last executing test programs: 1m39.620003887s ago: executing program 3 (id=73): socket$alg(0x26, 0x5, 0x0) setns(0xc9, 0x0) socket$phonet(0x23, 0x2, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='mountaddr\x00', &(0x7f0000000200)='::..0.0\xdb\x10\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 1m38.907971047s ago: executing program 3 (id=79): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = msgget$private(0x0, 0x184) msgsnd(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) 1m33.768453626s ago: executing program 4 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r0, 0x40046f05, 0x0) 1m33.657339778s ago: executing program 3 (id=98): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000000), 0x0) socket$phonet(0x23, 0x2, 0x1) fsetxattr(r6, 0x0, 0x0, 0x0, 0x1) listen(0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r7, 0x40786e88, &(0x7f0000000780)={{0x0, 0x0, 0x40, 0x6, 0x1}, {&(0x7f0000000280)=[{0x8, 0x76}], 0x1, 0x10, 0x6a, 0x49}, {&(0x7f0000000340)=[0x7], 0x1, 0x8, 0x1ff, 0x2c}, {&(0x7f0000000640), 0x0, 0x28, 0x7, 0x9}, {&(0x7f0000000740)=[0x8000000000000001, 0x3], 0x2, 0x8, 0x3ff, 0x6}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) close_range(r0, r1, 0x0) 1m33.657215808s ago: executing program 4 (id=99): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file1'}, 0xb) 1m33.52114897s ago: executing program 4 (id=100): socket$xdp(0x2c, 0x3, 0x0) close(0x3) 1m32.776425331s ago: executing program 4 (id=102): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m32.037148193s ago: executing program 4 (id=103): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) 1m30.757114312s ago: executing program 4 (id=105): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) 1m30.219823761s ago: executing program 3 (id=106): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f0000000440)={'vlan0\x00', @random="1800002000"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000100), 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0xc, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000cc0)=""/129, &(0x7f0000000cc0), &(0x7f0000000d80), 0x6c, r2}, 0x38) 1m29.254681725s ago: executing program 3 (id=115): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) 1m28.29198857s ago: executing program 3 (id=117): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r3, 0x0, 0x21) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) 1m15.643805433s ago: executing program 32 (id=105): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) 1m13.046699753s ago: executing program 33 (id=117): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r3, 0x0, 0x21) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) 1m7.959730351s ago: executing program 0 (id=221): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}}, 0x0, 0x0, 0x3d, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m7.715493374s ago: executing program 0 (id=223): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x17, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="180000007460db7c000000000100001018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000083000000bf09000000000000550901000000000095000000000000006d7af5ff00000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 1m7.643905586s ago: executing program 0 (id=224): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xf8, "58ea8164b69539cbf410da5e8c04093da0d9bc1c339b4e98eb892d3a065a23f7b4aa0f859e3b536f0fbf73e4696bf4ad2201a60baaf0c876dc7305d5687f3ec33b19ae95cb54179128ced09dd1a919ec5aef52d5d1764c5f5f7a98d233696306000821c69d3505b50be4f6ac3b83c951c75120c7c3d2cb8120ed1fd1fab3a707106d347e6df950ec14861b383ef2b781b4e2e53195cf3d78edc221685a1b6482de43f5ded342f4fb16e57b1d0380e3e64635140b5e2d7192fddb05b404361b04e318e86aae2f1c44771e4f847b6aa97fa4bb2436bc171bd33c789a9cce8192d5ab4c2cef498c8d3a0c8e845a06bd1d3454d1883fc48beb65"}, &(0x7f0000000300)=0x11c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)="306663353a313232373a686ee7", 0xd) 1m6.05176332s ago: executing program 0 (id=226): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) 1m5.217644803s ago: executing program 0 (id=231): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}}, 0x0, 0x0, 0x3d, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m1.239725204s ago: executing program 0 (id=240): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0x7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000580)={0x0, 0xd, 0x3, &(0x7f0000000540)={0x4, "eaf184375fa619fcbd27d40b7ebcf5b774a687b0e82909a0e542f15138f20c475f"}}) 1m0.112719001s ago: executing program 34 (id=240): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0x7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000580)={0x0, 0xd, 0x3, &(0x7f0000000540)={0x4, "eaf184375fa619fcbd27d40b7ebcf5b774a687b0e82909a0e542f15138f20c475f"}}) 8.649148908s ago: executing program 7 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7f}]}}}]}, 0x40}}, 0x0) 8.292013383s ago: executing program 1 (id=432): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x4000000000004, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8.291730803s ago: executing program 7 (id=433): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0xa, 0x148, 0x0, 0x10, 0x4c8, 0x2a8, 0x2a8, 0x4c8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf, 0x1, {0xe6}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001580), 0x101040, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1fe) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems\x00', 0x80, 0x24) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[], 0x14) setuid(0xee01) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x5f, 0x3}) 7.643505023s ago: executing program 2 (id=435): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x329}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="17000000020002", 0x7) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 7.574155674s ago: executing program 1 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8137", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0xe, "0900c7e2f68e08ddf7b27874"}, @sack={0x5, 0x1e, [0xabc, 0xffffffff, 0x220, 0x6, 0x616, 0x7b7713ea, 0xd]}, @md5sig={0x13, 0x12, "907f9e0d00130b0000000079bcfdfea9"}]}}}}}}}}, 0x0) 7.488162055s ago: executing program 7 (id=437): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 7.128030771s ago: executing program 2 (id=439): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0xd00000000, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0xe, 0x0, 0x0, 0x14899c8a, 0x5, 0x0, 0x0, 0xd, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}) 7.067071082s ago: executing program 1 (id=440): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) read(r4, &(0x7f0000000400)=""/65536, 0x10000) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000180)={0x1, 0x1, @start={0x0, 0x1}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x106f) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x70, 0x0, 0x80000}, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x454a83, 0x5c, 0x8}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8000000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400000000000000"], 0x20}}, 0x0) 7.010990623s ago: executing program 2 (id=441): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 6.425290942s ago: executing program 1 (id=442): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) r0 = socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', 0x0, 0x6, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) 6.371659913s ago: executing program 2 (id=443): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 2.795944098s ago: executing program 5 (id=458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 2.759694128s ago: executing program 5 (id=459): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x4000000000004, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.63761739s ago: executing program 5 (id=460): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0xa, 0x148, 0x0, 0x10, 0x4c8, 0x2a8, 0x2a8, 0x4c8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf, 0x1, {0xe6}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001580), 0x101040, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1fe) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems\x00', 0x80, 0x24) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[], 0x14) setuid(0xee01) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x5f, 0x3}) 2.494756592s ago: executing program 5 (id=461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0xc, 0x30c9}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1e2d}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.375863384s ago: executing program 6 (id=462): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xe, &(0x7f0000000500)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@generic={0xd}}}, 0x0) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff8}, 0xe) connect$bt_l2cap(r3, 0x0, 0x0) listen(0xffffffffffffffff, 0x402) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000440)={0xf, {"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", 0x1000}}, 0x1006) 1.780111983s ago: executing program 6 (id=463): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611050000000000073012f18000000009500000000000000b84358627a5b83e3158df502000000a4c87ff11fe0f75c568313b8cf9dceae9481972625bb3a8798547da90ce492a2c7fff88b24d27a0188f4f0ec2866e141171ede36eff2cacbb3b2b99b9188d561b238f2897cf36703b37d41c81d5cbc77323f0a4ebc0421a23c4304efbbb485b1f851bbfcc11c530eb986bccdced4ebb8b7fa8b0060e261f8f4e1c9873812b365b65bbda6f4c4b0ba646a8494508707f11842c81f8cb5269f84f60c20a15732daa0132eb4600715a5c71906f86543d0256b5b6dcf49af41a00d41fcf313e822f0"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 1.712623084s ago: executing program 6 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014de0240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.587989256s ago: executing program 6 (id=465): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@map=r1, 0x26, 0x0, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.523566077s ago: executing program 6 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028008000200dad685a8"], 0x3c}, 0x1, 0x0, 0x0, 0x20044e81}, 0x20048040) 1.041742274s ago: executing program 7 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 971.886555ms ago: executing program 1 (id=468): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x10101, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) r1 = socket(0x26, 0xa, 0x43f5) openat(0xffffffffffffffff, 0x0, 0x10080, 0x11) pipe2$watch_queue(0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x18d880, 0x0) syz_emit_vhci(&(0x7f00000028c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x7f, 0x3}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0xd, 0xa2b3}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x4, 0xecb}}]}}, 0x21) syz_clone(0x1100, &(0x7f0000002900)="4c244272cdced9b267c75fa987ad7263f49bf14da683ba081b974272abeadf250b36cfab040f1444dabaa2b14890778d8663838eded40918efe1292fe44a", 0x3e, &(0x7f0000002980), &(0x7f00000029c0), 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000040c0)={&(0x7f0000003ac0)={0x2c, r2, 0x800, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x59}}}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x5c8c1) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x40404, 0x0) 813.780057ms ago: executing program 7 (id=469): unshare(0x2c020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fsync(r0) 739.554799ms ago: executing program 1 (id=470): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000180)="a5", 0xfdef}], 0x1) 673.23761ms ago: executing program 2 (id=471): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0xa, 0x148, 0x0, 0x10, 0x4c8, 0x2a8, 0x2a8, 0x4c8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf, 0x1, {0xe6}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001580), 0x101040, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1fe) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems\x00', 0x80, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[], 0x14) setuid(0xee01) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x5f, 0x3}) 535.834102ms ago: executing program 6 (id=472): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 532.840112ms ago: executing program 5 (id=473): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket(0x40000000015, 0x805, 0x0) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 480.712333ms ago: executing program 7 (id=474): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "7396836ac0b66dec8ca8fc93804845f5", 0x6}}}, 0x1a) 396.347354ms ago: executing program 2 (id=475): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f0000000100), 0x1, 0x40580) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x20000001}) 0s ago: executing program 5 (id=476): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000000000004000000000000000000000559990f5d597362eb2d88da38ecf5d75", 0x22) kernel console output (not intermixed with test programs): 9625][ T4185] device veth0_macvtap entered promiscuous mode [ 71.731374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.740781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.750069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.759879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.785396][ T4185] device veth1_macvtap entered promiscuous mode [ 71.797824][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.811483][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.819886][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.833018][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.863700][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.871572][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.878495][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.887871][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.900174][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.909111][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.932853][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.946658][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.954872][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.967156][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.996664][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.018140][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.029859][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.046482][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.059668][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.070057][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.080658][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.100589][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.121040][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.134102][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.144728][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.155963][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.174228][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.192284][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.211905][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.229168][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.247256][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.266683][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.281652][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.291145][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.307512][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.384309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.393305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.716697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.829467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.219448][ T4194] Bluetooth: hci2: command 0x0419 tx timeout [ 73.228447][ T4194] Bluetooth: hci3: command 0x0419 tx timeout [ 73.235252][ T4194] Bluetooth: hci0: command 0x0419 tx timeout [ 73.241820][ T4194] Bluetooth: hci1: command 0x0419 tx timeout [ 73.247991][ T4194] Bluetooth: hci4: command 0x0419 tx timeout [ 73.263224][ T4270] netlink: 'syz.0.1': attribute type 13 has an invalid length. [ 73.301276][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.360415][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.369864][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.596134][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.623756][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.669136][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.715527][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.724087][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.752973][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.009484][ T4299] loop0: detected capacity change from 0 to 512 [ 74.068784][ T4301] loop3: detected capacity change from 0 to 1024 [ 74.077222][ T4299] ======================================================= [ 74.077222][ T4299] WARNING: The mand mount option has been deprecated and [ 74.077222][ T4299] and is ignored by this kernel. Remove the mand [ 74.077222][ T4299] option from the mount to silence this warning. [ 74.077222][ T4299] ======================================================= [ 74.112128][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.145077][ T4301] autofs4:pid:4301:autofs_fill_super: called with bogus options [ 74.274000][ T4308] loop4: detected capacity change from 0 to 256 [ 74.327207][ T4299] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.344868][ T4299] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 74.353900][ T4299] System zones: 0-1, 15-15, 18-18, 34-34 [ 74.364881][ T4299] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.381182][ T4299] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792). [ 74.393339][ T4299] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.409572][ T4299] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 74.419369][ T4299] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.10: bad orphan inode 16 [ 74.429733][ T4308] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.444023][ T4299] ext4_test_bit(bit=15, block=18) = 1 [ 74.452102][ T4299] is_bad_inode(inode)=0 [ 74.503600][ T4299] NEXT_ORPHAN(inode)=0 [ 74.507816][ T4299] max_ino=32 [ 74.511029][ T4299] i_nlink=2 [ 74.555068][ T4299] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 74.794671][ T4299] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 75.536938][ T4322] FAULT_INJECTION: forcing a failure. [ 75.536938][ T4322] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 75.550537][ T4322] CPU: 1 PID: 4322 Comm: syz.1.18 Not tainted syzkaller #0 [ 75.557774][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.567865][ T4322] Call Trace: [ 75.571164][ T4322] [ 75.574121][ T4322] dump_stack_lvl+0x188/0x250 [ 75.578847][ T4322] ? show_regs_print_info+0x20/0x20 [ 75.584083][ T4322] ? load_image+0x410/0x410 [ 75.588620][ T4322] ? uncharge_page+0x490/0x490 [ 75.593416][ T4322] should_fail+0x383/0x4b0 [ 75.597867][ T4322] prepare_alloc_pages+0x1e3/0x5b0 [ 75.603011][ T4322] __alloc_pages+0x11b/0x480 [ 75.607630][ T4322] ? zone_statistics+0x170/0x170 [ 75.612596][ T4322] ? rcu_lock_acquire+0x30/0x30 [ 75.617476][ T4322] ? alloc_pages+0x452/0x560 [ 75.622099][ T4322] __get_free_pages+0x8/0x30 [ 75.626713][ T4322] __tlb_remove_page_size+0x1f2/0x3f0 [ 75.632134][ T4322] unmap_page_range+0xfcf/0x2410 [ 75.637131][ T4322] unmap_vmas+0x131/0x250 [ 75.641488][ T4322] ? unmap_page_range+0x2410/0x2410 [ 75.646706][ T4322] ? __mutex_lock_common+0x435/0x2400 [ 75.652106][ T4322] ? exit_mm_release+0x16/0x30 [ 75.656910][ T4322] exit_mmap+0x3b9/0x640 [ 75.661192][ T4322] ? vm_brk+0x20/0x20 [ 75.665222][ T4322] ? uprobe_clear_state+0x2f6/0x460 [ 75.670446][ T4322] __mmput+0x115/0x390 [ 75.674538][ T4322] exit_mm+0x632/0x7b0 [ 75.678635][ T4322] ? perf_pmu_migrate_context+0xb70/0xb70 [ 75.684386][ T4322] ? do_exit+0x2110/0x2110 [ 75.688831][ T4322] ? __ia32_sys_timer_delete+0x40/0x40 [ 75.694316][ T4322] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 75.699812][ T4322] ? tty_audit_exit+0x149/0x1f0 [ 75.704691][ T4322] do_exit+0x5b8/0x2110 [ 75.708881][ T4322] ? put_task_struct+0x80/0x80 [ 75.713667][ T4322] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.719682][ T4322] ? _raw_spin_lock_irq+0xb7/0xf0 [ 75.724734][ T4322] do_group_exit+0x12c/0x2f0 [ 75.729347][ T4322] ? lockdep_hardirqs_on+0x94/0x140 [ 75.734574][ T4322] get_signal+0x7eb/0x12e0 [ 75.739029][ T4322] arch_do_signal_or_restart+0xe6/0x12a0 [ 75.744709][ T4322] ? futex_exit_release+0x1c0/0x1c0 [ 75.749935][ T4322] ? get_sigframe_size+0x10/0x10 [ 75.754905][ T4322] ? __context_tracking_exit+0x4c/0x80 [ 75.760399][ T4322] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 75.766415][ T4322] ? exit_to_user_mode_loop+0x3b/0x130 [ 75.771901][ T4322] exit_to_user_mode_loop+0x9e/0x130 [ 75.777213][ T4322] exit_to_user_mode_prepare+0xee/0x180 [ 75.782786][ T4322] syscall_exit_to_user_mode+0x16/0x40 [ 75.788270][ T4322] do_syscall_64+0x58/0xa0 [ 75.792706][ T4322] ? clear_bhb_loop+0x30/0x80 [ 75.797408][ T4322] ? clear_bhb_loop+0x30/0x80 [ 75.802111][ T4322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.808056][ T4322] RIP: 0033:0x7f6892b9e159 [ 75.812560][ T4322] Code: Unable to access opcode bytes at RIP 0x7f6892b9e12f. [ 75.819959][ T4322] RSP: 002b:00007f6890dd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.828432][ T4322] RAX: fffffffffffffe00 RBX: 00007f6892e26098 RCX: 00007f6892b9e159 [ 75.836464][ T4322] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6892e26098 [ 75.844461][ T4322] RBP: 00007f6892e26090 R08: 0000000000000000 R09: 0000000000000000 [ 75.852462][ T4322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.860455][ T4322] R13: 00007f6892e26128 R14: 00007ffeb264f380 R15: 00007ffeb264f468 [ 75.868467][ T4322] [ 75.871572][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.053527][ C0] sched: RT throttling activated [ 77.044292][ T4333] netlink: 'syz.4.19': attribute type 13 has an invalid length. [ 77.613935][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.626431][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.638772][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.097986][ T4354] loop0: detected capacity change from 0 to 1024 [ 78.118464][ T4360] loop3: detected capacity change from 0 to 256 [ 78.248914][ T4360] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.295920][ T4354] autofs4:pid:4354:autofs_fill_super: called with bogus options [ 82.123150][ T4407] loop0: detected capacity change from 0 to 128 [ 82.427498][ T4414] loop1: detected capacity change from 0 to 1024 [ 82.657786][ T4412] autofs4:pid:4412:autofs_fill_super: called with bogus options [ 82.668278][ T4418] netlink: 'syz.2.38': attribute type 13 has an invalid length. [ 82.688250][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.707875][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.716058][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.148243][ T4433] loop0: detected capacity change from 0 to 256 [ 83.899189][ T4455] Zero length message leads to an empty skb [ 86.115312][ T4489] netlink: 'syz.1.67': attribute type 13 has an invalid length. [ 86.452095][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.463980][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.472471][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.741785][ T1107] cfg80211: failed to load regulatory.db [ 86.979255][ T4504] input: syz0 as /devices/virtual/input/input6 [ 89.883555][ T4533] netlink: 'syz.0.85': attribute type 13 has an invalid length. [ 90.121363][ T4535] loop4: detected capacity change from 0 to 512 [ 90.222606][ T4535] EXT4-fs (loop4): inline encryption not supported [ 90.348802][ T4535] EXT4-fs (loop4): 1 orphan inode deleted [ 90.403661][ T4535] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 90.427463][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.038816][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.047317][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.706921][ T4582] loop4: detected capacity change from 0 to 1024 [ 96.204756][ T4596] loop1: detected capacity change from 0 to 128 [ 96.236170][ T4596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 96.244323][ T4596] System zones: 1-3, 19-19, 35-36 [ 96.250938][ T4596] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 96.289233][ T4596] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.350380][ T4596] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 1986356271 (only 1 groups) [ 96.514823][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.658340][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.984436][ T4619] loop3: detected capacity change from 0 to 1024 [ 99.185000][ T4533] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.200421][ T4533] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.219846][ T4533] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.236586][ T4533] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.121235][ T4632] loop2: detected capacity change from 0 to 1024 [ 100.144121][ T4632] EXT4-fs (loop2): Unrecognized mount option "mask=MAY_EXEC" or missing value [ 100.761681][ T4647] loop2: detected capacity change from 0 to 1024 [ 100.808690][ T4647] autofs4:pid:4647:autofs_fill_super: called with bogus options [ 103.601153][ T4675] loop2: detected capacity change from 0 to 1024 [ 103.659412][ T4675] autofs4:pid:4675:autofs_fill_super: called with bogus options [ 104.365613][ T4687] netlink: 44 bytes leftover after parsing attributes in process `syz.2.142'. [ 104.536238][ T4689] loop2: detected capacity change from 0 to 512 [ 104.588827][ T4689] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 104.678026][ T4689] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.143: corrupted in-inode xattr [ 104.710665][ T4689] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.143: couldn't read orphan inode 15 (err -117) [ 104.749932][ T4689] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 105.880427][ T4706] loop1: detected capacity change from 0 to 1024 [ 106.314703][ T4706] autofs4:pid:4706:autofs_fill_super: called with bogus options [ 106.494226][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 106.561326][ T4718] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.571111][ T4718] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.579949][ T4718] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.588745][ T4718] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.639943][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 107.315746][ T4732] loop1: detected capacity change from 0 to 256 [ 107.396152][ T4732] FAT-fs (loop1): Unrecognized mount option "shortname=winmt" or missing value [ 108.238982][ T4747] loop1: detected capacity change from 0 to 1024 [ 108.276837][ T4747] autofs4:pid:4747:autofs_fill_super: called with bogus options [ 108.632182][ T4758] netdevsim netdevsim1 netdevsim0: Caught tx_queue_len zero misconfig [ 109.963031][ T4726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.845210][ T4777] loop2: detected capacity change from 0 to 1024 [ 110.880899][ T4779] usb usb5: usbfs: process 4779 (syz.0.175) did not claim interface 0 before use [ 110.921986][ T4777] autofs4:pid:4777:autofs_fill_super: called with bogus options [ 111.507831][ T4325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.669493][ T4806] loop0: detected capacity change from 0 to 2048 [ 111.824037][ T4325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.156218][ T4806] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.216034][ T4325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.403475][ T4813] loop1: detected capacity change from 0 to 1024 [ 112.451070][ T4806] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.487218][ T4785] chnl_net:caif_netlink_parms(): no params data found [ 112.534178][ T4813] autofs4:pid:4813:autofs_fill_super: called with bogus options [ 112.583690][ T4325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.605243][ T4806] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 112.704244][ T4806] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.704244][ T4806] [ 112.769296][ T4806] EXT4-fs (loop0): Total free blocks count 0 [ 112.817179][ T4806] EXT4-fs (loop0): Free/Dirty block details [ 112.823196][ T4806] EXT4-fs (loop0): free_blocks=2415919104 [ 112.863781][ T4806] EXT4-fs (loop0): dirty_blocks=16 [ 112.868965][ T4806] EXT4-fs (loop0): Block reservation details [ 112.889460][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.901469][ T4806] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 112.915267][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.929926][ T4785] device bridge_slave_0 entered promiscuous mode [ 112.952783][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.967327][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.978820][ T4785] device bridge_slave_1 entered promiscuous mode [ 113.071785][ T4785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.084427][ T4785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.539320][ T4785] team0: Port device team_slave_0 added [ 113.632356][ T4785] team0: Port device team_slave_1 added [ 113.836782][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.848134][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 113.903704][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.026278][ T4785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.140734][ T4844] loop0: detected capacity change from 0 to 1024 [ 114.194326][ T4844] autofs4:pid:4844:autofs_fill_super: called with bogus options [ 114.290286][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.315060][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.360701][ T4785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.538918][ T4785] device hsr_slave_0 entered promiscuous mode [ 114.569471][ T4785] device hsr_slave_1 entered promiscuous mode [ 114.589478][ T4785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.614512][ T4785] Cannot create hsr debugfs directory [ 115.924167][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 116.085792][ T4845] chnl_net:caif_netlink_parms(): no params data found [ 116.225776][ T4888] loop0: detected capacity change from 0 to 1024 [ 116.307088][ T4888] autofs4:pid:4888:autofs_fill_super: called with bogus options [ 116.323623][ T4599] Bluetooth: hci4: command 0x0409 tx timeout [ 116.627564][ T4785] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.699036][ T4785] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.868210][ T4905] gadgetfs: bound to dummy_udc driver [ 116.891926][ T4785] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.954991][ T4845] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.962306][ T4845] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.971033][ T4845] device bridge_slave_0 entered promiscuous mode [ 116.985664][ T4785] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.134305][ T4845] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.145012][ T4845] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.179671][ T4845] device bridge_slave_1 entered promiscuous mode [ 117.334588][ T4905] gadgetfs: suspended from state 2 [ 117.380029][ T4325] device hsr_slave_0 left promiscuous mode [ 117.409401][ T4325] device hsr_slave_1 left promiscuous mode [ 117.415570][ T4262] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.437454][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.445233][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.456770][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.464450][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.478827][ T4325] device bridge_slave_1 left promiscuous mode [ 117.493909][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.547205][ T4325] device bridge_slave_0 left promiscuous mode [ 117.553480][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.602686][ T4325] device veth1_macvtap left promiscuous mode [ 117.609713][ T4325] device veth0_macvtap left promiscuous mode [ 117.616399][ T4325] device veth1_vlan left promiscuous mode [ 117.622622][ T4325] device veth0_vlan left promiscuous mode [ 117.968789][ T4933] loop0: detected capacity change from 0 to 1024 [ 118.004124][ T4599] Bluetooth: hci2: command 0x040f tx timeout [ 118.028917][ T4933] autofs4:pid:4933:autofs_fill_super: called with bogus options [ 118.235737][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 118.273307][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 118.380346][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.405981][ T4189] Bluetooth: hci4: command 0x041b tx timeout [ 118.770028][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.169510][ T4944] loop1: detected capacity change from 0 to 4096 [ 119.231074][ T4944] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.271328][ T4944] EXT4-fs (loop1): inline encryption not supported [ 119.301848][ T4944] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 119.407372][ T4325] bond0 (unregistering): Released all slaves [ 119.441109][ T4944] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 119.457821][ T4944] System zones: 0-5 [ 119.465976][ T4944] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 119.755944][ T4951] overlayfs: failed to resolve './bus': -2 [ 120.083981][ T4189] Bluetooth: hci2: command 0x0419 tx timeout [ 120.155445][ T4958] loop0: detected capacity change from 0 to 1024 [ 120.336648][ T4958] EXT4-fs (loop0): Ignoring removed nobh option [ 120.355548][ T4958] EXT4-fs (loop0): Ignoring removed bh option [ 120.452749][ T4962] capability: warning: `syz.1.227' uses deprecated v2 capabilities in a way that may be insecure [ 120.464851][ T4958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 120.483693][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 120.525336][ T4958] System zones: 0-1, 3-12 [ 120.535974][ T4845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.559837][ T4958] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none. [ 120.641923][ T4968] loop1: detected capacity change from 0 to 1024 [ 120.661833][ T4845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.719971][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.772144][ T4845] team0: Port device team_slave_0 added [ 120.780416][ T4958] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 120.835283][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.883762][ T4968] autofs4:pid:4968:autofs_fill_super: called with bogus options [ 120.901170][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.927414][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.942005][ T4845] team0: Port device team_slave_1 added [ 120.969805][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.127758][ T4186] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 121.185945][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.194993][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.202126][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.238128][ T4186] EXT4-fs (loop0): Remounting filesystem read-only [ 121.250880][ T4186] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 121.303449][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.322543][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.343128][ T4186] EXT4-fs (loop0): Remounting filesystem read-only [ 121.351977][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.360573][ T4186] EXT4-fs error (device loop0): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 121.393319][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.400586][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.418293][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.434459][ T4186] EXT4-fs (loop0): Remounting filesystem read-only [ 121.456233][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.474220][ T4186] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 121.494209][ T4845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.511524][ T4845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.544074][ T4186] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 121.575784][ T4984] loop1: detected capacity change from 0 to 4096 [ 121.606045][ T4845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.620157][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.628651][ T4984] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 121.636177][ T4186] EXT4-fs (loop0): Remounting filesystem read-only [ 121.648116][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.656152][ T4186] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 121.685670][ T4186] EXT4-fs (loop0): Remounting filesystem read-only [ 121.695897][ T4984] EXT4-fs (loop1): Ignoring removed nobh option [ 121.702366][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.718718][ T4186] EXT4-fs error (device loop0): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 121.747187][ T4845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.755774][ T4845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.830615][ T4186] EXT4-fs (loop0): Remounting filesystem read-only [ 121.857681][ T4186] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 121.872261][ T4845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.909542][ T4186] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 121.945830][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.955502][ T4984] EXT4-fs (loop1): Test dummy encryption mode enabled [ 121.966678][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.978705][ T4186] EXT4-fs (loop0): Remounting filesystem read-only [ 121.987338][ T4984] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nobh,test_dummy_encryption,init_itable=0x0000000000000001,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 121.988672][ T4186] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 122.042195][ T4186] EXT4-fs (loop0): Remounting filesystem read-only [ 122.061783][ T4785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.093077][ T4186] EXT4-fs error (device loop0): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 122.153690][ T4785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.194601][ T4186] EXT4-fs (loop0): Remounting filesystem read-only [ 122.201174][ T4186] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 122.232457][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.260454][ T4186] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 122.267778][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.354123][ T4186] EXT4-fs (loop0): Remounting filesystem read-only [ 122.378657][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.394967][ T4186] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 122.398540][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.449612][ T4186] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 122.461104][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.505312][ T4845] device hsr_slave_0 entered promiscuous mode [ 122.516133][ T4186] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 122.541125][ T4845] device hsr_slave_1 entered promiscuous mode [ 122.555490][ T4845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.564806][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 122.594911][ T4186] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 122.635336][ T4845] Cannot create hsr debugfs directory [ 122.677394][ T4186] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 122.701302][ T4984] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 122.731730][ T4186] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 122.869927][ T5003] overlayfs: './file0' not a directory [ 123.445454][ T4845] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.079218][ T4845] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.185388][ T4785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.585398][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.592963][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.709608][ T4845] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.747222][ T4845] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 125.065437][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.115371][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.257029][ T4845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.316585][ T5051] process 'syz.2.241' launched '/dev/fd/4' with NULL argv: empty string added [ 125.408990][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.491426][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.655852][ T4785] device veth0_vlan entered promiscuous mode [ 125.715796][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.894307][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.933125][ T4845] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.963360][ T4785] device veth1_vlan entered promiscuous mode [ 125.986580][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.995371][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.074593][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.114724][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.146450][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.153633][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.192524][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.220294][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.280507][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.287687][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.334735][ T5064] FAULT_INJECTION: forcing a failure. [ 126.334735][ T5064] name failslab, interval 1, probability 0, space 0, times 1 [ 126.395422][ T4785] device veth0_macvtap entered promiscuous mode [ 126.406537][ T4785] device veth1_macvtap entered promiscuous mode [ 126.421749][ T5064] CPU: 1 PID: 5064 Comm: syz.1.245 Not tainted syzkaller #0 [ 126.429099][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.439201][ T5064] Call Trace: [ 126.442517][ T5064] [ 126.445479][ T5064] dump_stack_lvl+0x188/0x250 [ 126.450201][ T5064] ? show_regs_print_info+0x20/0x20 [ 126.455437][ T5064] ? load_image+0x410/0x410 [ 126.459981][ T5064] ? __might_sleep+0xf0/0xf0 [ 126.464629][ T5064] ? __lock_acquire+0x7b50/0x7b50 [ 126.469695][ T5064] should_fail+0x383/0x4b0 [ 126.474153][ T5064] should_failslab+0x5/0x20 [ 126.478697][ T5064] slab_pre_alloc_hook+0x51/0xc0 [ 126.483672][ T5064] ? __kernfs_new_node+0xe3/0x6b0 [ 126.488733][ T5064] kmem_cache_alloc+0x3d/0x280 [ 126.493544][ T5064] __kernfs_new_node+0xe3/0x6b0 [ 126.498448][ T5064] ? _raw_spin_unlock+0x40/0x40 [ 126.503340][ T5064] ? kernfs_new_node+0x250/0x250 [ 126.508334][ T5064] ? pcpu_alloc+0x11e6/0x16d0 [ 126.513078][ T5064] kernfs_new_node+0x148/0x250 [ 126.517905][ T5064] kernfs_create_dir_ns+0x40/0x120 [ 126.523068][ T5064] cgroup_mkdir+0x4a8/0xeb0 [ 126.527618][ T5064] ? __up_read+0x2b4/0x6b0 [ 126.532068][ T5064] ? css_task_iter_end+0x280/0x280 [ 126.537218][ T5064] ? up_read+0x20/0x20 [ 126.541325][ T5064] ? do_raw_spin_unlock+0x11d/0x230 [ 126.546564][ T5064] ? kernfs_iop_permission+0x22d/0x310 [ 126.552059][ T5064] ? css_task_iter_end+0x280/0x280 [ 126.557214][ T5064] kernfs_iop_mkdir+0x23d/0x3d0 [ 126.562115][ T5064] vfs_mkdir+0x386/0x570 [ 126.566408][ T5064] do_mkdirat+0x1dd/0x5c0 [ 126.570779][ T5064] ? vfs_mkdir+0x570/0x570 [ 126.575247][ T5064] __x64_sys_mkdirat+0x85/0x90 [ 126.580055][ T5064] do_syscall_64+0x4c/0xa0 [ 126.584516][ T5064] ? clear_bhb_loop+0x30/0x80 [ 126.589246][ T5064] ? clear_bhb_loop+0x30/0x80 [ 126.593958][ T5064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.599887][ T5064] RIP: 0033:0x7f6892b9e159 [ 126.604339][ T5064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.623995][ T5064] RSP: 002b:00007f6890df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 126.632459][ T5064] RAX: ffffffffffffffda RBX: 00007f6892e25fa0 RCX: 00007f6892b9e159 [ 126.640467][ T5064] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 126.648473][ T5064] RBP: 00007f6892c35024 R08: 0000000000000000 R09: 0000000000000000 [ 126.656482][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.664482][ T5064] R13: 00007f6892e26038 R14: 00007f6892e25fa0 R15: 00007ffeb264f468 [ 126.672506][ T5064] [ 126.705577][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.725055][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.857935][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.997707][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.295113][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.442734][ T4845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.490547][ T4845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.090389][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.117327][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.167247][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.204986][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.242046][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.272189][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.293148][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.320662][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.360156][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.392182][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.436634][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.470943][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.499119][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.530186][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.550859][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.582045][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.619442][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.658152][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.685543][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.720340][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.770464][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.791152][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.818871][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.862585][ T4845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.877388][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.895484][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.927656][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.971934][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.971979][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.971998][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.976235][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.991747][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.992501][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.079038][ T4785] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.079083][ T4785] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.079118][ T4785] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.079151][ T4785] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.459936][ T4577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.460001][ T4577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.460576][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.586833][ T5074] chnl_net:caif_netlink_parms(): no params data found [ 129.591900][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.591922][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.592204][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.604661][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 129.664503][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.666605][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.666731][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.668507][ T5108] device bridge_slave_0 left promiscuous mode [ 129.668673][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.710054][ T5108] device bridge_slave_1 left promiscuous mode [ 129.710198][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.737276][ T5108] bond0: (slave bond_slave_0): Releasing backup interface [ 129.751638][ T5108] bond0: (slave bond_slave_1): Releasing backup interface [ 129.806414][ T5108] team0: Failed to send options change via netlink (err -105) [ 129.806810][ T5108] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 129.814362][ T5108] team0: Port device team_slave_0 removed [ 129.842392][ T5108] team0: Failed to send options change via netlink (err -105) [ 129.842735][ T5108] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 129.844296][ T5108] team0: Port device team_slave_1 removed [ 129.845136][ T5108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.845184][ T5108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.899313][ T5108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.899352][ T5108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.037096][ T5111] team0: Failed to send options change via netlink (err -105) [ 130.037171][ T5111] team0: Mode changed to "activebackup" [ 130.054794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.055588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.092705][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.093360][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.116470][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.117131][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.160985][ T4845] device veth0_vlan entered promiscuous mode [ 130.337429][ T4845] device veth1_vlan entered promiscuous mode [ 130.642010][ T5132] loop1: detected capacity change from 0 to 8192 [ 130.722282][ T5132] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.046565][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.099973][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.161189][ T5074] device bridge_slave_0 entered promiscuous mode [ 131.232237][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.290271][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.324895][ T5074] device bridge_slave_1 entered promiscuous mode [ 131.512133][ T5074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.615890][ T5074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.804535][ T5074] team0: Port device team_slave_0 added [ 131.855180][ T5074] team0: Port device team_slave_1 added [ 131.989036][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.023903][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.260699][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 132.270493][ T5074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.254223][ T5145] syz.2.258 uses obsolete (PF_INET,SOCK_PACKET) [ 133.261476][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.267865][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.383343][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.419074][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.464858][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.521577][ T5074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.659369][ T4845] device veth0_macvtap entered promiscuous mode [ 133.700723][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.723067][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.752415][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.802067][ T4845] device veth1_macvtap entered promiscuous mode [ 133.922766][ T4325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.955952][ T5074] device hsr_slave_0 entered promiscuous mode [ 133.971403][ T5074] device hsr_slave_1 entered promiscuous mode [ 133.985421][ T5074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.003353][ T5074] Cannot create hsr debugfs directory [ 134.040321][ T4325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.095793][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.141900][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.165710][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.199934][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.217311][ T5171] FAULT_INJECTION: forcing a failure. [ 134.217311][ T5171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.229735][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.248976][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.276654][ T4845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.295893][ T5171] CPU: 1 PID: 5171 Comm: syz.2.267 Not tainted syzkaller #0 [ 134.303391][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.313487][ T5171] Call Trace: [ 134.316846][ T5171] [ 134.319814][ T5171] dump_stack_lvl+0x188/0x250 [ 134.324542][ T5171] ? show_regs_print_info+0x20/0x20 [ 134.329790][ T5171] ? load_image+0x410/0x410 [ 134.334344][ T5171] ? __lock_acquire+0x7b50/0x7b50 [ 134.339425][ T5171] should_fail+0x383/0x4b0 [ 134.343935][ T5171] prepare_alloc_pages+0x1e3/0x5b0 [ 134.349105][ T5171] __alloc_pages+0x11b/0x480 [ 134.353750][ T5171] ? zone_statistics+0x170/0x170 [ 134.358747][ T5171] ? alloc_pages+0x452/0x560 [ 134.359541][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 134.363381][ T5171] pte_alloc_one+0x7b/0x310 [ 134.373910][ T5171] ? rcu_lock_release+0x20/0x20 [ 134.378811][ T5171] ? __rwlock_init+0x140/0x140 [ 134.383625][ T5171] ? count_memcg_event_mm+0x324/0x370 [ 134.389047][ T5171] ? do_raw_spin_unlock+0x11d/0x230 [ 134.394332][ T5171] __pte_alloc+0x21/0x150 [ 134.398711][ T5171] ? __pud_alloc+0x122/0x140 [ 134.403348][ T5171] handle_mm_fault+0x39d9/0x4440 [ 134.408347][ T5171] ? get_page+0xe0/0xe0 [ 134.412551][ T5171] ? follow_page_mask+0x272/0x12b0 [ 134.417706][ T5171] ? vma_is_secretmem+0x9/0x40 [ 134.422506][ T5171] ? check_vma_flags+0x359/0x470 [ 134.427484][ T5171] __get_user_pages+0x952/0x11e0 [ 134.432489][ T5171] ? populate_vma_page_range+0x290/0x290 [ 134.438184][ T5171] ? __might_sleep+0xf0/0xf0 [ 134.442814][ T5171] ? read_lock_is_recursive+0x10/0x10 [ 134.448235][ T5171] __get_user_pages_remote+0x1c2/0x730 [ 134.453749][ T5171] ? get_user_pages_remote+0x55/0xa0 [ 134.459107][ T5171] get_arg_page+0x11b/0x350 [ 134.463677][ T5171] ? copy_string_kernel+0x280/0x280 [ 134.468909][ T5171] ? up_write+0x1b6/0x410 [ 134.473311][ T5171] copy_string_kernel+0x14d/0x280 [ 134.478388][ T5171] do_execveat_common+0x360/0x6b0 [ 134.483471][ T5171] __x64_sys_execve+0x8e/0xa0 [ 134.488194][ T5171] do_syscall_64+0x4c/0xa0 [ 134.492653][ T5171] ? clear_bhb_loop+0x30/0x80 [ 134.497384][ T5171] ? clear_bhb_loop+0x30/0x80 [ 134.502120][ T5171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.508068][ T5171] RIP: 0033:0x7fc6a1cef159 [ 134.512535][ T5171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.532187][ T5171] RSP: 002b:00007fc69ff47028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 134.540650][ T5171] RAX: ffffffffffffffda RBX: 00007fc6a1f76fa0 RCX: 00007fc6a1cef159 [ 134.548788][ T5171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 134.556809][ T5171] RBP: 00007fc6a1d86024 R08: 0000000000000000 R09: 0000000000000000 [ 134.564847][ T5171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.572864][ T5171] R13: 00007fc6a1f77038 R14: 00007fc6a1f76fa0 R15: 00007fff93848b28 [ 134.580899][ T5171] [ 134.603296][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.626067][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.650060][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.699133][ T4325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.745734][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.774040][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.830449][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.889404][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.919403][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.931674][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.953988][ T4845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.974483][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.004290][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.059334][ T4325] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.126173][ T4845] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.143555][ T4845] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.159269][ T4845] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.169584][ T4845] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.361627][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.400762][ T5192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.272'. [ 135.413596][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.480016][ T5193] dlm: plock device version mismatch: kernel (1.2.0), user (1.255.0) [ 135.497837][ T5193] loop5: detected capacity change from 0 to 8 [ 135.652726][ T5193] squashfs image failed sanity check [ 135.909989][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.153768][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.161657][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.256804][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.372690][ T5200] loop2: detected capacity change from 0 to 512 [ 136.470116][ T5074] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 136.486640][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 136.522968][ T5074] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 136.546628][ T5200] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.624607][ T5200] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.274: bg 0: block 5: invalid block bitmap [ 136.745785][ T5200] EXT4-fs (loop2): Remounting filesystem read-only [ 136.785007][ T5200] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 136.814309][ T5200] EXT4-fs (loop2): Remounting filesystem read-only [ 136.823409][ T5200] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.274: invalid indirect mapped block 3 (level 2) [ 136.837918][ T5074] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 136.862936][ T5200] EXT4-fs (loop2): Remounting filesystem read-only [ 136.876151][ T5074] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 136.887858][ T5200] EXT4-fs (loop2): 2 truncates cleaned up [ 136.907629][ T5200] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,grpquota,. Quota mode: writeback. [ 137.374696][ T5074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.456970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.473192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.517468][ T5074] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.530352][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.576019][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.610151][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.720696][ T5226] device bridge_slave_0 left promiscuous mode [ 137.785284][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.828938][ T5226] device bridge_slave_1 left promiscuous mode [ 137.836226][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.849070][ T5226] bond0: (slave bond_slave_0): Releasing backup interface [ 137.868262][ T5235] loop2: detected capacity change from 0 to 1024 [ 137.896702][ T5226] bond0: (slave bond_slave_1): Releasing backup interface [ 138.779965][ T5248] loop1: detected capacity change from 0 to 512 [ 138.842273][ T5226] team0: Port device team_slave_0 removed [ 138.864875][ T5248] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.890817][ T5248] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.892912][ T5226] team0: Port device team_slave_1 removed [ 138.914722][ T5252] loop5: detected capacity change from 0 to 1024 [ 138.941502][ T5226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.951967][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.973833][ T5252] EXT4-fs (loop5): Ignoring removed bh option [ 138.985890][ T5226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.010647][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.079459][ T5254] FAULT_INJECTION: forcing a failure. [ 139.079459][ T5254] name failslab, interval 1, probability 0, space 0, times 0 [ 139.100647][ T5252] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 139.124704][ T5229] team0: Mode changed to "activebackup" [ 139.172943][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.223807][ T5254] CPU: 1 PID: 5254 Comm: syz.2.289 Not tainted syzkaller #0 [ 139.231344][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.241529][ T5254] Call Trace: [ 139.244854][ T5254] [ 139.247928][ T5254] dump_stack_lvl+0x188/0x250 [ 139.252649][ T5254] ? show_regs_print_info+0x20/0x20 [ 139.257886][ T5254] ? load_image+0x410/0x410 [ 139.262441][ T5254] ? __might_sleep+0xf0/0xf0 [ 139.267228][ T5254] ? __lock_acquire+0x7b50/0x7b50 [ 139.272417][ T5254] should_fail+0x383/0x4b0 [ 139.277006][ T5254] should_failslab+0x5/0x20 [ 139.281537][ T5254] slab_pre_alloc_hook+0x51/0xc0 [ 139.286548][ T5254] ? new_inode_pseudo+0x77/0x210 [ 139.291545][ T5254] kmem_cache_alloc+0x3d/0x280 [ 139.296380][ T5254] new_inode_pseudo+0x77/0x210 [ 139.301206][ T5254] __ns_get_path+0x21d/0x600 [ 139.305970][ T5254] ns_get_path+0x50/0x90 [ 139.310405][ T5254] proc_ns_get_link+0x168/0x290 [ 139.315305][ T5254] ? proc_ns_instantiate+0xf0/0xf0 [ 139.320450][ T5254] ? __rwlock_init+0x140/0x140 [ 139.325251][ T5254] ? pick_link+0x112/0xdc0 [ 139.329713][ T5254] ? bpf_lsm_inode_follow_link+0x5/0x10 [ 139.335292][ T5254] ? security_inode_follow_link+0xb3/0x100 [ 139.341169][ T5254] ? proc_ns_instantiate+0xf0/0xf0 [ 139.346317][ T5254] pick_link+0x6ba/0xdc0 [ 139.350599][ T5254] step_into+0xac6/0xcd0 [ 139.354871][ T5254] ? lookup_fast+0x4df/0x720 [ 139.359492][ T5254] ? set_root+0x3a0/0x3a0 [ 139.363864][ T5254] path_openat+0x1641/0x2fb0 [ 139.368501][ T5254] ? __kasan_slab_alloc+0xa9/0xc0 [ 139.373565][ T5254] ? do_filp_open+0x400/0x400 [ 139.378299][ T5254] do_filp_open+0x1df/0x400 [ 139.382839][ T5254] ? vfs_tmpfile+0x300/0x300 [ 139.387481][ T5254] ? _raw_spin_unlock+0x24/0x40 [ 139.392363][ T5254] ? alloc_fd+0x59e/0x650 [ 139.396737][ T5254] do_sys_openat2+0x14b/0x500 [ 139.401443][ T5254] ? __lock_acquire+0x7b50/0x7b50 [ 139.406508][ T5254] ? do_sys_open+0xe0/0xe0 [ 139.410944][ T5254] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.416952][ T5254] ? lock_chain_count+0x20/0x20 [ 139.421837][ T5254] __x64_sys_openat+0x135/0x160 [ 139.426716][ T5254] do_syscall_64+0x4c/0xa0 [ 139.431179][ T5254] ? clear_bhb_loop+0x30/0x80 [ 139.435882][ T5254] ? clear_bhb_loop+0x30/0x80 [ 139.440588][ T5254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.446508][ T5254] RIP: 0033:0x7fc6a1caf98e [ 139.450949][ T5254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.470576][ T5254] RSP: 002b:00007fc69ff46ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.479018][ T5254] RAX: ffffffffffffffda RBX: 00007fc69ff476c0 RCX: 00007fc6a1caf98e [ 139.487021][ T5254] RDX: 0000000000000000 RSI: 00007fc69ff46f90 RDI: ffffffffffffff9c [ 139.495041][ T5254] RBP: 00007fc6a1d86024 R08: 0000000000000000 R09: 0000000000000000 [ 139.503041][ T5254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.511064][ T5254] R13: 00007fc6a1f77038 R14: 00007fc6a1f76fa0 R15: 00007fff93848b28 [ 139.519088][ T5254] [ 139.524063][ T5252] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.540899][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.581954][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.588723][ T5252] EXT4-fs (loop5): shut down requested (0) [ 139.589468][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.617066][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.626411][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.635817][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.642990][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.651484][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.668929][ T5264] loop6: detected capacity change from 0 to 512 [ 139.737523][ T5264] EXT4-fs (loop6): inline encryption not supported [ 139.760758][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.782579][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.805902][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.816162][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.829264][ T5264] EXT4-fs (loop6): 1 orphan inode deleted [ 139.861273][ T5264] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 139.893191][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.919477][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.949898][ T5270] loop2: detected capacity change from 0 to 1024 [ 139.961285][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.971434][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.980641][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.142699][ T5074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.207550][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.254326][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.287393][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.315587][ T5284] block nbd6: shutting down sockets [ 140.334899][ T5283] netlink: 'syz.1.299': attribute type 10 has an invalid length. [ 140.568949][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.576443][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.782739][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.789939][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.797546][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.804700][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.815202][ T5293] loop6: detected capacity change from 0 to 512 [ 141.003026][ T5283] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 141.317293][ T5293] EXT4-fs (loop6): 1 truncate cleaned up [ 141.331193][ T5313] loop2: detected capacity change from 0 to 512 [ 141.350763][ T5293] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,min_batch_time=0x0000000000000008,noauto_da_alloc,,errors=continue. Quota mode: none. [ 141.497231][ T5313] EXT4-fs (loop2): inline encryption not supported [ 142.035284][ T5313] EXT4-fs (loop2): 1 orphan inode deleted [ 142.084199][ T5313] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 142.324499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.332098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.387922][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.472425][ T5339] loop5: detected capacity change from 0 to 1024 [ 142.643040][ T5351] loop2: detected capacity change from 0 to 512 [ 142.723458][ T5351] EXT4-fs (loop2): Test dummy encryption mode enabled [ 142.851955][ T5351] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.315: inode has both inline data and extents flags [ 142.875102][ T5351] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.315: couldn't read orphan inode 15 (err -117) [ 142.941757][ T5351] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 143.121917][ T5370] loop5: detected capacity change from 0 to 128 [ 143.351245][ T5370] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.490776][ T5351] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 143.534665][ T5370] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.029696][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.065130][ T5370] syz.5.318 (pid 5370) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 144.082372][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.201476][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.221101][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.309478][ T5074] device veth0_vlan entered promiscuous mode [ 144.343320][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.371995][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.390956][ T5370] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 144.425532][ T5370] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 144.726733][ T4325] device hsr_slave_0 left promiscuous mode [ 144.737832][ T5413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.838812][ T4325] device hsr_slave_1 left promiscuous mode [ 144.937802][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.038966][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.102293][ T4325] device bridge_slave_1 left promiscuous mode [ 145.143607][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.179050][ T5421] loop5: detected capacity change from 0 to 2048 [ 145.200412][ T4325] device bridge_slave_0 left promiscuous mode [ 145.223826][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.251392][ T5421] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 145.260380][ T5421] loop5: p2 size 150994944 extends beyond EOD, [ 145.351720][ T4325] device hsr_slave_0 left promiscuous mode [ 145.392642][ T5421] truncated [ 145.398415][ T4325] device hsr_slave_1 left promiscuous mode [ 145.406622][ T5421] loop5: p4 size 722688 extends beyond EOD, truncated [ 145.423736][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.427792][ T5421] loop5: p5 size 150994944 extends beyond EOD, [ 145.431719][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.437767][ T5421] truncated [ 145.451209][ T5421] loop5: p6 size 150994944 extends beyond EOD, truncated [ 145.459883][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.475029][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.478053][ T5421] loop5: p7 size 150994944 extends beyond EOD, truncated [ 145.501440][ T4325] device bridge_slave_1 left promiscuous mode [ 145.504605][ T5421] loop5: p8 size 150994944 extends beyond EOD, truncated [ 145.528442][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.540999][ T5421] loop5: p9 size 150994944 extends beyond EOD, truncated [ 145.578177][ T5421] loop5: p10 size 150994944 extends beyond EOD, truncated [ 145.586193][ T4325] device bridge_slave_0 left promiscuous mode [ 145.592444][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.600492][ T5421] loop5: p11 size 150994944 extends beyond EOD, truncated [ 145.621523][ T5421] loop5: p12 size 150994944 extends beyond EOD, truncated [ 145.631176][ T5421] loop5: p13 size 150994944 extends beyond EOD, truncated [ 145.640303][ T5421] loop5: p14 size 150994944 extends beyond EOD, truncated [ 145.649342][ T5421] loop5: p15 size 150994944 extends beyond EOD, truncated [ 145.658314][ T5421] loop5: p16 size 150994944 extends beyond EOD, truncated [ 145.667381][ T5421] loop5: p17 size 150994944 extends beyond EOD, truncated [ 145.676608][ T4325] device veth1_macvtap left promiscuous mode [ 145.679199][ T5421] loop5: p18 size 150994944 extends beyond EOD, truncated [ 145.689068][ T4325] device veth0_macvtap left promiscuous mode [ 145.698989][ T5421] loop5: p19 size 150994944 extends beyond EOD, truncated [ 145.731473][ T4325] device veth1_vlan left promiscuous mode [ 145.735104][ T5421] loop5: p20 size 150994944 extends beyond EOD, truncated [ 145.751743][ T4325] device veth0_vlan left promiscuous mode [ 145.757900][ T5421] loop5: p21 size 150994944 extends beyond EOD, truncated [ 145.771407][ T5421] loop5: p22 size 150994944 extends beyond EOD, truncated [ 145.781545][ T5421] loop5: p23 size 150994944 extends beyond EOD, truncated [ 145.790325][ T5435] FAULT_INJECTION: forcing a failure. [ 145.790325][ T5435] name failslab, interval 1, probability 0, space 0, times 0 [ 145.790480][ T5421] loop5: p24 size 150994944 extends beyond EOD, truncated [ 145.793919][ T5421] loop5: p25 size 150994944 extends beyond EOD, truncated [ 145.824712][ T5421] loop5: p26 size 150994944 extends beyond EOD, truncated [ 145.833846][ T5421] loop5: p27 size 150994944 extends beyond EOD, truncated [ 145.842786][ T5421] loop5: p28 size 150994944 extends beyond EOD, truncated [ 145.852167][ T5421] loop5: p29 size 150994944 extends beyond EOD, truncated [ 145.861280][ T5421] loop5: p30 size 150994944 extends beyond EOD, truncated [ 145.868795][ T5435] CPU: 0 PID: 5435 Comm: syz.6.331 Not tainted syzkaller #0 [ 145.876118][ T5435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.886208][ T5435] Call Trace: [ 145.889523][ T5435] [ 145.892482][ T5435] dump_stack_lvl+0x188/0x250 [ 145.897209][ T5435] ? show_regs_print_info+0x20/0x20 [ 145.902463][ T5435] ? load_image+0x410/0x410 [ 145.907013][ T5435] ? __might_sleep+0xf0/0xf0 [ 145.911639][ T5435] ? __lock_acquire+0x7b50/0x7b50 [ 145.916700][ T5435] ? rcu_is_watching+0x11/0xa0 [ 145.921506][ T5435] should_fail+0x383/0x4b0 [ 145.925960][ T5435] should_failslab+0x5/0x20 [ 145.930512][ T5435] slab_pre_alloc_hook+0x51/0xc0 [ 145.935486][ T5435] ? __pmd_alloc+0x116/0x750 [ 145.940109][ T5435] kmem_cache_alloc+0x3d/0x280 [ 145.944915][ T5435] __pmd_alloc+0x116/0x750 [ 145.949377][ T5435] ? __lock_acquire+0x7b50/0x7b50 [ 145.954433][ T5435] ? do_raw_spin_lock+0x128/0x2f0 [ 145.959495][ T5435] ? __pud_alloc+0x140/0x140 [ 145.964118][ T5435] ? __rwlock_init+0x140/0x140 [ 145.968925][ T5435] ? do_raw_spin_unlock+0x11d/0x230 [ 145.974166][ T5435] ? _raw_spin_unlock+0x24/0x40 [ 145.979053][ T5435] ? __pud_alloc+0x122/0x140 [ 145.983681][ T5435] copy_page_range+0x2c83/0x32c0 [ 145.988673][ T5435] ? anon_vma_fork+0x4c8/0x520 [ 145.993494][ T5435] ? clear_nonspinnable+0x60/0x60 [ 145.998554][ T5435] ? pfn_valid+0x380/0x380 [ 146.003012][ T5435] ? validate_mm_rb+0x201/0x230 [ 146.007905][ T5435] ? validate_mm_rb+0x230/0x230 [ 146.012798][ T5435] ? vma_gap_callbacks_rotate+0x1c1/0x1f0 [ 146.018561][ T5435] copy_mm+0xc61/0x13d0 [ 146.022772][ T5435] ? copy_signal+0x610/0x610 [ 146.027403][ T5435] ? __init_rwsem+0x11e/0x160 [ 146.032119][ T5435] ? copy_signal+0x501/0x610 [ 146.036752][ T5435] copy_process+0x17a7/0x3e70 [ 146.041498][ T5435] ? __pidfd_prepare+0x140/0x140 [ 146.046566][ T5435] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 146.052244][ T5435] ? verify_lock_unused+0x140/0x140 [ 146.057500][ T5435] kernel_clone+0x23f/0x990 [ 146.062050][ T5435] ? create_io_thread+0x180/0x180 [ 146.067130][ T5435] __x64_sys_clone+0x19a/0x210 [ 146.071942][ T5435] ? __ia32_sys_vfork+0x130/0x130 [ 146.077029][ T5435] ? lockdep_hardirqs_on+0x94/0x140 [ 146.082275][ T5435] do_syscall_64+0x4c/0xa0 [ 146.086741][ T5435] ? clear_bhb_loop+0x30/0x80 [ 146.091462][ T5435] ? clear_bhb_loop+0x30/0x80 [ 146.096190][ T5435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.102163][ T5435] RIP: 0033:0x7f63492db159 [ 146.106618][ T5435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.126264][ T5435] RSP: 002b:00007f6347532fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 146.134726][ T5435] RAX: ffffffffffffffda RBX: 00007f6349562fa0 RCX: 00007f63492db159 [ 146.142744][ T5435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.150754][ T5435] RBP: 00007f6349372024 R08: 0000000000000000 R09: 0000000000000000 [ 146.158765][ T5435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.166780][ T5435] R13: 00007f6349563038 R14: 00007f6349562fa0 R15: 00007ffdc7c541b8 [ 146.174817][ T5435] [ 146.186043][ T5421] loop5: p31 size 150994944 extends beyond EOD, truncated [ 146.195048][ T5421] loop5: p32 size 150994944 extends beyond EOD, truncated [ 146.205741][ T5421] loop5: p33 size 150994944 extends beyond EOD, truncated [ 146.214976][ T5421] loop5: p34 size 150994944 extends beyond EOD, truncated [ 146.223998][ T5421] loop5: p35 size 150994944 extends beyond EOD, truncated [ 146.241111][ T5421] loop5: p36 size 150994944 extends beyond EOD, truncated [ 146.266323][ T5421] loop5: p37 size 150994944 extends beyond EOD, truncated [ 146.286541][ T5421] loop5: p38 size 150994944 extends beyond EOD, truncated [ 146.314311][ T5421] loop5: p39 size 150994944 extends beyond EOD, truncated [ 146.335867][ T5421] loop5: p40 size 150994944 extends beyond EOD, truncated [ 146.354549][ T5421] loop5: p41 size 150994944 extends beyond EOD, truncated [ 146.369246][ T5421] loop5: p42 size 150994944 extends beyond EOD, truncated [ 146.390402][ T5421] loop5: p43 size 150994944 extends beyond EOD, truncated [ 146.422155][ T5421] loop5: p44 size 150994944 extends beyond EOD, truncated [ 146.437158][ T5421] loop5: p45 size 150994944 extends beyond EOD, truncated [ 146.467046][ T5421] loop5: p46 size 150994944 extends beyond EOD, truncated [ 146.492879][ T5421] loop5: p47 size 150994944 extends beyond EOD, truncated [ 146.513146][ T5421] loop5: p48 size 150994944 extends beyond EOD, truncated [ 146.533858][ T5421] loop5: p49 size 150994944 extends beyond EOD, truncated [ 146.550519][ T5421] loop5: p50 size 150994944 extends beyond EOD, truncated [ 146.582241][ T5443] tmpfs: Unknown parameter '/dev/net/tun' [ 146.585527][ T5421] loop5: p51 size 150994944 extends beyond EOD, truncated [ 146.591150][ T5443] FAULT_INJECTION: forcing a failure. [ 146.591150][ T5443] name failslab, interval 1, probability 0, space 0, times 0 [ 146.608535][ T5443] CPU: 0 PID: 5443 Comm: syz.6.335 Not tainted syzkaller #0 [ 146.615868][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.625955][ T5443] Call Trace: [ 146.629261][ T5443] [ 146.632222][ T5443] dump_stack_lvl+0x188/0x250 [ 146.636942][ T5443] ? show_regs_print_info+0x20/0x20 [ 146.642183][ T5443] ? load_image+0x410/0x410 [ 146.647105][ T5443] ? __might_sleep+0xf0/0xf0 [ 146.652437][ T5443] ? __lock_acquire+0x7b50/0x7b50 [ 146.657511][ T5443] should_fail+0x383/0x4b0 [ 146.661974][ T5443] should_failslab+0x5/0x20 [ 146.666512][ T5443] slab_pre_alloc_hook+0x51/0xc0 [ 146.671489][ T5443] __kmalloc+0x6b/0x340 [ 146.675703][ T5443] ? security_sb_alloc+0x3d/0x120 [ 146.680774][ T5443] security_sb_alloc+0x3d/0x120 [ 146.685660][ T5443] alloc_super+0x208/0x970 [ 146.690118][ T5443] sget+0x1ce/0x450 [ 146.693965][ T5443] ? free_anon_bdev+0x20/0x20 [ 146.698686][ T5443] ? autofs_kill_sb+0x110/0x110 [ 146.703571][ T5443] mount_nodev+0x2c/0xe0 [ 146.707853][ T5443] legacy_get_tree+0xe6/0x180 [ 146.712566][ T5443] ? qnx6_mmi_copy_sb+0x3c0/0x3c0 [ 146.717819][ T5443] vfs_get_tree+0x88/0x270 [ 146.722290][ T5443] do_new_mount+0x247/0xa40 [ 146.726853][ T5443] __se_sys_mount+0x2e3/0x3d0 [ 146.731576][ T5443] ? __x64_sys_mount+0xc0/0xc0 [ 146.736378][ T5443] ? lockdep_hardirqs_on+0x94/0x140 [ 146.741609][ T5443] ? __x64_sys_mount+0x1c/0xc0 [ 146.746411][ T5443] do_syscall_64+0x4c/0xa0 [ 146.750871][ T5443] ? clear_bhb_loop+0x30/0x80 [ 146.755601][ T5443] ? clear_bhb_loop+0x30/0x80 [ 146.760316][ T5443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.766248][ T5443] RIP: 0033:0x7f63492db159 [ 146.770698][ T5443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.790333][ T5443] RSP: 002b:00007f6347533028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.798802][ T5443] RAX: ffffffffffffffda RBX: 00007f6349562fa0 RCX: 00007f63492db159 [ 146.806820][ T5443] RDX: 0000200000000280 RSI: 0000200000000440 RDI: 0000000000000000 [ 146.814971][ T5443] RBP: 00007f6349372024 R08: 0000200000000040 R09: 0000000000000000 [ 146.822981][ T5443] R10: 000000000201000c R11: 0000000000000246 R12: 0000000000000000 [ 146.831015][ T5443] R13: 00007f6349563038 R14: 00007f6349562fa0 R15: 00007ffdc7c541b8 [ 146.839044][ T5443] [ 146.844985][ T5421] loop5: p52 size 150994944 extends beyond EOD, truncated [ 146.864449][ T5421] loop5: p53 size 150994944 extends beyond EOD, truncated [ 146.884524][ T5421] loop5: p54 size 150994944 extends beyond EOD, truncated [ 146.897705][ T5421] loop5: p55 size 150994944 extends beyond EOD, truncated [ 146.914248][ T5421] loop5: p56 size 150994944 extends beyond EOD, truncated [ 146.922717][ T5421] loop5: p57 size 150994944 extends beyond EOD, truncated [ 146.939314][ T5421] loop5: p58 size 150994944 extends beyond EOD, truncated [ 146.951097][ T5421] loop5: p59 size 150994944 extends beyond EOD, truncated [ 146.963819][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 146.977881][ T5421] loop5: p60 size 150994944 extends beyond EOD, truncated [ 146.989795][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 146.998380][ T5421] loop5: p61 size 150994944 extends beyond EOD, truncated [ 147.014966][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.020865][ T5421] loop5: p62 size 150994944 extends beyond EOD, truncated [ 147.031991][ T5421] loop5: p63 size 150994944 extends beyond EOD, truncated [ 147.040483][ T5421] loop5: p64 size 150994944 extends beyond EOD, truncated [ 147.048753][ T5421] loop5: p65 size 150994944 extends beyond EOD, truncated [ 147.058097][ T5421] loop5: p66 size 150994944 extends beyond EOD, truncated [ 147.071077][ T5421] loop5: p67 size 150994944 extends beyond EOD, truncated [ 147.078851][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.080646][ T5421] loop5: p68 size 150994944 extends beyond EOD, truncated [ 147.097932][ T5421] loop5: p69 size 150994944 extends beyond EOD, truncated [ 147.109964][ T5421] loop5: p70 size 150994944 extends beyond EOD, truncated [ 147.127407][ T5421] loop5: p71 size 150994944 extends beyond EOD, truncated [ 147.143161][ T5421] loop5: p72 size 150994944 extends beyond EOD, truncated [ 147.161966][ T5421] loop5: p73 size 150994944 extends beyond EOD, truncated [ 147.173818][ T5421] loop5: p74 size 150994944 extends beyond EOD, truncated [ 147.183395][ T5421] loop5: p75 size 150994944 extends beyond EOD, truncated [ 147.200917][ T5421] loop5: p76 size 150994944 extends beyond EOD, truncated [ 147.217497][ T5421] loop5: p77 size 150994944 extends beyond EOD, truncated [ 147.232504][ T5421] loop5: p78 size 150994944 extends beyond EOD, truncated [ 147.248432][ T4325] bond0 (unregistering): Released all slaves [ 147.254997][ T5421] loop5: p79 size 150994944 extends beyond EOD, truncated [ 147.269226][ T5421] loop5: p80 size 150994944 extends beyond EOD, truncated [ 147.278610][ T5421] loop5: p81 size 150994944 extends beyond EOD, truncated [ 147.288378][ T5421] loop5: p82 size 150994944 extends beyond EOD, truncated [ 147.297232][ T5421] loop5: p83 size 150994944 extends beyond EOD, truncated [ 147.306507][ T5421] loop5: p84 size 150994944 extends beyond EOD, truncated [ 147.315579][ T5421] loop5: p85 size 150994944 extends beyond EOD, truncated [ 147.327579][ T5421] loop5: p86 size 150994944 extends beyond EOD, truncated [ 147.341008][ T5421] loop5: p87 size 150994944 extends beyond EOD, truncated [ 147.359001][ T5421] loop5: p88 size 150994944 extends beyond EOD, truncated [ 147.372114][ T5421] loop5: p89 size 150994944 extends beyond EOD, truncated [ 147.393885][ T5421] loop5: p90 size 150994944 extends beyond EOD, truncated [ 147.407164][ T5421] loop5: p91 size 150994944 extends beyond EOD, truncated [ 147.422412][ T5421] loop5: p92 size 150994944 extends beyond EOD, truncated [ 147.434991][ T5421] loop5: p93 size 150994944 extends beyond EOD, truncated [ 147.464189][ T5421] loop5: p94 size 150994944 extends beyond EOD, truncated [ 147.484000][ T5421] loop5: p95 size 150994944 extends beyond EOD, truncated [ 147.492869][ T5421] loop5: p96 size 150994944 extends beyond EOD, truncated [ 147.509254][ T5421] loop5: p97 size 150994944 extends beyond EOD, truncated [ 147.521388][ T5421] loop5: p98 size 150994944 extends beyond EOD, truncated [ 147.537495][ T5421] loop5: p99 size 150994944 extends beyond EOD, truncated [ 147.546761][ T5421] loop5: p100 size 150994944 extends beyond EOD, truncated [ 147.558384][ T5421] loop5: p101 size 150994944 extends beyond EOD, truncated [ 147.558905][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 147.573914][ T5421] loop5: p102 size 150994944 extends beyond EOD, truncated [ 147.583334][ T5421] loop5: p103 size 150994944 extends beyond EOD, truncated [ 147.592764][ T5421] loop5: p104 size 150994944 extends beyond EOD, truncated [ 147.602105][ T5421] loop5: p105 size 150994944 extends beyond EOD, truncated [ 147.611356][ T5421] loop5: p106 size 150994944 extends beyond EOD, truncated [ 147.625445][ T5421] loop5: p107 size 150994944 extends beyond EOD, truncated [ 147.641039][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 147.648784][ T5421] loop5: p108 size 150994944 extends beyond EOD, truncated [ 147.666027][ T5421] loop5: p109 size 150994944 extends beyond EOD, truncated [ 147.675462][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.686601][ T5421] loop5: p110 size 150994944 extends beyond EOD, truncated [ 147.698698][ T5421] loop5: p111 size 150994944 extends beyond EOD, truncated [ 147.707908][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.717151][ T5421] loop5: p112 size 150994944 extends beyond EOD, truncated [ 147.726536][ T5421] loop5: p113 size 150994944 extends beyond EOD, truncated [ 147.736921][ T5421] loop5: p114 size 150994944 extends beyond EOD, truncated [ 147.748287][ T5421] loop5: p115 size 150994944 extends beyond EOD, truncated [ 147.761837][ T5421] loop5: p116 size 150994944 extends beyond EOD, truncated [ 147.773116][ T5421] loop5: p117 size 150994944 extends beyond EOD, truncated [ 147.782402][ T5421] loop5: p118 size 150994944 extends beyond EOD, truncated [ 147.794869][ T5421] loop5: p119 size 150994944 extends beyond EOD, truncated [ 147.804159][ T5421] loop5: p120 size 150994944 extends beyond EOD, truncated [ 147.813068][ T5421] loop5: p121 size 150994944 extends beyond EOD, truncated [ 147.822361][ T5421] loop5: p122 size 150994944 extends beyond EOD, truncated [ 147.839468][ T5421] loop5: p123 size 150994944 extends beyond EOD, truncated [ 147.852336][ T5421] loop5: p124 size 150994944 extends beyond EOD, truncated [ 147.866794][ T5421] loop5: p125 size 150994944 extends beyond EOD, truncated [ 147.881796][ T5421] loop5: p126 size 150994944 extends beyond EOD, truncated [ 147.891551][ T5421] loop5: p127 size 150994944 extends beyond EOD, truncated [ 147.902511][ T5421] loop5: p128 size 150994944 extends beyond EOD, truncated [ 147.912262][ T5421] loop5: p129 size 150994944 extends beyond EOD, truncated [ 147.920932][ T5421] loop5: p130 size 150994944 extends beyond EOD, truncated [ 147.931382][ T5421] loop5: p131 size 150994944 extends beyond EOD, truncated [ 147.945407][ T5421] loop5: p132 size 150994944 extends beyond EOD, truncated [ 147.956608][ T5421] loop5: p133 size 150994944 extends beyond EOD, truncated [ 147.964637][ T4325] bond0 (unregistering): Released all slaves [ 147.976200][ T5421] loop5: p134 size 150994944 extends beyond EOD, truncated [ 147.987896][ T5421] loop5: p135 size 150994944 extends beyond EOD, truncated [ 147.997696][ T5421] loop5: p136 size 150994944 extends beyond EOD, truncated [ 148.007136][ T5421] loop5: p137 size 150994944 extends beyond EOD, truncated [ 148.018972][ T5421] loop5: p138 size 150994944 extends beyond EOD, truncated [ 148.029787][ T5421] loop5: p139 size 150994944 extends beyond EOD, truncated [ 148.042598][ T5403] lo: Caught tx_queue_len zero misconfig [ 148.048726][ T5421] loop5: p140 size 150994944 extends beyond EOD, [ 148.048732][ T5403] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 148.062871][ T5421] truncated [ 148.083716][ T5421] loop5: p141 size 150994944 extends beyond EOD, truncated [ 148.101314][ T5421] loop5: p142 size 150994944 extends beyond EOD, truncated [ 148.131949][ T5421] loop5: p143 size 150994944 extends beyond EOD, truncated [ 148.204700][ T5074] device veth1_vlan entered promiscuous mode [ 148.226212][ T5421] loop5: p144 size 150994944 extends beyond EOD, truncated [ 148.274811][ T5421] loop5: p145 size 150994944 extends beyond EOD, truncated [ 148.394520][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.404122][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.418376][ T5421] loop5: p146 size 150994944 extends beyond EOD, truncated [ 148.454087][ T5450] loop6: detected capacity change from 0 to 128 [ 148.495013][ T5421] loop5: p147 size 150994944 extends beyond EOD, truncated [ 148.531509][ T5421] loop5: p148 size 150994944 extends beyond EOD, truncated [ 148.693763][ T5074] device veth0_macvtap entered promiscuous mode [ 148.933868][ T5421] loop5: p149 size 150994944 extends beyond EOD, truncated [ 149.202608][ T5074] device veth1_macvtap entered promiscuous mode [ 149.210373][ T5421] loop5: p150 size 150994944 extends beyond EOD, truncated [ 149.289118][ T5421] loop5: p151 size 150994944 extends beyond EOD, truncated [ 149.334054][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.342473][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.355244][ T5421] loop5: p152 size 150994944 extends beyond EOD, truncated [ 149.367539][ T5421] loop5: p153 size 150994944 extends beyond EOD, truncated [ 149.389086][ T5421] loop5: p154 size 150994944 extends beyond EOD, truncated [ 149.404976][ T5421] loop5: p155 size 150994944 extends beyond EOD, truncated [ 149.413213][ T5421] loop5: p155 could not be added: -ENOMEM [ 149.435776][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.457329][ T5421] loop5: p156 size 150994944 extends beyond EOD, truncated [ 149.483987][ T5421] loop5: p157 size 150994944 extends beyond EOD, truncated [ 149.504941][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.520155][ T5421] loop5: p158 size 150994944 extends beyond EOD, truncated [ 149.538458][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.553198][ T5421] loop5: p159 size 150994944 extends beyond EOD, truncated [ 149.566351][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.576828][ T5421] loop5: p160 size 150994944 extends beyond EOD, truncated [ 149.600342][ T5421] loop5: p161 size 150994944 extends beyond EOD, truncated [ 149.621546][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.648444][ T5421] loop5: p162 size 150994944 extends beyond EOD, truncated [ 149.657359][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.692882][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.965272][ T5464] loop2: detected capacity change from 0 to 8192 [ 150.036949][ T5421] loop5: p163 size 150994944 extends beyond EOD, truncated [ 150.064293][ T5464] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.754178][ T5421] loop5: p164 size 150994944 extends beyond EOD, truncated [ 150.766603][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.817865][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.828525][ T5421] loop5: p165 size 150994944 extends beyond EOD, truncated [ 150.890277][ T5421] loop5: p166 size 150994944 extends beyond EOD, truncated [ 150.913576][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.985245][ T5421] loop5: p167 size 150994944 extends beyond EOD, truncated [ 151.000294][ T5468] loop1: detected capacity change from 0 to 128 [ 151.013562][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.053751][ T5421] loop5: p168 size 150994944 extends beyond EOD, truncated [ 151.103399][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.112700][ T5421] loop5: p169 size 150994944 extends beyond EOD, truncated [ 151.154209][ T5421] loop5: p170 size 150994944 extends beyond EOD, truncated [ 151.177793][ T5421] loop5: p171 size 150994944 extends beyond EOD, truncated [ 151.206758][ T5421] loop5: p172 size 150994944 extends beyond EOD, truncated [ 151.231093][ T5421] loop5: p173 size 150994944 extends beyond EOD, truncated [ 151.262186][ T5421] loop5: p174 size 150994944 extends beyond EOD, truncated [ 151.280944][ T5421] loop5: p175 size 150994944 extends beyond EOD, truncated [ 151.314774][ T5421] loop5: p176 size 150994944 extends beyond EOD, truncated [ 151.343832][ T5421] loop5: p177 size 150994944 extends beyond EOD, truncated [ 151.371759][ T5421] loop5: p178 size 150994944 extends beyond EOD, truncated [ 151.404130][ T5421] loop5: p179 size 150994944 extends beyond EOD, truncated [ 151.430200][ T5421] loop5: p180 size 150994944 extends beyond EOD, truncated [ 151.451469][ T5421] loop5: p181 size 150994944 extends beyond EOD, truncated [ 151.482622][ T5421] loop5: p182 size 150994944 extends beyond EOD, truncated [ 151.512141][ T5421] loop5: p183 size 150994944 extends beyond EOD, truncated [ 151.548739][ T5421] loop5: p184 size 150994944 extends beyond EOD, truncated [ 151.572365][ T5421] loop5: p185 size 150994944 extends beyond EOD, truncated [ 151.595711][ T5421] loop5: p186 size 150994944 extends beyond EOD, truncated [ 151.621329][ T5421] loop5: p187 size 150994944 extends beyond EOD, truncated [ 151.653900][ T5421] loop5: p188 size 150994944 extends beyond EOD, truncated [ 151.681358][ T5421] loop5: p189 size 150994944 extends beyond EOD, truncated [ 151.710919][ T5421] loop5: p190 size 150994944 extends beyond EOD, truncated [ 151.748433][ T5421] loop5: p191 size 150994944 extends beyond EOD, truncated [ 151.787120][ T5421] loop5: p192 size 150994944 extends beyond EOD, truncated [ 151.814965][ T5421] loop5: p193 size 150994944 extends beyond EOD, truncated [ 151.840638][ T5421] loop5: p194 size 150994944 extends beyond EOD, truncated [ 151.875879][ T5421] loop5: p195 size 150994944 extends beyond EOD, truncated [ 151.900164][ T5421] loop5: p196 size 150994944 extends beyond EOD, truncated [ 151.932721][ T5421] loop5: p197 size 150994944 extends beyond EOD, truncated [ 151.959525][ T5421] loop5: p198 size 150994944 extends beyond EOD, truncated [ 152.014559][ T5421] loop5: p199 size 150994944 extends beyond EOD, truncated [ 152.037903][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.081962][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.133840][ T5421] loop5: p200 size 150994944 extends beyond EOD, truncated [ 152.172190][ T5421] loop5: p201 size 150994944 extends beyond EOD, truncated [ 152.195153][ T5074] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.216989][ T5421] loop5: p202 size 150994944 extends beyond EOD, truncated [ 152.227319][ T5074] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.237718][ T5468] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.304678][ T5074] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.313778][ T5421] loop5: p203 size 150994944 extends beyond EOD, truncated [ 152.321223][ T5468] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.343886][ T5074] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.363961][ T5421] loop5: p204 size 150994944 extends beyond EOD, truncated [ 152.393938][ T5421] loop5: p205 size 150994944 extends beyond EOD, truncated [ 152.421569][ T5421] loop5: p206 size 150994944 extends beyond EOD, truncated [ 152.454019][ T5421] loop5: p207 size 150994944 extends beyond EOD, truncated [ 152.478700][ T5421] loop5: p208 size 150994944 extends beyond EOD, truncated [ 152.529906][ T5421] loop5: p209 size 150994944 extends beyond EOD, truncated [ 152.604757][ T5421] loop5: p210 size 150994944 extends beyond EOD, truncated [ 152.633763][ T5421] loop5: p211 size 150994944 extends beyond EOD, truncated [ 152.684596][ T5421] loop5: p212 size 150994944 extends beyond EOD, truncated [ 152.797378][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.936693][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.346319][ T5421] loop5: p213 size 150994944 extends beyond EOD, truncated [ 153.396426][ T5421] loop5: p214 size 150994944 extends beyond EOD, truncated [ 153.488294][ T5421] loop5: p215 size 150994944 extends beyond EOD, truncated [ 153.623416][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.633619][ T5421] loop5: p216 size 150994944 extends beyond EOD, truncated [ 153.655649][ T5421] loop5: p217 size 150994944 extends beyond EOD, truncated [ 153.672593][ T5239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.691392][ T5421] loop5: p218 size 150994944 extends beyond EOD, truncated [ 153.710761][ T5239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.732671][ T5421] loop5: p219 size 150994944 extends beyond EOD, truncated [ 153.763439][ T5421] loop5: p220 size 150994944 extends beyond EOD, truncated [ 153.765045][ T5504] netlink: 'syz.1.348': attribute type 7 has an invalid length. [ 153.784490][ T5421] loop5: p221 size 150994944 extends beyond EOD, truncated [ 153.819001][ T5421] loop5: p222 size 150994944 extends beyond EOD, truncated [ 153.835667][ T5504] netlink: 'syz.1.348': attribute type 8 has an invalid length. [ 153.874399][ T5421] loop5: p223 size 150994944 extends beyond EOD, truncated [ 153.917009][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.973438][ T5421] loop5: p224 size 150994944 extends beyond EOD, truncated [ 154.004906][ T5421] loop5: p225 size 150994944 extends beyond EOD, truncated [ 154.103400][ T5421] loop5: p226 size 150994944 extends beyond EOD, truncated [ 154.288594][ T5421] loop5: p227 size 150994944 extends beyond EOD, truncated [ 154.621624][ T5421] loop5: p228 size 150994944 extends beyond EOD, truncated [ 154.798040][ T5421] loop5: p229 size 150994944 extends beyond EOD, truncated [ 154.835469][ T5421] loop5: p230 size 150994944 extends beyond EOD, truncated [ 154.881131][ T5421] loop5: p231 size 150994944 extends beyond EOD, truncated [ 154.923769][ T5421] loop5: p232 size 150994944 extends beyond EOD, truncated [ 154.954227][ T5421] loop5: p233 size 150994944 extends beyond EOD, truncated [ 154.983863][ T5421] loop5: p234 size 150994944 extends beyond EOD, truncated [ 155.025300][ T5421] loop5: p235 size 150994944 extends beyond EOD, truncated [ 155.238380][ T5421] loop5: p236 size 150994944 extends beyond EOD, truncated [ 155.247733][ T5421] loop5: p237 size 150994944 extends beyond EOD, truncated [ 155.256341][ T5421] loop5: p238 size 150994944 extends beyond EOD, truncated [ 155.264995][ T5421] loop5: p239 size 150994944 extends beyond EOD, truncated [ 155.273273][ T5421] loop5: p240 size 150994944 extends beyond EOD, truncated [ 155.281963][ T5421] loop5: p241 size 150994944 extends beyond EOD, truncated [ 155.290612][ T5421] loop5: p242 size 150994944 extends beyond EOD, truncated [ 155.299344][ T5421] loop5: p243 size 150994944 extends beyond EOD, truncated [ 155.339969][ T5421] loop5: p244 size 150994944 extends beyond EOD, truncated [ 155.410757][ T5421] loop5: p245 size 150994944 extends beyond EOD, truncated [ 155.465473][ T5421] loop5: p246 size 150994944 extends beyond EOD, truncated [ 155.508052][ T5421] loop5: p247 size 150994944 extends beyond EOD, truncated [ 155.533400][ T5421] loop5: p248 size 150994944 extends beyond EOD, truncated [ 155.540297][ T5542] loop2: detected capacity change from 0 to 128 [ 155.591736][ T5421] loop5: p249 size 150994944 extends beyond EOD, truncated [ 155.621594][ T5421] loop5: p250 size 150994944 extends beyond EOD, truncated [ 155.632941][ T5421] loop5: p251 size 150994944 extends beyond EOD, truncated [ 155.641970][ T5421] loop5: p252 size 150994944 extends beyond EOD, truncated [ 155.698726][ T5421] loop5: p253 size 150994944 extends beyond EOD, truncated [ 155.907294][ T5421] loop5: p254 size 150994944 extends beyond EOD, truncated [ 155.935521][ T5421] loop5: p255 size 150994944 extends beyond EOD, truncated [ 156.553237][ T5551] loop2: detected capacity change from 0 to 128 [ 157.954996][ T4199] Bluetooth: Frame is too long (len 88, expected len 40) [ 158.145884][ T5588] FAULT_INJECTION: forcing a failure. [ 158.145884][ T5588] name failslab, interval 1, probability 0, space 0, times 0 [ 158.234754][ T5588] CPU: 0 PID: 5588 Comm: syz.7.371 Not tainted syzkaller #0 [ 158.242185][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.252291][ T5588] Call Trace: [ 158.255617][ T5588] [ 158.258580][ T5588] dump_stack_lvl+0x188/0x250 [ 158.263308][ T5588] ? show_regs_print_info+0x20/0x20 [ 158.268559][ T5588] ? load_image+0x410/0x410 [ 158.273112][ T5588] ? __might_sleep+0xf0/0xf0 [ 158.277751][ T5588] ? __lock_acquire+0x7b50/0x7b50 [ 158.282822][ T5588] should_fail+0x383/0x4b0 [ 158.287331][ T5588] should_failslab+0x5/0x20 [ 158.291878][ T5588] slab_pre_alloc_hook+0x51/0xc0 [ 158.296857][ T5588] ? security_file_alloc+0x30/0x110 [ 158.302094][ T5588] kmem_cache_alloc+0x3d/0x280 [ 158.306898][ T5588] ? rcu_is_watching+0x11/0xa0 [ 158.311798][ T5588] security_file_alloc+0x30/0x110 [ 158.316877][ T5588] __alloc_file+0xc2/0x240 [ 158.321342][ T5588] alloc_empty_file+0x90/0x180 [ 158.326148][ T5588] alloc_file+0x5c/0x510 [ 158.330429][ T5588] ? do_raw_spin_unlock+0x11d/0x230 [ 158.335681][ T5588] alloc_file_pseudo+0x180/0x200 [ 158.340670][ T5588] ? alloc_empty_file_noaccount+0x80/0x80 [ 158.346437][ T5588] ? alloc_fd+0x59e/0x650 [ 158.350812][ T5588] sock_alloc_file+0xb3/0x240 [ 158.355531][ T5588] __sys_socket+0x11d/0x170 [ 158.360085][ T5588] __x64_sys_socket+0x76/0x80 [ 158.364818][ T5588] do_syscall_64+0x4c/0xa0 [ 158.369306][ T5588] ? clear_bhb_loop+0x30/0x80 [ 158.374023][ T5588] ? clear_bhb_loop+0x30/0x80 [ 158.378739][ T5588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.384687][ T5588] RIP: 0033:0x7fe39278a159 [ 158.389143][ T5588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.408784][ T5588] RSP: 002b:00007fe3909e1fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 158.417444][ T5588] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe39278a159 [ 158.425460][ T5588] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001a [ 158.433506][ T5588] RBP: 00007fe392821024 R08: 0000000000000000 R09: 0000000000000000 [ 158.441517][ T5588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.449530][ T5588] R13: 00007fe392a12038 R14: 00007fe392a11fa0 R15: 00007ffd3088edb8 [ 158.457562][ T5588] [ 161.177712][ T5623] smpboot: CPU 1 is now offline [ 161.305604][ T4293] udevd[4293]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 161.318527][ T4295] udevd[4295]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 161.331720][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 161.354096][ T5362] udevd[5362]: inotify_add_watch(7, /dev/loop5p13, 10) failed: No such file or directory [ 161.367282][ T5556] udevd[5556]: inotify_add_watch(7, /dev/loop5p8, 10) failed: No such file or directory [ 161.379935][ T5553] udevd[5553]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 161.392603][ T5557] udevd[5557]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 161.405169][ T5554] udevd[5554]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 161.417198][ T5558] udevd[5558]: inotify_add_watch(7, /dev/loop5p10, 10) failed: No such file or directory [ 161.429614][ T5561] udevd[5561]: inotify_add_watch(7, /dev/loop5p11, 10) failed: No such file or directory [ 162.886163][ T5652] netlink: 444 bytes leftover after parsing attributes in process `syz.2.387'. [ 163.167551][ T5652] loop2: detected capacity change from 0 to 512 [ 163.476084][ T5652] EXT4-fs (loop2): Value of option "test_dummy_encryption=discard" is unrecognized [ 164.403223][ T5675] loop2: detected capacity change from 0 to 8 [ 167.641353][ T5707] FAULT_INJECTION: forcing a failure. [ 167.641353][ T5707] name failslab, interval 1, probability 0, space 0, times 0 [ 167.795817][ T5707] CPU: 0 PID: 5707 Comm: syz.2.396 Not tainted syzkaller #0 [ 167.803169][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.813418][ T5707] Call Trace: [ 167.816732][ T5707] [ 167.819682][ T5707] dump_stack_lvl+0x188/0x250 [ 167.824370][ T5707] ? show_regs_print_info+0x20/0x20 [ 167.829577][ T5707] ? load_image+0x410/0x410 [ 167.834091][ T5707] ? __lock_acquire+0x7b50/0x7b50 [ 167.839233][ T5707] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 167.845256][ T5707] should_fail+0x383/0x4b0 [ 167.849687][ T5707] should_failslab+0x5/0x20 [ 167.854195][ T5707] slab_pre_alloc_hook+0x51/0xc0 [ 167.859153][ T5707] kmem_cache_alloc_trace+0x47/0x290 [ 167.864470][ T5707] ? rdma_resolve_ip+0x66/0x850 [ 167.869345][ T5707] rdma_resolve_ip+0x66/0x850 [ 167.874669][ T5707] ? __mutex_trylock_common+0x15c/0x260 [ 167.880236][ T5707] ? rdma_resolve_addr+0x2060/0x2060 [ 167.885642][ T5707] rdma_resolve_addr+0x6a6/0x2060 [ 167.890702][ T5707] ? rdma_resolve_route+0x2910/0x2910 [ 167.896095][ T5707] ? ucma_resolve_ip+0x1e3/0x2c0 [ 167.901052][ T5707] ? do_raw_spin_unlock+0x11d/0x230 [ 167.906287][ T5707] ? __might_fault+0xb3/0x110 [ 167.911095][ T5707] ucma_resolve_ip+0x21b/0x2c0 [ 167.915926][ T5707] ? ucma_bind_ip+0x240/0x240 [ 167.920624][ T5707] ? __might_fault+0xb3/0x110 [ 167.925329][ T5707] ? _copy_from_user+0x111/0x170 [ 167.930281][ T5707] ucma_write+0x24e/0x2f0 [ 167.934619][ T5707] ? ucma_get_global_nl_info+0x70/0x70 [ 167.940090][ T5707] ? common_file_perm+0x171/0x1c0 [ 167.945135][ T5707] ? fsnotify_perm+0x5d/0x560 [ 167.949851][ T5707] ? security_file_permission+0x75/0xa0 [ 167.955414][ T5707] ? ucma_get_global_nl_info+0x70/0x70 [ 167.960911][ T5707] vfs_write+0x304/0xd70 [ 167.965177][ T5707] ? file_end_write+0x250/0x250 [ 167.970126][ T5707] ? __fget_files+0x402/0x470 [ 167.974868][ T5707] ? __fdget_pos+0x1e2/0x370 [ 167.979581][ T5707] ? ksys_write+0x70/0x260 [ 167.984034][ T5707] ksys_write+0x153/0x260 [ 167.988377][ T5707] ? __ia32_sys_read+0x80/0x80 [ 167.993151][ T5707] ? lockdep_hardirqs_on+0x94/0x140 [ 167.998538][ T5707] do_syscall_64+0x4c/0xa0 [ 168.002976][ T5707] ? clear_bhb_loop+0x30/0x80 [ 168.007863][ T5707] ? clear_bhb_loop+0x30/0x80 [ 168.012567][ T5707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.018702][ T5707] RIP: 0033:0x7fc6a1cef159 [ 168.023273][ T5707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.042910][ T5707] RSP: 002b:00007fc69ff47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.051344][ T5707] RAX: ffffffffffffffda RBX: 00007fc6a1f76fa0 RCX: 00007fc6a1cef159 [ 168.059368][ T5707] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 168.067749][ T5707] RBP: 00007fc6a1d86024 R08: 0000000000000000 R09: 0000000000000000 [ 168.075966][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.083957][ T5707] R13: 00007fc6a1f77038 R14: 00007fc6a1f76fa0 R15: 00007fff93848b28 [ 168.092359][ T5707] [ 168.477857][ T5718] binder: 5715:5718 unknown command 1074553619 [ 168.588442][ T5722] binder: 5715:5722 unknown command 1074553620 [ 168.663875][ T5718] binder: 5715:5718 ioctl c0306201 200000000040 returned -22 [ 168.763323][ T5722] binder: 5715:5722 ioctl c0306201 200000000640 returned -22 [ 169.286191][ T5735] loop5: detected capacity change from 0 to 512 [ 169.776682][ T5735] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.973218][ T5735] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3894: comm syz.5.403: Allocating blocks 41-42 which overlap fs metadata [ 170.131252][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.238153][ T5750] loop7: detected capacity change from 0 to 256 [ 170.258420][ T5750] FAT-fs (loop7): Directory bread(block 1285) failed [ 170.258473][ T5750] FAT-fs (loop7): Directory bread(block 1286) failed [ 170.258495][ T5750] FAT-fs (loop7): Directory bread(block 1287) failed [ 170.258603][ T5750] FAT-fs (loop7): Directory bread(block 1288) failed [ 170.277527][ T5735] Quota error (device loop5): write_blk: dquota write failed [ 170.277605][ T5735] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 170.277716][ T5735] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3894: comm syz.5.403: Allocating blocks 41-42 which overlap fs metadata [ 170.423600][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.423685][ T5735] Quota error (device loop5): write_blk: dquota write failed [ 170.423879][ T5735] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 170.423910][ T5735] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.403: Failed to acquire dquot type 1 [ 170.424295][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.424429][ T5735] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 170.426463][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.426596][ T5735] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.403: corrupted inode contents [ 170.427968][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.427982][ T5735] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #12: comm syz.5.403: mark_inode_dirty error [ 170.428338][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.428508][ T5735] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.403: corrupted inode contents [ 170.428773][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.428785][ T5735] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #12: comm syz.5.403: mark_inode_dirty error [ 170.428994][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.429077][ T5735] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.403: corrupted inode contents [ 170.441328][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.441345][ T5735] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 170.445018][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.445045][ T5735] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.403: corrupted inode contents [ 170.445305][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.445316][ T5735] EXT4-fs error (device loop5): ext4_truncate:4286: inode #12: comm syz.5.403: mark_inode_dirty error [ 170.445518][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.445541][ T5735] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 170.445737][ T5735] EXT4-fs (loop5): Remounting filesystem read-only [ 170.445967][ T5735] EXT4-fs (loop5): 1 truncate cleaned up [ 170.445982][ T5735] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,init_itable,resgid=0x00000000000000002. Quota mode: writeback. [ 170.464140][ T5755] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.794240][ T5757] overlayfs: conflicting lowerdir path [ 171.362814][ T5769] loop6: detected capacity change from 0 to 8192 [ 173.027783][ T5809] loop6: detected capacity change from 0 to 1024 [ 173.085332][ T5809] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.258687][ T26] audit: type=1800 audit(1788719712.521:2): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.416" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 176.055162][ T5841] FAULT_INJECTION: forcing a failure. [ 176.055162][ T5841] name failslab, interval 1, probability 0, space 0, times 0 [ 176.196728][ T5841] CPU: 0 PID: 5841 Comm: syz.5.423 Not tainted syzkaller #0 [ 176.204105][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.214299][ T5841] Call Trace: [ 176.217596][ T5841] [ 176.220652][ T5841] dump_stack_lvl+0x188/0x250 [ 176.225386][ T5841] ? show_regs_print_info+0x20/0x20 [ 176.230619][ T5841] ? load_image+0x410/0x410 [ 176.235153][ T5841] ? __might_sleep+0xf0/0xf0 [ 176.239769][ T5841] ? __lock_acquire+0x7b50/0x7b50 [ 176.244830][ T5841] should_fail+0x383/0x4b0 [ 176.249276][ T5841] should_failslab+0x5/0x20 [ 176.253828][ T5841] slab_pre_alloc_hook+0x51/0xc0 [ 176.259409][ T5841] kmem_cache_alloc_trace+0x47/0x290 [ 176.264725][ T5841] ? vhost_net_open+0x10d/0x450 [ 176.269599][ T5841] vhost_net_open+0x10d/0x450 [ 176.274287][ T5841] ? vhost_net_ioctl+0x1350/0x1350 [ 176.279425][ T5841] misc_open+0x31f/0x390 [ 176.283686][ T5841] chrdev_open+0x585/0x5f0 [ 176.288270][ T5841] ? cd_forget+0x160/0x160 [ 176.292716][ T5841] ? fsnotify_perm+0x3a7/0x560 [ 176.297497][ T5841] ? cd_forget+0x160/0x160 [ 176.301942][ T5841] do_dentry_open+0x7f7/0xf90 [ 176.306625][ T5841] ? vfs_open+0x2b/0x80 [ 176.310917][ T5841] path_openat+0x2718/0x2fb0 [ 176.315624][ T5841] ? __kasan_slab_alloc+0xa9/0xc0 [ 176.320813][ T5841] ? do_filp_open+0x400/0x400 [ 176.326534][ T5841] do_filp_open+0x1df/0x400 [ 176.331085][ T5841] ? vfs_tmpfile+0x300/0x300 [ 176.335831][ T5841] ? _raw_spin_unlock+0x24/0x40 [ 176.340720][ T5841] ? alloc_fd+0x59e/0x650 [ 176.345066][ T5841] do_sys_openat2+0x14b/0x500 [ 176.349753][ T5841] ? __lock_acquire+0x7b50/0x7b50 [ 176.354788][ T5841] ? do_sys_open+0xe0/0xe0 [ 176.359205][ T5841] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 176.365217][ T5841] ? lock_chain_count+0x20/0x20 [ 176.370163][ T5841] __x64_sys_openat+0x135/0x160 [ 176.375022][ T5841] do_syscall_64+0x4c/0xa0 [ 176.379437][ T5841] ? clear_bhb_loop+0x30/0x80 [ 176.384117][ T5841] ? clear_bhb_loop+0x30/0x80 [ 176.388791][ T5841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.394688][ T5841] RIP: 0033:0x7f59abe38159 [ 176.399109][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.418909][ T5841] RSP: 002b:00007f59aa090028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.427516][ T5841] RAX: ffffffffffffffda RBX: 00007f59ac0bffa0 RCX: 00007f59abe38159 [ 176.435507][ T5841] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 176.443490][ T5841] RBP: 00007f59abecf024 R08: 0000000000000000 R09: 0000000000000000 [ 176.451486][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.459476][ T5841] R13: 00007f59ac0c0038 R14: 00007f59ac0bffa0 R15: 00007fffd5f9a3b8 [ 176.467497][ T5841] [ 177.460439][ T5865] loop2: detected capacity change from 0 to 256 [ 177.537703][ T5865] FAT-fs (loop2): Directory bread(block 1285) failed [ 177.699715][ T5865] FAT-fs (loop2): Directory bread(block 1286) failed [ 177.767145][ T5865] FAT-fs (loop2): Directory bread(block 1287) failed [ 177.847781][ T5865] FAT-fs (loop2): Directory bread(block 1288) failed [ 177.904736][ T5877] vivid-001: disconnect [ 178.102841][ T5881] overlayfs: failed to resolve './file0': -2 [ 178.119581][ T5877] vivid-001: reconnect [ 178.574170][ T5887] FAULT_INJECTION: forcing a failure. [ 178.574170][ T5887] name failslab, interval 1, probability 0, space 0, times 0 [ 178.694014][ T5887] CPU: 0 PID: 5887 Comm: syz.6.434 Not tainted syzkaller #0 [ 178.701353][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.711470][ T5887] Call Trace: [ 178.714877][ T5887] [ 178.717826][ T5887] dump_stack_lvl+0x188/0x250 [ 178.722528][ T5887] ? show_regs_print_info+0x20/0x20 [ 178.727869][ T5887] ? load_image+0x410/0x410 [ 178.732397][ T5887] ? __might_sleep+0xf0/0xf0 [ 178.736989][ T5887] ? __lock_acquire+0x7b50/0x7b50 [ 178.742029][ T5887] should_fail+0x383/0x4b0 [ 178.746492][ T5887] should_failslab+0x5/0x20 [ 178.751141][ T5887] slab_pre_alloc_hook+0x51/0xc0 [ 178.756133][ T5887] ? getname_flags+0xb7/0x4f0 [ 178.761024][ T5887] kmem_cache_alloc+0x3d/0x280 [ 178.765810][ T5887] getname_flags+0xb7/0x4f0 [ 178.770347][ T5887] __x64_sys_unlinkat+0xaa/0xe0 [ 178.775238][ T5887] do_syscall_64+0x4c/0xa0 [ 178.779708][ T5887] ? clear_bhb_loop+0x30/0x80 [ 178.784409][ T5887] ? clear_bhb_loop+0x30/0x80 [ 178.789104][ T5887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.795221][ T5887] RIP: 0033:0x7f63492db159 [ 178.799769][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.819580][ T5887] RSP: 002b:00007f6347512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 178.828311][ T5887] RAX: ffffffffffffffda RBX: 00007f6349563090 RCX: 00007f63492db159 [ 178.836307][ T5887] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000004 [ 178.844340][ T5887] RBP: 00007f6349372024 R08: 0000000000000000 R09: 0000000000000000 [ 178.852331][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.860486][ T5887] R13: 00007f6349563128 R14: 00007f6349563090 R15: 00007ffdc7c541b8 [ 178.868492][ T5887] [ 178.885675][ T5894] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 180.855845][ T5933] vivid-001: disconnect [ 180.902908][ T5933] vivid-001: reconnect [ 180.997056][ T5935] overlayfs: failed to resolve './file0': -2 [ 181.199349][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.207193][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.031799][ T5943] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 182.105359][ T5941] loop5: detected capacity change from 0 to 256 [ 182.114684][ T5941] FAT-fs (loop5): Unrecognized mount option "shortname=winmt" or missing value [ 182.316130][ T5948] FAULT_INJECTION: forcing a failure. [ 182.316130][ T5948] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 182.329746][ T5948] CPU: 0 PID: 5948 Comm: syz.6.453 Not tainted syzkaller #0 [ 182.337039][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.347093][ T5948] Call Trace: [ 182.350389][ T5948] [ 182.353443][ T5948] dump_stack_lvl+0x188/0x250 [ 182.358172][ T5948] ? show_regs_print_info+0x20/0x20 [ 182.363391][ T5948] ? load_image+0x410/0x410 [ 182.367928][ T5948] should_fail+0x383/0x4b0 [ 182.372361][ T5948] prepare_alloc_pages+0x1e3/0x5b0 [ 182.377487][ T5948] __alloc_pages+0x11b/0x480 [ 182.382091][ T5948] ? zone_statistics+0x170/0x170 [ 182.387040][ T5948] ? rcu_lock_acquire+0x30/0x30 [ 182.391894][ T5948] ? alloc_pages+0x452/0x560 [ 182.396494][ T5948] __get_free_pages+0x8/0x30 [ 182.401090][ T5948] __tlb_remove_page_size+0x1f2/0x3f0 [ 182.407106][ T5948] unmap_page_range+0xfcf/0x2410 [ 182.412097][ T5948] unmap_vmas+0x131/0x250 [ 182.416523][ T5948] ? unmap_page_range+0x2410/0x2410 [ 182.421726][ T5948] ? __mutex_lock_common+0x435/0x2400 [ 182.427199][ T5948] ? exit_mm_release+0x16/0x30 [ 182.431974][ T5948] exit_mmap+0x3b9/0x640 [ 182.436242][ T5948] ? vm_brk+0x20/0x20 [ 182.440253][ T5948] ? uprobe_clear_state+0x2f6/0x460 [ 182.445472][ T5948] __mmput+0x115/0x390 [ 182.449569][ T5948] exit_mm+0x632/0x7b0 [ 182.453642][ T5948] ? perf_pmu_migrate_context+0xb70/0xb70 [ 182.459372][ T5948] ? do_exit+0x2110/0x2110 [ 182.463796][ T5948] ? __ia32_sys_timer_delete+0x40/0x40 [ 182.469258][ T5948] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 182.474728][ T5948] ? tty_audit_exit+0x149/0x1f0 [ 182.479586][ T5948] do_exit+0x5b8/0x2110 [ 182.483750][ T5948] ? put_task_struct+0x80/0x80 [ 182.488516][ T5948] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 182.494508][ T5948] ? _raw_spin_lock_irq+0xb7/0xf0 [ 182.499532][ T5948] do_group_exit+0x12c/0x2f0 [ 182.504140][ T5948] ? lockdep_hardirqs_on+0x94/0x140 [ 182.509346][ T5948] get_signal+0x7eb/0x12e0 [ 182.513870][ T5948] arch_do_signal_or_restart+0xe6/0x12a0 [ 182.519551][ T5948] ? futex_exit_release+0x1c0/0x1c0 [ 182.524754][ T5948] ? get_sigframe_size+0x10/0x10 [ 182.529695][ T5948] ? __context_tracking_exit+0x4c/0x80 [ 182.535173][ T5948] ? exit_to_user_mode_loop+0x3b/0x130 [ 182.540735][ T5948] exit_to_user_mode_loop+0x9e/0x130 [ 182.546021][ T5948] exit_to_user_mode_prepare+0xee/0x180 [ 182.551565][ T5948] syscall_exit_to_user_mode+0x16/0x40 [ 182.557028][ T5948] do_syscall_64+0x58/0xa0 [ 182.561456][ T5948] ? clear_bhb_loop+0x30/0x80 [ 182.566130][ T5948] ? clear_bhb_loop+0x30/0x80 [ 182.570817][ T5948] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.576915][ T5948] RIP: 0033:0x7f63492db159 [ 182.581343][ T5948] Code: Unable to access opcode bytes at RIP 0x7f63492db12f. [ 182.588717][ T5948] RSP: 002b:00007f63475330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.597139][ T5948] RAX: 0000000000000001 RBX: 00007f6349562fa8 RCX: 00007f63492db159 [ 182.605257][ T5948] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6349562fac [ 182.613247][ T5948] RBP: 00007f6349562fa0 R08: 00100615297c17b2 R09: 0000000000000000 [ 182.621235][ T5948] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 182.629222][ T5948] R13: 00007f6349563038 R14: 00007ffdc7c540d0 R15: 00007ffdc7c541b8 [ 182.637240][ T5948] [ 183.225060][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.348409][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.422909][ T5961] vivid-001: disconnect [ 183.433212][ T5961] vivid-001: reconnect [ 183.544433][ T5963] overlayfs: failed to resolve './file0': -2 [ 183.712193][ T5965] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.822878][ T5897] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.838899][ T5897] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.849836][ T5897] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.862773][ T5897] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.018481][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.442'. [ 185.048761][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.097870][ T5897] syz.7.437 (5897) used greatest stack depth: 19472 bytes left [ 185.127704][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.171431][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.208800][ T4199] Bluetooth: hci0: link tx timeout [ 185.214766][ T4199] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.275759][ T5920] team0: Unable to change to the same mode the team is in [ 185.357100][ T5965] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 185.422347][ T5967] sch_tbf: burst 7725 is lower than device lo mtu (65550) ! [ 185.675536][ T5995] xt_hashlimit: size too large, truncated to 1048576 [ 185.704129][ T5990] loop1: detected capacity change from 0 to 4096 [ 185.780396][ T5990] EXT4-fs (loop1): Test dummy encryption mode enabled [ 185.990276][ T6002] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.031504][ T5990] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 186.216651][ T5990] INFO: trying to register non-static key. [ 186.222500][ T5990] The code is fine but needs lockdep annotation, or maybe [ 186.229765][ T5990] you didn't initialize this object before use? [ 186.236021][ T5990] turning off the locking correctness validator. [ 186.242342][ T5990] CPU: 0 PID: 5990 Comm: syz.1.470 Not tainted syzkaller #0 [ 186.249624][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.259701][ T5990] Call Trace: [ 186.262982][ T5990] [ 186.265914][ T5990] dump_stack_lvl+0x188/0x250 [ 186.270597][ T5990] ? show_regs_print_info+0x20/0x20 [ 186.275815][ T5990] ? load_image+0x410/0x410 [ 186.280319][ T5990] ? cpumask_next+0xb3/0xd0 [ 186.284830][ T5990] assign_lock_key+0x1ec/0x200 [ 186.289596][ T5990] ? SOFTIRQ_verbose+0x10/0x10 [ 186.294378][ T5990] ? mark_lock+0x94/0x320 [ 186.298706][ T5990] register_lock_class+0x21d/0x880 [ 186.303842][ T5990] ? is_dynamic_key+0x1f0/0x1f0 [ 186.308712][ T5990] __lock_acquire+0x16f/0x7b50 [ 186.313509][ T5990] ? verify_lock_unused+0x140/0x140 [ 186.318866][ T5990] ? __rwlock_init+0x140/0x140 [ 186.323648][ T5990] ? lockdep_hardirqs_on+0x94/0x140 [ 186.328859][ T5990] ? verify_lock_unused+0x140/0x140 [ 186.334078][ T5990] ? __might_sleep+0xf0/0xf0 [ 186.338781][ T5990] ? __might_fault+0xb7/0x110 [ 186.343480][ T5990] lock_acquire+0x19e/0x400 [ 186.347995][ T5990] ? gsmld_write+0x57/0x120 [ 186.352508][ T5990] ? __might_fault+0xb3/0x110 [ 186.357199][ T5990] ? read_lock_is_recursive+0x10/0x10 [ 186.362578][ T5990] ? _copy_from_iter+0x36f/0x1160 [ 186.367606][ T5990] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 186.373074][ T5990] ? lockdep_hardirqs_off+0x70/0x100 [ 186.378372][ T5990] _raw_spin_lock_irqsave+0xb0/0x100 [ 186.383684][ T5990] ? gsmld_write+0x57/0x120 [ 186.388213][ T5990] ? _raw_spin_lock+0x40/0x40 [ 186.392898][ T5990] ? __virt_addr_valid+0x3c6/0x470 [ 186.398087][ T5990] gsmld_write+0x57/0x120 [ 186.402589][ T5990] file_tty_write+0x50c/0x8a0 [ 186.407359][ T5990] ? gsmld_read+0x10/0x10 [ 186.411732][ T5990] do_iter_readv_writev+0x47d/0x5f0 [ 186.416948][ T5990] ? aa_path_link+0x8a0/0x8a0 [ 186.421637][ T5990] ? generic_file_rw_checks+0x280/0x280 [ 186.427197][ T5990] ? common_file_perm+0x171/0x1c0 [ 186.432233][ T5990] ? fsnotify_perm+0x5d/0x560 [ 186.436949][ T5990] ? security_file_permission+0x75/0xa0 [ 186.442513][ T5990] do_iter_write+0x1f8/0x7a0 [ 186.447129][ T5990] ? import_iovec+0x6f/0xa0 [ 186.451641][ T5990] do_writev+0x281/0x480 [ 186.455906][ T5990] ? do_readv+0x460/0x460 [ 186.460360][ T5990] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.466368][ T5990] ? lock_chain_count+0x20/0x20 [ 186.471247][ T5990] ? lockdep_hardirqs_on+0x94/0x140 [ 186.476493][ T5990] do_syscall_64+0x4c/0xa0 [ 186.480921][ T5990] ? clear_bhb_loop+0x30/0x80 [ 186.485615][ T5990] ? clear_bhb_loop+0x30/0x80 [ 186.490299][ T5990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.496221][ T5990] RIP: 0033:0x7f6892b9e159 [ 186.500660][ T5990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.520273][ T5990] RSP: 002b:00007f6890df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 186.528693][ T5990] RAX: ffffffffffffffda RBX: 00007f6892e25fa0 RCX: 00007f6892b9e159 [ 186.536857][ T5990] RDX: 0000000000000001 RSI: 0000200000001480 RDI: 0000000000000004 [ 186.544973][ T5990] RBP: 00007f6892c35024 R08: 0000000000000000 R09: 0000000000000000 [ 186.553032][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.561124][ T5990] R13: 00007f6892e26038 R14: 00007f6892e25fa0 R15: 00007ffeb264f468 [ 186.569132][ T5990] [ 186.572201][ T5990] [U] [ 186.574987][ T5990] [U] [ 186.577677][ T5990] [U] 馄lDj6zjQ