483653][ T6053] ksys_write+0x12c/0x228 [ 58.483661][ T6053] __arm64_sys_write+0x84/0x98 [ 58.483668][ T6053] invoke_syscall+0x98/0x244 [ 58.483676][ T6053] el0_svc_common+0xec/0x23c [ 58.483683][ T6053] do_el0_svc+0x4c/0x5c [ 58.483690][ T6053] el0_svc+0x60/0x1d8 [ 58.483700][ T6053] el0t_64_sync_handler+0x44/0x104 [ 58.483708][ T6053] el0t_64_sync+0x198/0x19c [ 58.756920][ T6069] loop5: detected capacity change from 0 to 33280 [ 58.920465][ T6072] loop6: detected capacity change from 0 to 512 [ 59.015470][ T6077] loop3: detected capacity change from 0 to 33792 [ 59.021730][ T6077] EXT4-fs: Ignoring removed oldalloc option [ 59.021741][ T6077] EXT4-fs: Ignoring removed orlov option [ 59.021755][ T6077] ext2: Unknown parameter 'fowner>00000000000808464906' [ 59.024809][ T6077] netlink: 'syz.3.266': attribute type 5 has an invalid length. [ 59.049723][ T6075] rdma_rxe: rxe_newlink: failed to add wlan1 [ 59.095330][ T6081] loop6: detected capacity change from 0 to 33280 [ 59.141512][ T6081] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.141530][ T6081] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 59.144135][ T6081] EXT4-fs (loop6): orphan cleanup on readonly fs [ 59.144181][ T6081] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.268: bad orphan inode 15 [ 59.144194][ T6081] loop6: lost filesystem error report for type 5 error -117 [ 59.145501][ T6081] ext4_test_bit(bit=14, block=18) = 1 [ 59.145517][ T6081] is_bad_inode(inode)=0 [ 59.145522][ T6081] NEXT_ORPHAN(inode)=1023 [ 59.145526][ T6081] max_ino=32 [ 59.145530][ T6081] i_nlink=0 [ 59.146033][ T6081] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2933: inode #15: comm syz.6.268: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 59.146051][ T6081] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.146877][ T6081] EXT4-fs warning (device loop6): ext4_evict_inode:355: xattr delete (err -117) [ 59.147795][ T6081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.149514][ C1] net_ratelimit: 270 callbacks suppressed [ 59.444015][ T6087] 9pnet_fd: Insufficient options for proto=fd [ 59.456396][ T6089] syz.0.269 uses obsolete (PF_INET,SOCK_PACKET) [ 59.459415][ T6089] FAULT_INJECTION: forcing a failure. [ 59.459415][ T6089] name failslab, interval 1, probability 0, space 0, times 0 [ 59.459432][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: syz.0.269 Not tainted syzkaller #0 PREEMPT [ 59.459447][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 59.459462][ T6089] Call trace: [ 59.459465][ T6089] show_stack+0x2c/0x3c (C) [ 59.459479][ T6089] __dump_stack+0x30/0x40 [ 59.459488][ T6089] dump_stack_lvl+0xd8/0x12c [ 59.459496][ T6089] dump_stack+0x1c/0x28 [ 59.459504][ T6089] should_fail_ex+0x3fc/0x570 [ 59.459518][ T6089] should_failslab+0xc4/0x120 [ 59.459528][ T6089] __kmalloc_noprof+0x108/0x6c8 [ 59.459538][ T6089] tomoyo_realpath_from_path+0xbc/0x4dc [ 59.459550][ T6089] tomoyo_check_open_permission+0x1c4/0x394 [ 59.459560][ T6089] tomoyo_file_open+0x78/0xcc [ 59.459571][ T6089] security_file_open+0xbc/0x258 [ 59.459582][ T6089] do_dentry_open+0x2a0/0xfb4 [ 59.459595][ T6089] vfs_open_consume+0x54/0x2ec [ 59.459603][ T6089] path_openat+0x1098/0x1910 [ 59.459615][ T6089] do_file_open+0x1c8/0x2e8 [ 59.459626][ T6089] do_sys_openat2+0x114/0x1ec [ 59.459634][ T6089] do_sys_open+0xb0/0xe0 [ 59.459641][ T6089] __arm64_sys_openat+0xa8/0xc4 [ 59.459649][ T6089] invoke_syscall+0x98/0x244 [ 59.459658][ T6089] el0_svc_common+0xec/0x23c [ 59.459666][ T6089] do_el0_svc+0x4c/0x5c [ 59.459674][ T6089] el0_svc+0x60/0x1d8 [ 59.459685][ T6089] el0t_64_sync_handler+0x44/0x104 [ 59.459696][ T6089] el0t_64_sync+0x198/0x19c [ 59.479653][ T6089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 59.490591][ T6089] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.610766][ T6095] syz1: rxe_newlink: already configured on wlan1 [ 59.622112][ T6093] loop2: detected capacity change from 0 to 49152 [ 59.638636][ T6093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: journalled. [ 59.678311][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.709019][ T4721] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 59.711382][ T4816] wlan1 speed is unknown, defaulting to 1000 [ 59.711395][ T4816] syz1: Port: 1 Link DOWN [ 59.711880][ T4816] wlan1 speed is unknown, defaulting to 1000 [ 60.030787][ T4721] Bluetooth: hci0: command tx timeout [ 60.505610][ T6123] bridge_slave_0: left allmulticast mode [ 60.505620][ T6123] bridge_slave_0: left promiscuous mode [ 60.505711][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.508386][ T6123] bridge_slave_1: left allmulticast mode [ 60.508395][ T6123] bridge_slave_1: left promiscuous mode [ 60.508452][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.514442][ T6123] bond0: (slave bond_slave_0): Releasing backup interface [ 60.544977][ T6123] bond0: (slave bond_slave_1): Releasing backup interface [ 60.565537][ T6123] team0: Port device team_slave_0 removed [ 60.567614][ T6123] team0: Port device team_slave_1 removed [ 60.568042][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.568052][ T6123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.568870][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.568878][ T6123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.613374][ T6124] team0: Mode changed to "loadbalance" [ 60.630568][ T6128] sit0: entered promiscuous mode [ 60.636176][ T6128] netlink: 'syz.5.282': attribute type 1 has an invalid length. [ 60.636188][ T6128] netlink: 1 bytes leftover after parsing attributes in process `syz.5.282'. [ 60.647751][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 60.760407][ T6130] loop5: detected capacity change from 0 to 33792 [ 60.762940][ T6130] EXT4-fs: Ignoring removed oldalloc option [ 60.762951][ T6130] EXT4-fs: Ignoring removed orlov option [ 60.762961][ T6130] ext2: Unknown parameter 'fowner>00000000000808464906' [ 60.763674][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 60.801313][ T6132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.802819][ T6130] netlink: 'syz.5.284': attribute type 5 has an invalid length. [ 60.835952][ T6132] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 60.981670][ T6142] rdma_rxe: rxe_newlink: failed to add wlan1 [ 61.273353][ T6164] loop5: detected capacity change from 0 to 33792 [ 61.275162][ T6164] EXT4-fs: Ignoring removed oldalloc option [ 61.275176][ T6164] EXT4-fs: Ignoring removed orlov option [ 61.275188][ T6164] ext2: Unknown parameter 'fowner>00000000000808464906' [ 61.277536][ T6164] netlink: 'syz.5.296': attribute type 5 has an invalid length. [ 62.011902][ T6188] FAULT_INJECTION: forcing a failure. [ 62.011902][ T6188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.011921][ T6188] CPU: 0 UID: 0 PID: 6188 Comm: syz.3.303 Not tainted syzkaller #0 PREEMPT [ 62.011933][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 62.011949][ T6188] Call trace: [ 62.011953][ T6188] show_stack+0x2c/0x3c (C) [ 62.011969][ T6188] __dump_stack+0x30/0x40 [ 62.011978][ T6188] dump_stack_lvl+0xd8/0x12c [ 62.011986][ T6188] dump_stack+0x1c/0x28 [ 62.011994][ T6188] should_fail_ex+0x3fc/0x570 [ 62.012009][ T6188] should_fail+0x14/0x24 [ 62.012021][ T6188] should_fail_usercopy+0x20/0x30 [ 62.012030][ T6188] _inline_copy_from_user+0x3c/0x174 [ 62.012040][ T6188] do_ip6t_get_ctl+0x43c/0x10f8 [ 62.012049][ T6188] nf_getsockopt+0x94/0xd4 [ 62.012061][ T6188] ipv6_getsockopt+0x220/0x3b4 [ 62.012073][ T6188] udpv6_getsockopt+0x14c/0x388 [ 62.012085][ T6188] sock_common_getsockopt+0xa8/0xc4 [ 62.012096][ T6188] do_sock_getsockopt+0x350/0x61c [ 62.012107][ T6188] __sys_getsockopt+0xfc/0x168 [ 62.012117][ T6188] __arm64_sys_getsockopt+0xc8/0xe4 [ 62.012128][ T6188] invoke_syscall+0x98/0x244 [ 62.012137][ T6188] el0_svc_common+0xec/0x23c [ 62.012145][ T6188] do_el0_svc+0x4c/0x5c [ 62.012153][ T6188] el0_svc+0x60/0x1d8 [ 62.012165][ T6188] el0t_64_sync_handler+0x44/0x104 [ 62.012175][ T6188] el0t_64_sync+0x198/0x19c [ 62.109948][ T4721] Bluetooth: hci0: command tx timeout [ 62.112161][ T4721] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 62.559142][ T5864] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.603661][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'. [ 62.606594][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.614334][ T6207] rdma_rxe: rxe_newlink: failed to add wlan1 [ 62.941842][ T6218] FAULT_INJECTION: forcing a failure. [ 62.941842][ T6218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.941858][ T6218] CPU: 0 UID: 0 PID: 6218 Comm: syz.3.314 Not tainted syzkaller #0 PREEMPT [ 62.941868][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 62.941881][ T6218] Call trace: [ 62.941884][ T6218] show_stack+0x2c/0x3c (C) [ 62.941898][ T6218] __dump_stack+0x30/0x40 [ 62.941906][ T6218] dump_stack_lvl+0xd8/0x12c [ 62.941913][ T6218] dump_stack+0x1c/0x28 [ 62.941920][ T6218] should_fail_ex+0x3fc/0x570 [ 62.941931][ T6218] should_fail+0x14/0x24 [ 62.941941][ T6218] should_fail_usercopy+0x20/0x30 [ 62.941949][ T6218] _inline_copy_from_user+0x3c/0x174 [ 62.941960][ T6218] copy_msghdr_from_user+0xb8/0x194 [ 62.941969][ T6218] ___sys_sendmsg+0x14c/0x224 [ 62.941978][ T6218] __sys_sendmsg+0x158/0x204 [ 62.941987][ T6218] __arm64_sys_sendmsg+0x88/0x9c [ 62.941995][ T6218] invoke_syscall+0x98/0x244 [ 62.942003][ T6218] el0_svc_common+0xec/0x23c [ 62.942010][ T6218] do_el0_svc+0x4c/0x5c [ 62.942017][ T6218] el0_svc+0x60/0x1d8 [ 62.942026][ T6218] el0t_64_sync_handler+0x44/0x104 [ 62.942035][ T6218] el0t_64_sync+0x198/0x19c [ 63.062312][ T6228] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 63.062324][ T6228] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 63.062331][ T6228] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 63.062338][ T6228] overlayfs: missing 'lowerdir' [ 63.067382][ T6228] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 63.075053][ T6228] team0: Port device dummy0 added [ 63.093459][ T6230] netlink: 44 bytes leftover after parsing attributes in process `syz.3.318'. [ 63.353674][ T6233] FAULT_INJECTION: forcing a failure. [ 63.353674][ T6233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.353691][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT [ 63.353703][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 63.353717][ T6233] Call trace: [ 63.353720][ T6233] show_stack+0x2c/0x3c (C) [ 63.353735][ T6233] __dump_stack+0x30/0x40 [ 63.353743][ T6233] dump_stack_lvl+0xd8/0x12c [ 63.353751][ T6233] dump_stack+0x1c/0x28 [ 63.353758][ T6233] should_fail_ex+0x3fc/0x570 [ 63.353770][ T6233] should_fail+0x14/0x24 [ 63.353780][ T6233] should_fail_usercopy+0x20/0x30 [ 63.353787][ T6233] simple_read_from_buffer+0xc4/0x238 [ 63.353799][ T6233] proc_fail_nth_read+0x1a8/0x248 [ 63.353809][ T6233] vfs_read+0x230/0x8c8 [ 63.353818][ T6233] ksys_read+0x12c/0x228 [ 63.353825][ T6233] __arm64_sys_read+0x84/0x98 [ 63.353833][ T6233] invoke_syscall+0x98/0x244 [ 63.353841][ T6233] el0_svc_common+0xec/0x23c [ 63.353848][ T6233] do_el0_svc+0x4c/0x5c [ 63.353855][ T6233] el0_svc+0x60/0x1d8 [ 63.353864][ T6233] el0t_64_sync_handler+0x44/0x104 [ 63.353873][ T6233] el0t_64_sync+0x198/0x19c [ 64.044794][ T6249] loop6: detected capacity change from 0 to 33280 [ 64.059960][ T6249] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 64.061372][ T6249] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #13: comm syz.6.324: invalid indirect mapped block 2683928664 (level 1) [ 64.061395][ T6249] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.068708][ T6249] EXT4-fs (loop6): 1 truncate cleaned up [ 64.069097][ T6249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.082856][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.155172][ T6248] loop6: detected capacity change from 0 to 128 [ 64.157504][ T6248] vfat: Unknown parameter './file0' [ 64.174083][ T6243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.174224][ T6243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.174333][ T6243] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 64.175676][ T6243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.193350][ T6243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.193500][ T6243] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.195504][ T6243] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.198681][ T6254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.210443][ T6254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.232321][ T4721] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 64.306379][ T6266] input: syz1 as /devices/virtual/input/input2 [ 64.322409][ T6266] loop6: detected capacity change from 0 to 8 [ 64.326864][ T6266] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 64.326871][ T6266] unable to read xattr id index table [ 64.328686][ T6266] SQUASHFS error: zlib decompression failed, data probably corrupt [ 64.328700][ T6266] SQUASHFS error: Failed to read block 0x9b: -5 [ 64.328715][ T6266] SQUASHFS error: Unable to read metadata cache entry [99] [ 64.328721][ T6266] SQUASHFS error: Unable to read inode 0x127 [ 64.349481][ C1] net_ratelimit: 1505 callbacks suppressed [ 64.511712][ T1615] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.511753][ T1615] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.580240][ T26] cfg80211: failed to load regulatory.db [ 64.587785][ T4721] Bluetooth: hci1: unexpected event for opcode 0x202f [ 65.113478][ T6292] netlink: 32 bytes leftover after parsing attributes in process `syz.2.338'. [ 65.115455][ T6292] netlink: 'syz.2.338': attribute type 6 has an invalid length. [ 65.121100][ T6292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.338'. [ 65.209958][ T6296] loop2: detected capacity change from 0 to 32896 [ 65.219986][ T6296] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.255701][ T6296] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 65.298542][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.443115][ T6303] loop2: detected capacity change from 0 to 36864 [ 65.446191][ T6303] EXT4-fs (loop2): Test dummy encryption mode enabled [ 65.449395][ T6303] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=200ec1a8, mo2=0002] [ 65.452720][ T6303] System zones: 0-5 [ 65.453633][ T6303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.534000][ T6303] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 65.544185][ T6303] FAULT_INJECTION: forcing a failure. [ 65.544185][ T6303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.544203][ T6303] CPU: 0 UID: 0 PID: 6303 Comm: syz.2.343 Not tainted syzkaller #0 PREEMPT [ 65.544217][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 65.544233][ T6303] Call trace: [ 65.544237][ T6303] show_stack+0x2c/0x3c (C) [ 65.544254][ T6303] __dump_stack+0x30/0x40 [ 65.544264][ T6303] dump_stack_lvl+0xd8/0x12c [ 65.544273][ T6303] dump_stack+0x1c/0x28 [ 65.544282][ T6303] should_fail_ex+0x3fc/0x570 [ 65.544298][ T6303] should_fail+0x14/0x24 [ 65.544311][ T6303] should_fail_usercopy+0x20/0x30 [ 65.544320][ T6303] bpf_verifier_vlog+0x3f4/0xbc0 [ 65.544331][ T6303] btf_verifier_log+0x120/0x1a0 [ 65.544344][ T6303] btf_func_proto_log+0x40c/0x7a0 [ 65.544352][ T6303] __btf_verifier_log_type+0x3bc/0x5e4 [ 65.544366][ T6303] btf_func_proto_check_meta+0x118/0x154 [ 65.544375][ T6303] btf_check_all_metas+0x294/0x85c [ 65.544388][ T6303] btf_parse_type_sec+0x104/0x1054 [ 65.544397][ T6303] btf_new_fd+0x33c/0x7a8 [ 65.544408][ T6303] bpf_btf_load+0x144/0x190 [ 65.544421][ T6303] __sys_bpf+0x804/0x840 [ 65.544432][ T6303] __arm64_sys_bpf+0xd0/0xec [ 65.544442][ T6303] invoke_syscall+0x98/0x244 [ 65.544451][ T6303] el0_svc_common+0xec/0x23c [ 65.544459][ T6303] do_el0_svc+0x4c/0x5c [ 65.544467][ T6303] el0_svc+0x60/0x1d8 [ 65.544480][ T6303] el0t_64_sync_handler+0x44/0x104 [ 65.544491][ T6303] el0t_64_sync+0x198/0x19c [ 65.623089][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.007735][ T6320] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 66.015793][ T6320] loop6: detected capacity change from 0 to 2048 [ 66.045262][ T6320] Alternate GPT is invalid, using primary GPT. [ 66.045351][ T6320] loop6: p2 p3 p7 [ 66.046795][ T4721] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 66.087474][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 66.094726][ T5131] udevd[5131]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 66.102281][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 66.123441][ T6330] netlink: 'syz.6.352': attribute type 12 has an invalid length. [ 66.123502][ T6329] netlink: 'syz.6.352': attribute type 12 has an invalid length. [ 66.322330][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.322458][ T4721] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.322775][ T4721] Bluetooth: hci3: command 0x040f tx timeout [ 66.544699][ T6343] netlink: 'syz.2.356': attribute type 39 has an invalid length. [ 66.544771][ T6343] macvlan1: entered promiscuous mode [ 66.544874][ T6343] macvlan1: entered allmulticast mode [ 66.544881][ T6343] veth1_vlan: entered allmulticast mode [ 66.567851][ T6345] netlink: 'syz.2.357': attribute type 39 has an invalid length. [ 66.606657][ T6347] ------------[ cut here ]------------ [ 66.606664][ T6347] WARNING: mm/slub.c:7144 at __kvmalloc_node_noprof+0x6e0/0x7fc, CPU#0: syz.0.358/6347 [ 66.609797][ T6347] Modules linked in: [ 66.610669][ T6347] CPU: 0 UID: 0 PID: 6347 Comm: syz.0.358 Not tainted syzkaller #0 PREEMPT [ 66.612541][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 66.614765][ T6347] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 66.616546][ T6347] pc : __kvmalloc_node_noprof+0x6e0/0x7fc [ 66.617834][ T6347] lr : __kvmalloc_node_noprof+0x400/0x7fc [ 66.619086][ T6347] sp : ffff8000954e7930 [ 66.619921][ T6347] x29: ffff8000954e7980 x28: 00000000ffffffff x27: 0000000800000000 [ 66.621648][ T6347] x26: 0000000000000000 x25: 0000000000000000 x24: 00000000000028c0 [ 66.623433][ T6347] x23: ffff800082708ee8 x22: ffff0000d1b3eac0 x21: 0000004000000000 [ 66.625167][ T6347] x20: ffff700012a9cf58 x19: 0000000000000000 x18: 1fffe000359cf228 [ 66.626917][ T6347] x17: 0000000000000003 x16: ffff8000898b7000 x15: 0000000000000001 [ 66.628617][ T6347] x14: 00000000006a9249 x13: 0000000000000001 x12: 0000000000000003 [ 66.630422][ T6347] x11: 0000000000000000 x10: 0000000000000003 x9 : ffff800089862b60 [ 66.632218][ T6347] x8 : 0000000000000cc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 66.633876][ T6347] x5 : 00000000ffffffff x4 : 00000000000028c0 x3 : 0000004000000000 [ 66.635580][ T6347] x2 : 0000004000000000 x1 : ffff0000cd093b00 x0 : 0000000000000001 [ 66.637349][ T6347] Call trace: [ 66.638078][ T6347] __kvmalloc_node_noprof+0x6e0/0x7fc (P) [ 66.639241][ T6347] udmabuf_create+0x220/0xb34 [ 66.640263][ T6347] udmabuf_ioctl+0x24c/0x2b4 [ 66.641322][ T6347] __arm64_sys_ioctl+0x154/0x1cc [ 66.642447][ T6347] invoke_syscall+0x98/0x244 [ 66.643455][ T6347] el0_svc_common+0xec/0x23c [ 66.644474][ T6347] do_el0_svc+0x4c/0x5c [ 66.645368][ T6347] el0_svc+0x60/0x1d8 [ 66.646225][ T6347] el0t_64_sync_handler+0x44/0x104 [ 66.647219][ T6347] el0t_64_sync+0x198/0x19c [ 66.648105][ T6347] irq event stamp: 604 [ 66.648931][ T6347] hardirqs last enabled at (603): [] finish_task_switch+0x234/0x858 [ 66.650978][ T6347] hardirqs last disabled at (604): [] el1_brk64+0x20/0x54 [ 66.652787][ T6347] softirqs last enabled at (362): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 66.654931][ T6347] softirqs last disabled at (360): [] fpsimd_restore_current_state+0x44/0x9c8 [ 66.657026][ T6347] ---[ end trace 0000000000000000 ]--- [ 68.349586][ C1] ipvlan_process_outbound: 6 callbacks suppressed [ 68.361032][ T4722] Bluetooth: hci3: command 0x040f tx timeout [ 68.361057][ T4721] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.361071][ T4722] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.629563][ C1] net_ratelimit: 471 callbacks suppressed [ 70.429480][ T4723] Bluetooth: hci3: command 0x040f tx timeout [ 70.440898][ T4723] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.440930][ T4723] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.669487][ C0] net_ratelimit: 696 callbacks suppressed