last executing test programs: 20.22913894s ago: executing program 3 (id=399): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r3, r6, 0x25, 0x4, @val=@tcx={@void, @value=r4}}, 0x1c) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r7, 0xc138fd06, 0x0) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r9}, 0x0, 0x0, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r10, 0xc0109207, 0xffffffffffffffff) 14.701180176s ago: executing program 3 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000010000000800000040"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x6, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 14.261159148s ago: executing program 3 (id=442): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2ab4d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 13.918464365s ago: executing program 3 (id=445): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) munlock(&(0x7f000086b000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 9.012408267s ago: executing program 2 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='reiserfs\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x22, 0x0, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x84000000, 0x12d5c, 0x12d5c}}, 0x44) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 7.971738663s ago: executing program 2 (id=468): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4084, 0xff4) 5.957150313s ago: executing program 1 (id=475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x0, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xdec1, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x8, 0x101, 0x80, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x8, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x8, 0x8, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xed6, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x4007, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x75, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x4, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x20000080, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1e17]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x28}) 5.611533101s ago: executing program 0 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20401, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random=' \x00'}) 5.097129774s ago: executing program 1 (id=478): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1418, 0x1, 0x10000000, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c040) 5.078749594s ago: executing program 0 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='reiserfs\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x22, 0x0, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x84000000, 0x12d5c, 0x12d5c}}, 0x44) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 4.84951297s ago: executing program 1 (id=480): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000680)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0xa}}, 0x20) 3.940657152s ago: executing program 0 (id=481): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8000}}, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xcecaf306}, 0x1c) listen(r0, 0x5) syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') 3.66389569s ago: executing program 1 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pS \x00'}, 0x20) 3.563961732s ago: executing program 2 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000405}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x14) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x94, 0x0, 0x0, 0x10001}, {0x6, 0x0, 0x4}]}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$kcm(0x10, 0x2, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0xc6, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f0000000000)={0x612, 0x3}) sendfile(r5, r4, 0x0, 0x20fffe82) 3.485226994s ago: executing program 1 (id=485): symlinkat(0x0, 0xffffffffffffff9c, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffc, 0x4020010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r4, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r3, &(0x7f0000000200)='p', 0x8200, 0x600}]) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) 2.869438849s ago: executing program 0 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f0000001040)=""/4100, 0x1004}, {&(0x7f0000000580)=""/151, 0x97}], 0x4}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, 0x0) 2.337315942s ago: executing program 2 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') read$FUSE(r3, &(0x7f0000001280)={0x2020}, 0x2020) 2.131907577s ago: executing program 3 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20401, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random=' \x00'}) 1.649127609s ago: executing program 1 (id=490): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfe, 0x28b, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@restrict, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0xa}, 0x28) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, 0x0) 1.399327715s ago: executing program 0 (id=491): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) recvmmsg(r0, 0x0, 0x0, 0x161, 0x0) shutdown(r0, 0x1) 1.322817547s ago: executing program 2 (id=492): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000300), 0x200000, &(0x7f0000000380)={'trans=unix,', {[{@access_user}, {@fscache}, {@cache_readahead}, {@version_9p2000}], [{@permit_directio}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@fowner_lt={'fowner<', r1}}, {@audit}, {@uid_gt={'uid>', 0xee01}}]}}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x50, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_FLOW={0x8, 0xb, 0x2}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 1.2052052s ago: executing program 0 (id=493): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000680)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0xa}}, 0x20) 1.2038895s ago: executing program 3 (id=494): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4084, 0xff4) 1.200998411s ago: executing program 4 (id=495): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 692.986033ms ago: executing program 2 (id=496): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8000}}, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xcecaf306}, 0x1c) listen(r0, 0x5) syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') 573.073646ms ago: executing program 4 (id=497): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) 526.931827ms ago: executing program 4 (id=498): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e57513"], 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 420.66253ms ago: executing program 4 (id=499): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890c, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\x00\x00\x00\x00\x00lapb0') 280.417963ms ago: executing program 4 (id=500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0xeeee8000, 0x2000, 0xb, 0xad, 0x3, 0x4, 0x7c, 0x7, 0x0, 0x2b, 0x9}, {0x2, 0x30000, 0xf, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x9, 0x80}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0x22, 0x0, 0xa, 0x0, 0x5, 0xb}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0xd, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x30000, 0x6000, 0xb, 0x7c, 0x2, 0x24, 0x7f, 0xaf, 0x80, 0xc, 0x8, 0x3d}, {0xd000, 0x100002, 0x3, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x3}, {0x5000, 0x3000, 0x3, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x4, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x3]}) 0s ago: executing program 4 (id=501): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 56.061215][ T4173] cgroup: Unknown subsys name 'net' [ 56.168087][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.408873][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.701040][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 58.825018][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.856975][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 58.865890][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 58.874662][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 58.885109][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.892442][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.901340][ T4186] device bridge_slave_0 entered promiscuous mode [ 58.914650][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.922126][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.930056][ T4186] device bridge_slave_1 entered promiscuous mode [ 58.965450][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.005137][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.056144][ T4186] team0: Port device team_slave_0 added [ 59.073711][ T4186] team0: Port device team_slave_1 added [ 59.111744][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.119087][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.126912][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.138176][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.145534][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.153359][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.202403][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.209375][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.235498][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.247499][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.254834][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.263205][ T4196] device bridge_slave_0 entered promiscuous mode [ 59.274294][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.282066][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.290253][ T4193] device bridge_slave_0 entered promiscuous mode [ 59.298926][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.308713][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.315781][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.342065][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.355956][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.363154][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.371275][ T4196] device bridge_slave_1 entered promiscuous mode [ 59.378367][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.385827][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.393776][ T4198] device bridge_slave_0 entered promiscuous mode [ 59.401915][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.409101][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.417244][ T4193] device bridge_slave_1 entered promiscuous mode [ 59.425879][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.457851][ T4185] team0: Port device team_slave_0 added [ 59.464401][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.471828][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.479739][ T4198] device bridge_slave_1 entered promiscuous mode [ 59.506682][ T4185] team0: Port device team_slave_1 added [ 59.526020][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.536730][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.574724][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.585544][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.603351][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.613495][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.620490][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.646520][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.661131][ T4186] device hsr_slave_0 entered promiscuous mode [ 59.668001][ T4186] device hsr_slave_1 entered promiscuous mode [ 59.676331][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.704288][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.711493][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.737564][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.765060][ T4193] team0: Port device team_slave_0 added [ 59.773301][ T4193] team0: Port device team_slave_1 added [ 59.789071][ T4196] team0: Port device team_slave_0 added [ 59.814056][ T4196] team0: Port device team_slave_1 added [ 59.839241][ T4198] team0: Port device team_slave_0 added [ 59.868264][ T4198] team0: Port device team_slave_1 added [ 59.874668][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.882181][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.910024][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.922394][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.929376][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.955827][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.986738][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.993932][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.021698][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.033271][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.040654][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.066850][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.080477][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.087621][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.095000][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.102858][ T4185] Cannot create hsr debugfs directory [ 60.119558][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.126703][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.152639][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.178018][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.185532][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.212020][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.262687][ T4193] device hsr_slave_0 entered promiscuous mode [ 60.272966][ T4193] device hsr_slave_1 entered promiscuous mode [ 60.280100][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.287754][ T4193] Cannot create hsr debugfs directory [ 60.339104][ T4196] device hsr_slave_0 entered promiscuous mode [ 60.346161][ T4196] device hsr_slave_1 entered promiscuous mode [ 60.353553][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.361278][ T4196] Cannot create hsr debugfs directory [ 60.373666][ T4198] device hsr_slave_0 entered promiscuous mode [ 60.381494][ T4198] device hsr_slave_1 entered promiscuous mode [ 60.388350][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.398715][ T4198] Cannot create hsr debugfs directory [ 60.405082][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 60.409713][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 60.479616][ T4187] Bluetooth: hci3: command 0x0409 tx timeout [ 60.479694][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 60.485843][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 60.664054][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.682716][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.693334][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.707999][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.746862][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.760440][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.777577][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.795303][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.871366][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.904203][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.913345][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.928943][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.948379][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.982819][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.993116][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.007109][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.015683][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.026775][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.036431][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.046099][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.061614][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.075438][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.085142][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.095470][ T650] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.102791][ T650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.111771][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.131164][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.141270][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.156645][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.183046][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.195898][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.207465][ T1263] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.214782][ T1263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.236181][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.246865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.279041][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.287781][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.302346][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.340657][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.349451][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.360898][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.370144][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.378725][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.387662][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.394900][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.403632][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.412504][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.424684][ T1263] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.431818][ T1263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.439706][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.447630][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.456665][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.465558][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.494750][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.510731][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.522960][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.534986][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.544313][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.553527][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.562859][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.588346][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.598992][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.607079][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.616896][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.626281][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.635923][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.645593][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.653852][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.662420][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.678578][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.696031][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.715630][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.729130][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.743534][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.753802][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.762852][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.771887][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.778973][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.786904][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.796747][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.809707][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.817540][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.839313][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.856721][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.866007][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.873144][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.881430][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.889310][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.927465][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.937662][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.952332][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.988377][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.006361][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.015645][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.026034][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.035626][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.044325][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.052299][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.060547][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.069067][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.077907][ T1263] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.085285][ T1263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.095517][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.103137][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.110776][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.118730][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.159964][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.168626][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.178980][ T650] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.186127][ T650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.194111][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.207250][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.215115][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.224334][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.233049][ T650] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.240228][ T650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.248629][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.257575][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.266701][ T650] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.273799][ T650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.282154][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.291432][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.300723][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.309812][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.318264][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.356941][ T4186] device veth0_vlan entered promiscuous mode [ 62.367837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.377441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.387492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.397479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.408251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.417006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.425758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.435279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.444522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.453109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.462273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.470508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.480594][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.488985][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 62.490221][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 62.496171][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.511164][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.521991][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.536368][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.544930][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.555113][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.563481][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 62.569611][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 62.575477][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 62.576382][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.604875][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.619076][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.630486][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.639143][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.654480][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.665005][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.684691][ T4186] device veth1_vlan entered promiscuous mode [ 62.700407][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.710417][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.718893][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.728566][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.737936][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.747116][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.755757][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.766216][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.783639][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.796713][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.833000][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.845487][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.856146][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.872068][ T4186] device veth0_macvtap entered promiscuous mode [ 62.897355][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.912925][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.927386][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.938531][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.951567][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.959245][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.973530][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.986930][ T4185] device veth0_vlan entered promiscuous mode [ 62.999384][ T4186] device veth1_macvtap entered promiscuous mode [ 63.022409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.033774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.045653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.063985][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.076896][ T4185] device veth1_vlan entered promiscuous mode [ 63.105602][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.139366][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.166528][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.175954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.185055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.193442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.203039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.212806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.221993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.231161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.238724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.267001][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.278465][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.288996][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.298857][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.308003][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.324417][ T4193] device veth0_vlan entered promiscuous mode [ 63.334662][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.343921][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.354008][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.363809][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.376997][ T4185] device veth0_macvtap entered promiscuous mode [ 63.398744][ T4193] device veth1_vlan entered promiscuous mode [ 63.408199][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.416238][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.425312][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.433992][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.443767][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.452563][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.461596][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.470939][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.489118][ T4185] device veth1_macvtap entered promiscuous mode [ 63.548500][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.561744][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.573622][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.585399][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.596145][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.611629][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.625926][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.635381][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.644529][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.653596][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.664715][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.674042][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.682944][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.691706][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.701125][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.709826][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.718435][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.727182][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.735974][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.744584][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.786606][ T4198] device veth0_vlan entered promiscuous mode [ 63.801632][ T4193] device veth0_macvtap entered promiscuous mode [ 63.817883][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.826742][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.835504][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.845346][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.856585][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.881477][ T4198] device veth1_vlan entered promiscuous mode [ 63.890703][ T4193] device veth1_macvtap entered promiscuous mode [ 63.903366][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.930339][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.939403][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.951320][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.960260][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.981192][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.989011][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.022366][ T4196] device veth0_vlan entered promiscuous mode [ 64.035459][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.046486][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.052722][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.054878][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.064851][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.083033][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.096384][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.114363][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.124076][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.132905][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.144050][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.155288][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.165928][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.176577][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.191717][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.221534][ T650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.231736][ T650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.245279][ T4198] device veth0_macvtap entered promiscuous mode [ 64.276008][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.290896][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.308628][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.317701][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.330428][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.339439][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.348976][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.357953][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.367115][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.376114][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.395083][ T4198] device veth1_macvtap entered promiscuous mode [ 64.416634][ T4196] device veth1_vlan entered promiscuous mode [ 64.445434][ T650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.464910][ T650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.476811][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.489418][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.501221][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.511988][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.522010][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.533002][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.544278][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.560674][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 64.563529][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 64.612643][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.626244][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.635851][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.645374][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 64.650161][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 64.652165][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 64.664329][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.672534][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.682364][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.710101][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.728059][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.744385][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.755808][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.766021][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.776916][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.788329][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.817066][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.867228][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.931149][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.954644][ T4277] loop3: detected capacity change from 0 to 1024 [ 64.978380][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.993730][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.003344][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.132021][ T650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.141208][ T4277] ======================================================= [ 65.141208][ T4277] WARNING: The mand mount option has been deprecated and [ 65.141208][ T4277] and is ignored by this kernel. Remove the mand [ 65.141208][ T4277] option from the mount to silence this warning. [ 65.141208][ T4277] ======================================================= [ 65.182624][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.183857][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.219050][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.234042][ T4277] EXT4-fs (loop3): Ignoring removed oldalloc option [ 65.243169][ T4277] EXT4-fs (loop3): Ignoring removed orlov option [ 65.255719][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.264177][ T650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.418569][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.535789][ T4277] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 65.598845][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.758054][ T4277] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.938605][ T4196] device veth0_macvtap entered promiscuous mode [ 65.949872][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.044180][ T4196] device veth1_macvtap entered promiscuous mode [ 66.267267][ T4304] mmap: syz.3.6 (4304) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 66.392875][ T4307] loop1: detected capacity change from 0 to 256 [ 66.573901][ T4307] FAT-fs (loop1): Unrecognized mount option "shortname=winmt" or missing value [ 66.619029][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.640427][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 66.640539][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 66.650146][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.703989][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.720300][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 66.729796][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 66.741325][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.749861][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 66.752221][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.769027][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.778910][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.789373][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.803800][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.909367][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.947492][ T4317] loop0: detected capacity change from 0 to 512 [ 67.016049][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.088301][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.119888][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.141667][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.148886][ T4317] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #2: block 3: comm syz.0.10: lblock 0 mapped to illegal pblock 3 (length 1) [ 67.152427][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.178160][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.189580][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.202305][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.214046][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.541502][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.650565][ T4317] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.10: error -117 reading directory block [ 67.782773][ T4317] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 67.807563][ T4317] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,auto_da_alloc=0x0000000000000004,jqfmt=vfsv1,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback. [ 67.830494][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.831554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.903343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.067692][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.085170][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.099668][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.108772][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.135361][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.256060][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.528025][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.560958][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.652332][ T4335] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 68.721921][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.791522][ T4335] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 68.885679][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.900401][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.118068][ T650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.126817][ T4358] device syzkaller0 entered promiscuous mode [ 69.157356][ T650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.282970][ T4364] tipc: Started in network mode [ 69.300081][ T4364] tipc: Node identity 2ae43eebf049, cluster identity 4711 [ 69.319007][ T4364] tipc: Enabled bearer , priority 0 [ 69.337057][ T4355] tipc: Resetting bearer [ 69.428903][ T4355] tipc: Disabling bearer [ 69.901453][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.017201][ T650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.069695][ T650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.237538][ T4382] Zero length message leads to an empty skb [ 70.278778][ T4365] device wlan1 entered promiscuous mode [ 70.307286][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.434144][ T4390] netlink: 'syz.3.25': attribute type 29 has an invalid length. [ 70.492610][ T4394] netlink: 'syz.0.26': attribute type 15 has an invalid length. [ 71.140404][ T4390] netlink: 'syz.3.25': attribute type 29 has an invalid length. [ 71.210056][ T4392] netlink: 'syz.3.25': attribute type 29 has an invalid length. [ 71.314063][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.339581][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.363801][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.370951][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.393672][ T4403] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.402938][ T4403] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.411816][ T4403] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.420562][ T4403] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.481559][ T4412] Trying to write to read-only block-device nullb0 [ 71.504060][ T4405] netlink: 'syz.2.27': attribute type 15 has an invalid length. [ 71.602022][ T4409] FAULT_INJECTION: forcing a failure. [ 71.602022][ T4409] name failslab, interval 1, probability 0, space 0, times 1 [ 71.619777][ T4409] CPU: 1 PID: 4409 Comm: syz.0.30 Not tainted syzkaller #0 [ 71.627004][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.637350][ T4409] Call Trace: [ 71.640648][ T4409] [ 71.643597][ T4409] dump_stack_lvl+0x188/0x250 [ 71.644543][ T4421] Trying to write to read-only block-device nullb0 [ 71.648520][ T4409] ? show_regs_print_info+0x20/0x20 [ 71.660498][ T4409] ? load_image+0x410/0x410 [ 71.665122][ T4409] ? __might_sleep+0xf0/0xf0 [ 71.669734][ T4409] ? __lock_acquire+0x7b50/0x7b50 [ 71.674785][ T4409] should_fail+0x383/0x4b0 [ 71.678304][ T4421] Trying to write to read-only block-device nullb0 [ 71.679216][ T4409] should_failslab+0x5/0x20 [ 71.690205][ T4409] slab_pre_alloc_hook+0x51/0xc0 [ 71.695160][ T4409] ? __d_alloc+0x27/0x6d0 [ 71.699512][ T4409] kmem_cache_alloc+0x3d/0x280 [ 71.702970][ T4421] Trying to write to read-only block-device nullb0 [ 71.704563][ T4409] __d_alloc+0x27/0x6d0 [ 71.704593][ T4409] ? d_alloc_pseudo+0xe/0x70 [ 71.720038][ T4409] d_alloc_pseudo+0x19/0x70 [ 71.724560][ T4409] alloc_file_pseudo+0xe0/0x200 [ 71.725126][ T4421] Trying to write to read-only block-device nullb0 [ 71.729439][ T4409] ? alloc_empty_file_noaccount+0x80/0x80 [ 71.729472][ T4409] ? __lock_acquire+0x7b50/0x7b50 [ 71.729491][ T4409] ? __local_bh_enable_ip+0x136/0x1c0 [ 71.729507][ T4409] ? _local_bh_enable+0xa0/0xa0 [ 71.729526][ T4409] anon_inode_getfile+0xc1/0x1a0 [ 71.729547][ T4409] bpf_link_prime+0x125/0x270 [ 71.729567][ T4409] bpf_xdp_link_attach+0x1f2/0x480 [ 71.729596][ T4409] ? dev_xdp_prog_id+0xe0/0xe0 [ 71.729626][ T4409] link_create+0x4e4/0x660 [ 71.729650][ T4409] __sys_bpf+0x645/0x6f0 [ 71.766162][ T4421] Trying to write to read-only block-device nullb0 [ 71.766667][ T4409] ? bpf_link_show_fdinfo+0x380/0x380 [ 71.766709][ T4409] __x64_sys_bpf+0x78/0x90 [ 71.794834][ T4421] Trying to write to read-only block-device nullb0 [ 71.797009][ T4409] do_syscall_64+0x4c/0xa0 [ 71.797036][ T4409] ? clear_bhb_loop+0x30/0x80 [ 71.797054][ T4409] ? clear_bhb_loop+0x30/0x80 [ 71.806177][ T4421] Trying to write to read-only block-device nullb0 [ 71.807950][ T4409] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.807988][ T4409] RIP: 0033:0x7fd032fd5159 [ 71.815873][ T4421] Trying to write to read-only block-device nullb0 [ 71.817034][ T4409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.817050][ T4409] RSP: 002b:00007fd03122d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.837439][ T4421] Trying to write to read-only block-device nullb0 [ 71.838485][ T4409] RAX: ffffffffffffffda RBX: 00007fd03325cfa0 RCX: 00007fd032fd5159 [ 71.838503][ T4409] RDX: 000000000000001c RSI: 0000200000000300 RDI: 000000000000001c [ 71.838514][ T4409] RBP: 00007fd03306c03b R08: 0000000000000000 R09: 0000000000000000 [ 71.904007][ T4409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.912163][ T4409] R13: 00007fd03325d038 R14: 00007fd03325cfa0 R15: 00007ffc9c9e0198 [ 71.920148][ T4409] [ 72.040512][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 72.071062][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 72.421162][ T4432] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 72.814272][ T4430] netlink: 'syz.2.35': attribute type 2 has an invalid length. [ 74.117344][ T4456] device syzkaller0 entered promiscuous mode [ 75.080539][ T4475] netlink: 'syz.0.49': attribute type 2 has an invalid length. [ 76.343609][ T4516] ubi0: attaching mtd0 [ 76.355582][ T4516] ubi0: scanning is finished [ 76.360253][ T4516] ubi0: empty MTD device detected [ 76.858998][ T4516] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 77.000165][ T4524] loop3: detected capacity change from 0 to 1024 [ 77.108071][ T4528] netlink: 'syz.1.67': attribute type 2 has an invalid length. [ 77.160331][ T4524] EXT4-fs (loop3): Ignoring removed oldalloc option [ 77.202647][ T4524] EXT4-fs (loop3): Ignoring removed orlov option [ 77.355217][ T4524] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 77.406179][ T4524] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.638448][ T4567] loop3: detected capacity change from 0 to 1024 [ 79.681618][ T4577] netlink: 'syz.2.87': attribute type 29 has an invalid length. [ 79.719880][ T4577] netlink: 'syz.2.87': attribute type 29 has an invalid length. [ 79.736523][ T4580] netlink: 'syz.2.87': attribute type 29 has an invalid length. [ 79.776156][ T4577] netlink: 'syz.2.87': attribute type 29 has an invalid length. [ 79.849603][ T4567] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 79.917126][ T4567] EXT4-fs (loop3): Ignoring removed oldalloc option [ 80.011545][ T4587] netlink: 'syz.2.91': attribute type 2 has an invalid length. [ 80.038449][ T4588] loop0: detected capacity change from 0 to 1024 [ 80.070805][ T4567] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,oldalloc,noblock_validity,delalloc,grpjquota=,,errors=continue. Quota mode: none. [ 80.275322][ T4567] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.412460][ T4588] EXT4-fs (loop0): Ignoring removed oldalloc option [ 80.521322][ T4602] IPVS: ip_vs_add_dest(): server weight less than zero [ 80.590180][ T26] audit: type=1326 audit(1788947478.524:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf61147159 code=0x7ffc0000 [ 80.936109][ T4588] EXT4-fs (loop0): Ignoring removed orlov option [ 81.050067][ T26] audit: type=1326 audit(1788947478.524:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf61147159 code=0x7ffc0000 [ 81.115998][ T26] audit: type=1326 audit(1788947478.524:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf6110798e code=0x7ffc0000 [ 81.146403][ T26] audit: type=1326 audit(1788947478.533:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf61147159 code=0x7ffc0000 [ 81.191254][ T26] audit: type=1326 audit(1788947478.533:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf61147159 code=0x7ffc0000 [ 81.278726][ T26] audit: type=1326 audit(1788947478.533:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7faf61147159 code=0x7ffc0000 [ 81.320273][ T26] audit: type=1326 audit(1788947478.533:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf61147159 code=0x7ffc0000 [ 81.368436][ T26] audit: type=1326 audit(1788947478.533:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf61147159 code=0x7ffc0000 [ 81.405037][ T4588] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 81.422337][ T26] audit: type=1326 audit(1788947478.533:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf61147159 code=0x7ffc0000 [ 81.453470][ T26] audit: type=1326 audit(1788947478.533:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4599 comm="syz.4.93" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf61147159 code=0x7ffc0000 [ 81.537532][ T4588] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.768884][ T4614] tipc: Started in network mode [ 81.923531][ T4614] tipc: Node identity ae58e01e2f7a, cluster identity 4711 [ 81.967722][ T4614] tipc: Enabled bearer , priority 0 [ 82.419766][ T4611] tipc: Disabling bearer [ 82.889846][ T4632] netlink: 'syz.4.104': attribute type 2 has an invalid length. [ 83.128621][ T4633] loop3: detected capacity change from 0 to 1024 [ 83.398292][ T4633] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 83.405507][ T4633] EXT4-fs (loop3): Ignoring removed oldalloc option [ 83.676377][ T4633] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,oldalloc,noblock_validity,delalloc,grpjquota=,,errors=continue. Quota mode: none. [ 83.811463][ T4633] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.469956][ T4669] netlink: 'syz.0.117': attribute type 2 has an invalid length. [ 84.913278][ T4684] loop2: detected capacity change from 0 to 1024 [ 85.046782][ T4697] loop3: detected capacity change from 0 to 256 [ 85.283426][ T4684] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 85.370092][ T4684] EXT4-fs (loop2): Ignoring removed oldalloc option [ 85.630875][ T4684] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,oldalloc,noblock_validity,delalloc,grpjquota=,,errors=continue. Quota mode: none. [ 85.907993][ T4684] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.991061][ T4711] netlink: 'syz.4.132': attribute type 9 has an invalid length. [ 86.155272][ T4715] netlink: 'syz.4.135': attribute type 2 has an invalid length. [ 86.319963][ T4717] device syzkaller0 entered promiscuous mode [ 86.943026][ T4738] loop1: detected capacity change from 0 to 1024 [ 87.157605][ T4738] EXT4-fs (loop1): Ignoring removed oldalloc option [ 87.209401][ T4745] loop2: detected capacity change from 0 to 256 [ 87.237065][ T4738] EXT4-fs (loop1): Ignoring removed orlov option [ 87.367318][ T4738] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 87.490573][ T4738] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.540667][ T1346] cfg80211: failed to load regulatory.db [ 89.267495][ T4769] netlink: 'syz.0.149': attribute type 2 has an invalid length. [ 89.616219][ T4782] device syzkaller0 entered promiscuous mode [ 89.943354][ T4791] loop4: detected capacity change from 0 to 256 [ 91.203730][ T4810] netlink: 'syz.1.163': attribute type 13 has an invalid length. [ 91.223688][ T4810] netlink: 'syz.1.163': attribute type 12 has an invalid length. [ 91.593314][ T4822] tipc: Enabled bearer , priority 0 [ 91.689569][ T4820] tipc: Disabling bearer [ 91.710816][ T4827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 93.545412][ T4855] tipc: Started in network mode [ 93.602568][ T4855] tipc: Node identity 324e2076b05f, cluster identity 4711 [ 93.800531][ T4855] tipc: Enabled bearer , priority 0 [ 94.196380][ T4853] tipc: Disabling bearer [ 94.312577][ T4860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.182'. [ 95.249790][ T4870] loop2: detected capacity change from 0 to 1024 [ 95.872097][ T4870] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.465389][ T4888] 9pnet: p9_fd_create_unix (4888): problem connecting socket: ./file1: -111 [ 96.716434][ T4894] loop0: detected capacity change from 0 to 1024 [ 97.008536][ T4897] ubi0: attaching mtd0 [ 97.017832][ T4897] ubi0: scanning is finished [ 97.154726][ T4897] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 97.483073][ T4894] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 97.641848][ T4906] netlink: 'syz.1.196': attribute type 2 has an invalid length. [ 99.527161][ T4937] loop2: detected capacity change from 0 to 1024 [ 99.950646][ T4942] ubi0: attaching mtd0 [ 99.960250][ T4942] ubi0: scanning is finished [ 100.032543][ T4942] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 100.151587][ T4937] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.592818][ T4952] 9pnet: p9_fd_create_unix (4952): problem connecting socket: ./file1: -111 [ 101.136806][ T4958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 102.013380][ T4967] netlink: 'syz.4.212': attribute type 2 has an invalid length. [ 103.223009][ T4989] loop2: detected capacity change from 0 to 1024 [ 103.301787][ T4993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.221'. [ 103.543685][ T4989] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.913388][ T5003] 9pnet: p9_fd_create_unix (5003): problem connecting socket: ./file1: -111 [ 104.364393][ T5005] loop3: detected capacity change from 0 to 16 [ 104.530701][ T5005] erofs: (device loop3): mounted with root inode @ nid 36. [ 104.613163][ T5010] device syzkaller0 entered promiscuous mode [ 105.042819][ T5005] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 105.223659][ T5005] erofs: (device loop3): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 105.255118][ T5005] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 105.403703][ T5020] ubi0: attaching mtd0 [ 105.409132][ T5020] ubi0: scanning is finished [ 105.483310][ T5020] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 105.582002][ T5005] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 105.677314][ T5005] erofs: (device loop3): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 105.727195][ T5005] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 105.763124][ T5032] device syzkaller0 entered promiscuous mode [ 105.780265][ T5005] erofs: (device loop3): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 105.811755][ T5005] attempt to access beyond end of device [ 105.811755][ T5005] loop3: rw=524288, want=32, limit=16 [ 106.163674][ T5046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.236'. [ 106.263203][ T5045] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.326333][ T5050] loop3: detected capacity change from 0 to 1024 [ 106.633418][ T5050] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.103885][ T5066] 9pnet: p9_fd_create_unix (5066): problem connecting socket: ./file1: -111 [ 107.530696][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 107.530709][ T26] audit: type=1326 audit(1788947503.817:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c2b9159 code=0x7ffc0000 [ 107.656500][ T26] audit: type=1326 audit(1788947503.864:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c2b9159 code=0x7ffc0000 [ 107.688728][ T26] audit: type=1326 audit(1788947503.864:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c2b9159 code=0x7ffc0000 [ 107.811112][ T5076] ubi0: attaching mtd0 [ 107.820005][ T5076] ubi0: scanning is finished [ 107.908410][ T5073] device syzkaller0 entered promiscuous mode [ 107.986144][ T5076] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 108.099853][ T26] audit: type=1326 audit(1788947503.864:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c2b9159 code=0x7ffc0000 [ 108.286352][ T26] audit: type=1326 audit(1788947503.910:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c2b9159 code=0x7ffc0000 [ 108.339282][ T5083] device syzkaller0 entered promiscuous mode [ 108.370179][ T26] audit: type=1326 audit(1788947503.910:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c2b9159 code=0x7ffc0000 [ 108.468508][ T26] audit: type=1326 audit(1788947503.864:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c2b9159 code=0x7ffc0000 [ 108.551329][ T26] audit: type=1326 audit(1788947503.920:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f216c2b9159 code=0x7ffc0000 [ 108.590926][ T5092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.250'. [ 108.611940][ T5094] loop1: detected capacity change from 0 to 128 [ 108.658463][ T26] audit: type=1326 audit(1788947503.920:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c2b9159 code=0x7ffc0000 [ 108.757189][ T26] audit: type=1326 audit(1788947503.920:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c2b9159 code=0x7ffc0000 [ 108.889452][ T5100] loop3: detected capacity change from 0 to 1024 [ 108.983843][ T5100] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.654216][ T5110] 9pnet: p9_fd_create_unix (5110): problem connecting socket: ./file1: -111 [ 110.189672][ T5122] ubi0: attaching mtd0 [ 110.198654][ T5122] ubi0: scanning is finished [ 110.336209][ T5121] FAULT_INJECTION: forcing a failure. [ 110.336209][ T5121] name failslab, interval 1, probability 0, space 0, times 0 [ 110.369819][ T5122] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 110.558965][ T5121] CPU: 0 PID: 5121 Comm: syz.0.258 Not tainted syzkaller #0 [ 110.566390][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.576550][ T5121] Call Trace: [ 110.579861][ T5121] [ 110.582801][ T5121] dump_stack_lvl+0x188/0x250 [ 110.587582][ T5121] ? show_regs_print_info+0x20/0x20 [ 110.592795][ T5121] ? load_image+0x410/0x410 [ 110.597403][ T5121] ? __lock_acquire+0x7b50/0x7b50 [ 110.602573][ T5121] ? rcu_lock_acquire+0x30/0x30 [ 110.607805][ T5121] should_fail+0x383/0x4b0 [ 110.612336][ T5121] should_failslab+0x5/0x20 [ 110.617032][ T5121] slab_pre_alloc_hook+0x51/0xc0 [ 110.622019][ T5121] ? security_file_alloc+0x30/0x110 [ 110.627243][ T5121] kmem_cache_alloc+0x3d/0x280 [ 110.632034][ T5121] ? rcu_is_watching+0x11/0xa0 [ 110.636827][ T5121] security_file_alloc+0x30/0x110 [ 110.642166][ T5121] __alloc_file+0xc2/0x240 [ 110.646661][ T5121] alloc_empty_file+0x90/0x180 [ 110.651487][ T5121] path_openat+0x11c/0x2fb0 [ 110.656025][ T5121] ? __lock_acquire+0x13dc/0x7b50 [ 110.661267][ T5121] ? stack_trace_snprint+0xe0/0xe0 [ 110.662573][ T5132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.261'. [ 110.666406][ T5121] ? verify_lock_unused+0x140/0x140 [ 110.680594][ T5121] ? verify_lock_unused+0x140/0x140 [ 110.685828][ T5121] ? __kasan_slab_alloc+0xa9/0xc0 [ 110.690875][ T5121] ? __kasan_slab_alloc+0x92/0xc0 [ 110.695919][ T5121] ? slab_post_alloc_hook+0x4c/0x380 [ 110.701403][ T5121] ? verify_lock_unused+0x140/0x140 [ 110.706767][ T5121] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.713042][ T5121] ? do_filp_open+0x400/0x400 [ 110.718030][ T5121] do_filp_open+0x1df/0x400 [ 110.722645][ T5121] ? vfs_tmpfile+0x300/0x300 [ 110.727268][ T5121] ? _raw_spin_unlock+0x24/0x40 [ 110.732129][ T5121] ? alloc_fd+0x59e/0x650 [ 110.736578][ T5121] do_sys_openat2+0x14b/0x500 [ 110.741632][ T5121] ? __lock_acquire+0x7b50/0x7b50 [ 110.746931][ T5121] ? do_sys_open+0xe0/0xe0 [ 110.751348][ T5121] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.757385][ T5121] ? lock_chain_count+0x20/0x20 [ 110.762437][ T5121] __x64_sys_openat+0x135/0x160 [ 110.767316][ T5121] do_syscall_64+0x4c/0xa0 [ 110.771866][ T5121] ? clear_bhb_loop+0x30/0x80 [ 110.776604][ T5121] ? clear_bhb_loop+0x30/0x80 [ 110.781307][ T5121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.787227][ T5121] RIP: 0033:0x7fd032f9598e [ 110.791877][ T5121] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.811600][ T5121] RSP: 002b:00007fd03122cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.820260][ T5121] RAX: ffffffffffffffda RBX: 00007fd03122d6c0 RCX: 00007fd032f9598e [ 110.828249][ T5121] RDX: 0000000000000000 RSI: 00007fd03122cf90 RDI: ffffffffffffff9c [ 110.836392][ T5121] RBP: 00007fd03306c03b R08: 0000000000000000 R09: 0000000000000000 [ 110.844918][ T5121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.852981][ T5121] R13: 00007fd03325d038 R14: 00007fd03325cfa0 R15: 00007ffc9c9e0198 [ 110.860970][ T5121] [ 111.040838][ T5141] device syzkaller0 entered promiscuous mode [ 111.265727][ T5148] FAULT_INJECTION: forcing a failure. [ 111.265727][ T5148] name failslab, interval 1, probability 0, space 0, times 0 [ 111.314776][ T5148] CPU: 1 PID: 5148 Comm: syz.2.266 Not tainted syzkaller #0 [ 111.322204][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.332361][ T5148] Call Trace: [ 111.335656][ T5148] [ 111.338602][ T5148] dump_stack_lvl+0x188/0x250 [ 111.343302][ T5148] ? show_regs_print_info+0x20/0x20 [ 111.348516][ T5148] ? load_image+0x410/0x410 [ 111.353036][ T5148] ? __might_sleep+0xf0/0xf0 [ 111.357729][ T5148] ? __lock_acquire+0x7b50/0x7b50 [ 111.362816][ T5148] should_fail+0x383/0x4b0 [ 111.367254][ T5148] should_failslab+0x5/0x20 [ 111.371766][ T5148] slab_pre_alloc_hook+0x51/0xc0 [ 111.376739][ T5148] kmem_cache_alloc_trace+0x47/0x290 [ 111.382130][ T5148] ? __list_lru_init+0x535/0xac0 [ 111.387175][ T5148] __list_lru_init+0x535/0xac0 [ 111.392121][ T5148] alloc_super+0x787/0x970 [ 111.396655][ T5148] ? kill_litter_super+0xa0/0xa0 [ 111.401617][ T5148] sget_fc+0x2d4/0x6f0 [ 111.405874][ T5148] ? kill_litter_super+0xa0/0xa0 [ 111.410920][ T5148] ? ramfs_get_tree+0x20/0x20 [ 111.415784][ T5148] get_tree_nodev+0x26/0x160 [ 111.420393][ T5148] vfs_get_tree+0x88/0x270 [ 111.425002][ T5148] vfs_fsconfig_locked+0x22f/0x400 [ 111.430230][ T5148] __se_sys_fsconfig+0x69e/0x7e0 [ 111.435403][ T5148] ? __x64_sys_fsconfig+0xc0/0xc0 [ 111.440473][ T5148] ? lockdep_hardirqs_on+0x94/0x140 [ 111.445944][ T5148] ? __x64_sys_fsconfig+0x1c/0xc0 [ 111.451272][ T5148] do_syscall_64+0x4c/0xa0 [ 111.455714][ T5148] ? clear_bhb_loop+0x30/0x80 [ 111.460640][ T5148] ? clear_bhb_loop+0x30/0x80 [ 111.465361][ T5148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.471292][ T5148] RIP: 0033:0x7f5d96c97159 [ 111.475925][ T5148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.496861][ T5148] RSP: 002b:00007f5d94eef028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 111.505466][ T5148] RAX: ffffffffffffffda RBX: 00007f5d96f1efa0 RCX: 00007f5d96c97159 [ 111.513549][ T5148] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 111.521761][ T5148] RBP: 00007f5d96d2e03b R08: 0000000000000000 R09: 0000000000000000 [ 111.529840][ T5148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.537917][ T5148] R13: 00007f5d96f1f038 R14: 00007f5d96f1efa0 R15: 00007ffffd23a8c8 [ 111.546042][ T5148] [ 112.606142][ T5172] ubi0: attaching mtd0 [ 112.615157][ T5172] ubi0: scanning is finished [ 113.201905][ T5172] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 114.455965][ T5188] loop2: detected capacity change from 0 to 256 [ 114.611159][ T5188] FAT-fs (loop2): Directory bread(block 1285) failed [ 114.645672][ T5188] FAT-fs (loop2): Directory bread(block 1286) failed [ 114.652428][ T5188] FAT-fs (loop2): Directory bread(block 1287) failed [ 114.721288][ T5188] FAT-fs (loop2): Directory bread(block 1288) failed [ 116.321046][ T5215] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.885877][ T5237] device syzkaller0 entered promiscuous mode [ 118.171726][ T5258] netlink: 'syz.4.300': attribute type 2 has an invalid length. [ 119.146056][ T5259] device syzkaller0 entered promiscuous mode [ 119.345124][ T5281] device syzkaller0 entered promiscuous mode [ 121.311898][ T5318] loop2: detected capacity change from 0 to 1024 [ 121.402142][ T5318] EXT4-fs (loop2): Ignoring removed oldalloc option [ 121.409187][ T5318] EXT4-fs (loop2): Ignoring removed orlov option [ 121.558005][ T5318] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 121.648782][ T5318] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.683193][ T5331] netlink: 'syz.1.322': attribute type 2 has an invalid length. [ 122.893668][ T5355] FAULT_INJECTION: forcing a failure. [ 122.893668][ T5355] name failslab, interval 1, probability 0, space 0, times 0 [ 122.956879][ T5360] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 122.981734][ T5355] CPU: 1 PID: 5355 Comm: syz.4.327 Not tainted syzkaller #0 [ 122.989169][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.999413][ T5355] Call Trace: [ 123.002705][ T5355] [ 123.005648][ T5355] dump_stack_lvl+0x188/0x250 [ 123.010438][ T5355] ? show_regs_print_info+0x20/0x20 [ 123.015649][ T5355] ? load_image+0x410/0x410 [ 123.020172][ T5355] ? __might_sleep+0xf0/0xf0 [ 123.024770][ T5355] ? __lock_acquire+0x7b50/0x7b50 [ 123.029806][ T5355] should_fail+0x383/0x4b0 [ 123.034230][ T5355] should_failslab+0x5/0x20 [ 123.038779][ T5355] slab_pre_alloc_hook+0x51/0xc0 [ 123.043835][ T5355] ? skb_clone+0x1bd/0x350 [ 123.048267][ T5355] kmem_cache_alloc+0x3d/0x280 [ 123.053028][ T5355] skb_clone+0x1bd/0x350 [ 123.057433][ T5355] ? netlink_trim+0x133/0x220 [ 123.062107][ T5355] netlink_trim+0x14a/0x220 [ 123.066651][ T5355] netlink_broadcast_filtered+0x69/0x1170 [ 123.072388][ T5355] nlmsg_notify+0xdf/0x190 [ 123.076818][ T5355] tc_ctl_action+0x83a/0xba0 [ 123.081411][ T5355] ? tcf_free_cookie_rcu+0x40/0x40 [ 123.086601][ T5355] ? __dev_queue_xmit+0x195d/0x2e50 [ 123.091792][ T5355] ? ___sys_sendmsg+0x236/0x2e0 [ 123.096664][ T5355] ? tcf_free_cookie_rcu+0x40/0x40 [ 123.101776][ T5355] rtnetlink_rcv_msg+0x7f1/0xf10 [ 123.106753][ T5355] ? lock_chain_count+0x20/0x20 [ 123.111692][ T5355] ? rtnetlink_bind+0x80/0x80 [ 123.116361][ T5355] ? __local_bh_enable_ip+0x136/0x1c0 [ 123.121720][ T5355] ? lockdep_hardirqs_on+0x94/0x140 [ 123.126904][ T5355] ? __local_bh_enable_ip+0x136/0x1c0 [ 123.132267][ T5355] ? _local_bh_enable+0xa0/0xa0 [ 123.137113][ T5355] ? __dev_queue_xmit+0x1b64/0x2e50 [ 123.142420][ T5355] ? dev_queue_xmit+0x20/0x20 [ 123.147082][ T5355] ? memcpy+0x3c/0x60 [ 123.151055][ T5355] ? __copy_skb_header+0x3ba/0x4f0 [ 123.156160][ T5355] netlink_rcv_skb+0x1e9/0x430 [ 123.160917][ T5355] ? rtnetlink_bind+0x80/0x80 [ 123.165586][ T5355] ? netlink_ack+0xb10/0xb10 [ 123.170185][ T5355] netlink_unicast+0x78f/0x940 [ 123.174946][ T5355] netlink_sendmsg+0x8ba/0xbe0 [ 123.179723][ T5355] ? netlink_getsockopt+0x570/0x570 [ 123.184993][ T5355] ? aa_sock_msg_perm+0x94/0x150 [ 123.189964][ T5355] ? apparmor_socket_sendmsg+0x88/0x230 [ 123.195500][ T5355] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 123.200774][ T5355] ? security_socket_sendmsg+0x7c/0xa0 [ 123.206224][ T5355] ? netlink_getsockopt+0x570/0x570 [ 123.211414][ T5355] ____sys_sendmsg+0x5be/0x8f0 [ 123.216174][ T5355] ? __sys_sendmsg_sock+0x30/0x30 [ 123.221193][ T5355] ? import_iovec+0x6f/0xa0 [ 123.225687][ T5355] ___sys_sendmsg+0x236/0x2e0 [ 123.230362][ T5355] ? __sys_sendmsg+0x290/0x290 [ 123.235146][ T5355] __se_sys_sendmsg+0x1b7/0x2a0 [ 123.239987][ T5355] ? __x64_sys_sendmsg+0x80/0x80 [ 123.245000][ T5355] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.251159][ T5355] ? lockdep_hardirqs_on+0x94/0x140 [ 123.256355][ T5355] do_syscall_64+0x4c/0xa0 [ 123.260765][ T5355] ? clear_bhb_loop+0x30/0x80 [ 123.265431][ T5355] ? clear_bhb_loop+0x30/0x80 [ 123.270113][ T5355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.276023][ T5355] RIP: 0033:0x7faf61147159 [ 123.280525][ T5355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.300216][ T5355] RSP: 002b:00007faf5f39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.308716][ T5355] RAX: ffffffffffffffda RBX: 00007faf613cefa0 RCX: 00007faf61147159 [ 123.316770][ T5355] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 123.324876][ T5355] RBP: 00007faf611de03b R08: 0000000000000000 R09: 0000000000000000 [ 123.332971][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.340941][ T5355] R13: 00007faf613cf038 R14: 00007faf613cefa0 R15: 00007ffcb73e9488 [ 123.348951][ T5355] [ 123.356609][ T5361] FAULT_INJECTION: forcing a failure. [ 123.356609][ T5361] name failslab, interval 1, probability 0, space 0, times 0 [ 123.420548][ T5361] CPU: 1 PID: 5361 Comm: syz.0.329 Not tainted syzkaller #0 [ 123.428168][ T5361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.438547][ T5361] Call Trace: [ 123.441841][ T5361] [ 123.444782][ T5361] dump_stack_lvl+0x188/0x250 [ 123.449484][ T5361] ? show_regs_print_info+0x20/0x20 [ 123.454718][ T5361] ? load_image+0x410/0x410 [ 123.459250][ T5361] ? __might_sleep+0xf0/0xf0 [ 123.463854][ T5361] ? __lock_acquire+0x7b50/0x7b50 [ 123.468922][ T5361] should_fail+0x383/0x4b0 [ 123.473452][ T5361] should_failslab+0x5/0x20 [ 123.478077][ T5361] slab_pre_alloc_hook+0x51/0xc0 [ 123.483027][ T5361] ? __kernfs_new_node+0xe3/0x6b0 [ 123.488070][ T5361] kmem_cache_alloc+0x3d/0x280 [ 123.492854][ T5361] __kernfs_new_node+0xe3/0x6b0 [ 123.497729][ T5361] ? kernfs_new_node+0x250/0x250 [ 123.502690][ T5361] ? sysfs_do_create_link_sd+0x75/0x110 [ 123.508252][ T5361] kernfs_new_node+0x148/0x250 [ 123.513038][ T5361] kernfs_create_link+0xa3/0x200 [ 123.517989][ T5361] sysfs_do_create_link_sd+0x83/0x110 [ 123.523377][ T5361] device_add+0x83b/0x1050 [ 123.527813][ T5361] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 123.533293][ T5361] wakeup_source_register+0x15f/0x230 [ 123.538689][ T5361] ep_insert+0xe66/0x1990 [ 123.543083][ T5361] ? ep_loop_check+0x180/0x180 [ 123.548037][ T5361] ? __lock_acquire+0x7b50/0x7b50 [ 123.553078][ T5361] ? bpf_lsm_capable+0x5/0x10 [ 123.557765][ T5361] do_epoll_ctl+0x88b/0xeb0 [ 123.562285][ T5361] __x64_sys_epoll_ctl+0x162/0x1b0 [ 123.567403][ T5361] ? ep_modify+0xa80/0xa80 [ 123.571825][ T5361] ? lockdep_hardirqs_on+0x94/0x140 [ 123.577124][ T5361] do_syscall_64+0x4c/0xa0 [ 123.581558][ T5361] ? clear_bhb_loop+0x30/0x80 [ 123.586235][ T5361] ? clear_bhb_loop+0x30/0x80 [ 123.590934][ T5361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.596843][ T5361] RIP: 0033:0x7fd032fd5159 [ 123.601276][ T5361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.620908][ T5361] RSP: 002b:00007fd03122d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 123.629340][ T5361] RAX: ffffffffffffffda RBX: 00007fd03325cfa0 RCX: 00007fd032fd5159 [ 123.637322][ T5361] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 123.645301][ T5361] RBP: 00007fd03306c03b R08: 0000000000000000 R09: 0000000000000000 [ 123.653285][ T5361] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.661275][ T5361] R13: 00007fd03325d038 R14: 00007fd03325cfa0 R15: 00007ffc9c9e0198 [ 123.669293][ T5361] [ 124.398465][ T5388] loop0: detected capacity change from 0 to 128 [ 124.740531][ T5399] netlink: 'syz.1.339': attribute type 2 has an invalid length. [ 126.680049][ T5442] netlink: 'syz.1.351': attribute type 2 has an invalid length. [ 126.987008][ T5454] loop3: detected capacity change from 0 to 16 [ 127.364432][ T5454] erofs: (device loop3): mounted with root inode @ nid 36. [ 127.716796][ T5454] attempt to access beyond end of device [ 127.716796][ T5454] loop3: rw=524288, want=48, limit=16 [ 127.739496][ T5454] attempt to access beyond end of device [ 127.739496][ T5454] loop3: rw=524288, want=40, limit=16 [ 128.588346][ T5466] process 'syz.4.357' launched './file0' with NULL argv: empty string added [ 129.162050][ T5497] netlink: 'syz.3.366': attribute type 2 has an invalid length. [ 129.415081][ T5513] FAULT_INJECTION: forcing a failure. [ 129.415081][ T5513] name failslab, interval 1, probability 0, space 0, times 0 [ 129.511725][ T5513] CPU: 0 PID: 5513 Comm: syz.4.373 Not tainted syzkaller #0 [ 129.519058][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.529220][ T5513] Call Trace: [ 129.532627][ T5513] [ 129.535599][ T5513] dump_stack_lvl+0x188/0x250 [ 129.540294][ T5513] ? show_regs_print_info+0x20/0x20 [ 129.545542][ T5513] ? load_image+0x410/0x410 [ 129.550068][ T5513] ? __might_sleep+0xf0/0xf0 [ 129.554667][ T5513] ? __lock_acquire+0x7b50/0x7b50 [ 129.559927][ T5513] ? do_dentry_open+0x7f7/0xf90 [ 129.564803][ T5513] should_fail+0x383/0x4b0 [ 129.569251][ T5513] should_failslab+0x5/0x20 [ 129.573783][ T5513] slab_pre_alloc_hook+0x51/0xc0 [ 129.578785][ T5513] kmem_cache_alloc_trace+0x47/0x290 [ 129.584204][ T5513] ? alloc_tty_struct+0xa3/0x7b0 [ 129.589467][ T5513] alloc_tty_struct+0xa3/0x7b0 [ 129.594282][ T5513] ? tty_init_dev+0x470/0x470 [ 129.599128][ T5513] pty_common_install+0x16a/0x790 [ 129.604322][ T5513] tty_init_dev+0xbb/0x470 [ 129.608783][ T5513] ptmx_open+0xe1/0x2c0 [ 129.613100][ T5513] ? pty_start+0x140/0x140 [ 129.617651][ T5513] chrdev_open+0x585/0x5f0 [ 129.622115][ T5513] ? cd_forget+0x160/0x160 [ 129.626568][ T5513] ? fsnotify_perm+0x3a7/0x560 [ 129.631367][ T5513] ? cd_forget+0x160/0x160 [ 129.635820][ T5513] do_dentry_open+0x7f7/0xf90 [ 129.640540][ T5513] ? vfs_open+0x2b/0x80 [ 129.644735][ T5513] path_openat+0x2718/0x2fb0 [ 129.649375][ T5513] ? __kasan_slab_alloc+0xa9/0xc0 [ 129.654430][ T5513] ? do_filp_open+0x400/0x400 [ 129.659288][ T5513] do_filp_open+0x1df/0x400 [ 129.664140][ T5513] ? vfs_tmpfile+0x300/0x300 [ 129.669047][ T5513] ? _raw_spin_unlock+0x24/0x40 [ 129.673935][ T5513] ? alloc_fd+0x59e/0x650 [ 129.678390][ T5513] do_sys_openat2+0x14b/0x500 [ 129.683179][ T5513] ? __lock_acquire+0x7b50/0x7b50 [ 129.688317][ T5513] ? do_sys_open+0xe0/0xe0 [ 129.692753][ T5513] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 129.698848][ T5513] ? lock_chain_count+0x20/0x20 [ 129.703788][ T5513] __x64_sys_openat+0x135/0x160 [ 129.708665][ T5513] do_syscall_64+0x4c/0xa0 [ 129.713112][ T5513] ? clear_bhb_loop+0x30/0x80 [ 129.717892][ T5513] ? clear_bhb_loop+0x30/0x80 [ 129.722601][ T5513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.728519][ T5513] RIP: 0033:0x7faf61147159 [ 129.732955][ T5513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.752753][ T5513] RSP: 002b:00007faf5f39f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.762001][ T5513] RAX: ffffffffffffffda RBX: 00007faf613cefa0 RCX: 00007faf61147159 [ 129.770681][ T5513] RDX: 0000000000020000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 129.779245][ T5513] RBP: 00007faf611de03b R08: 0000000000000000 R09: 0000000000000000 [ 129.787530][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.796225][ T5513] R13: 00007faf613cf038 R14: 00007faf613cefa0 R15: 00007ffcb73e9488 [ 129.804423][ T5513] [ 129.807613][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.016595][ T5520] loop2: detected capacity change from 0 to 512 [ 130.114395][ T5520] FAT-fs (loop2): Unrecognized mount option "./tracing" or missing value [ 130.821229][ T5533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.375'. [ 131.502905][ T5546] device syzkaller0 entered promiscuous mode [ 131.857214][ T5553] netlink: 'syz.2.384': attribute type 2 has an invalid length. [ 132.173603][ T5558] program syz.4.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.602619][ T5570] loop2: detected capacity change from 0 to 512 [ 132.761460][ T5570] FAT-fs (loop2): Unrecognized mount option "./tracing" or missing value [ 133.307927][ T5573] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 133.334939][ T5573] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 133.772942][ T5593] netlink: 'syz.0.397': attribute type 2 has an invalid length. [ 134.268068][ T5612] loop0: detected capacity change from 0 to 1024 [ 134.275298][ T5610] FAULT_INJECTION: forcing a failure. [ 134.275298][ T5610] name failslab, interval 1, probability 0, space 0, times 0 [ 134.326976][ T5610] CPU: 1 PID: 5610 Comm: syz.1.402 Not tainted syzkaller #0 [ 134.334421][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.344501][ T5610] Call Trace: [ 134.347798][ T5610] [ 134.350752][ T5610] dump_stack_lvl+0x188/0x250 [ 134.355460][ T5610] ? show_regs_print_info+0x20/0x20 [ 134.360689][ T5610] ? load_image+0x410/0x410 [ 134.365223][ T5610] ? __might_sleep+0xf0/0xf0 [ 134.369834][ T5610] ? __lock_acquire+0x7b50/0x7b50 [ 134.375022][ T5610] should_fail+0x383/0x4b0 [ 134.379456][ T5610] should_failslab+0x5/0x20 [ 134.383977][ T5610] slab_pre_alloc_hook+0x51/0xc0 [ 134.389349][ T5610] ? copy_mm+0x8b6/0x13d0 [ 134.393677][ T5610] kmem_cache_alloc+0x3d/0x280 [ 134.398801][ T5610] copy_mm+0x8b6/0x13d0 [ 134.403046][ T5610] ? copy_signal+0x610/0x610 [ 134.407921][ T5610] ? __init_rwsem+0x11e/0x160 [ 134.412770][ T5610] ? copy_signal+0x501/0x610 [ 134.417379][ T5610] copy_process+0x17a7/0x3e70 [ 134.422085][ T5610] ? __pidfd_prepare+0x140/0x140 [ 134.427020][ T5610] ? verify_lock_unused+0x140/0x140 [ 134.432219][ T5610] kernel_clone+0x23f/0x990 [ 134.436813][ T5610] ? create_io_thread+0x180/0x180 [ 134.441846][ T5610] __x64_sys_clone+0x19a/0x210 [ 134.446645][ T5610] ? __ia32_sys_vfork+0x130/0x130 [ 134.451701][ T5610] ? lockdep_hardirqs_on+0x94/0x140 [ 134.457090][ T5610] do_syscall_64+0x4c/0xa0 [ 134.461748][ T5610] ? clear_bhb_loop+0x30/0x80 [ 134.466432][ T5610] ? clear_bhb_loop+0x30/0x80 [ 134.471139][ T5610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.477126][ T5610] RIP: 0033:0x7f5c4055c159 [ 134.481805][ T5610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.501790][ T5610] RSP: 002b:00007f5c3e7b3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 134.510204][ T5610] RAX: ffffffffffffffda RBX: 00007f5c407e3fa0 RCX: 00007f5c4055c159 [ 134.518175][ T5610] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 134.526450][ T5610] RBP: 00007f5c405f303b R08: 0000000000000000 R09: 0000000000000000 [ 134.534458][ T5610] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.542447][ T5610] R13: 00007f5c407e4038 R14: 00007f5c407e3fa0 R15: 00007ffcb081dcb8 [ 134.550519][ T5610] [ 134.708116][ T5612] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 135.133262][ T5627] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.153935][ T5653] pit: kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 136.200917][ T5653] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 136.220846][ T5653] pit: kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 136.242032][ T5653] pit: kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 136.257913][ T5653] pit: kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 136.275545][ T5653] pit: kvm: requested 89676 ns i8254 timer period limited to 200000 ns [ 136.295690][ T5653] pit: kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 136.746429][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.753084][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.492961][ T5677] device syzkaller0 entered promiscuous mode [ 139.409308][ T5710] netlink: 'syz.1.436': attribute type 2 has an invalid length. [ 139.967981][ T5725] loop2: detected capacity change from 0 to 1024 [ 140.058847][ T5725] EXT4-fs (loop2): Ignoring removed oldalloc option [ 140.065770][ T5725] EXT4-fs (loop2): Ignoring removed orlov option [ 140.175038][ T5725] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 140.190130][ T5725] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.916018][ T5736] loop0: detected capacity change from 0 to 256 [ 140.923723][ T5734] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.989431][ T5734] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 141.006548][ T5736] FAT-fs (loop0): Directory bread(block 1285) failed [ 141.035252][ T5736] FAT-fs (loop0): Directory bread(block 1286) failed [ 141.046540][ T5736] FAT-fs (loop0): Directory bread(block 1287) failed [ 141.055913][ T5736] FAT-fs (loop0): Directory bread(block 1288) failed [ 141.082434][ T5736] FAT-fs (loop0): Directory bread(block 1285) failed [ 141.133679][ T5736] FAT-fs (loop0): Directory bread(block 1286) failed [ 141.152077][ T5736] FAT-fs (loop0): Directory bread(block 1287) failed [ 141.166910][ T5736] FAT-fs (loop0): Directory bread(block 1288) failed [ 141.190442][ T5737] siw: device registration error -23 [ 141.593668][ T5749] loop1: detected capacity change from 0 to 1024 [ 141.641093][ T5749] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 141.669946][ T5749] EXT4-fs (loop1): Ignoring removed oldalloc option [ 141.763236][ T5749] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,oldalloc,noblock_validity,delalloc,grpjquota=,,errors=continue. Quota mode: none. [ 141.810947][ T5749] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.378924][ T5763] netlink: 'syz.4.453': attribute type 2 has an invalid length. [ 142.995237][ T5774] loop1: detected capacity change from 0 to 1024 [ 143.036379][ T5774] EXT4-fs (loop1): Ignoring removed oldalloc option [ 143.068201][ T5774] EXT4-fs (loop1): Ignoring removed orlov option [ 143.112867][ T5774] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 143.166390][ T5774] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.702226][ T5809] IPVS: ip_vs_add_dest(): server weight less than zero [ 145.751502][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 145.751792][ T26] audit: type=1326 audit(1788947539.502:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.465" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d96c97159 code=0x7ffc0000 [ 146.218173][ T26] audit: type=1326 audit(1788947539.502:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.465" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d96c97159 code=0x7ffc0000 [ 146.279444][ T5811] netlink: 'syz.4.467': attribute type 2 has an invalid length. [ 146.318804][ T26] audit: type=1326 audit(1788947539.502:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.465" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d96c5798e code=0x7ffc0000 [ 146.342796][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.418075][ T26] audit: type=1326 audit(1788947539.502:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.465" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d96c97159 code=0x7ffc0000 [ 146.443110][ T26] audit: type=1326 audit(1788947539.502:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.465" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d96c97159 code=0x7ffc0000 [ 146.527976][ T26] audit: type=1326 audit(1788947539.502:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.465" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f5d96c97159 code=0x7ffc0000 [ 146.657425][ T26] audit: type=1326 audit(1788947539.502:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.465" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d96c97159 code=0x7ffc0000 [ 146.681330][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.695988][ T26] audit: type=1326 audit(1788947539.521:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.465" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d96c97159 code=0x7ffc0000 [ 146.720092][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.745951][ T26] audit: type=1326 audit(1788947539.521:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.465" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d96c97159 code=0x7ffc0000 [ 146.770095][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.877912][ T26] audit: type=1326 audit(1788947539.521:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.465" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d96c97159 code=0x7ffc0000 [ 146.966934][ T5825] loop1: detected capacity change from 0 to 1024 [ 147.073159][ T5825] EXT4-fs (loop1): Ignoring removed oldalloc option [ 147.122051][ T5825] EXT4-fs (loop1): Ignoring removed orlov option [ 147.216200][ T5825] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 147.315326][ T5825] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.217072][ T5597] syz.3.396 (5597) used greatest stack depth: 18656 bytes left [ 149.567881][ T5858] loop1: detected capacity change from 0 to 1024 [ 149.635378][ T5859] IPVS: ip_vs_add_dest(): server weight less than zero [ 150.164129][ T5858] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 150.864569][ T5873] loop1: detected capacity change from 0 to 1024 [ 151.004694][ T5873] EXT4-fs (loop1): Ignoring removed oldalloc option [ 151.036626][ T5873] EXT4-fs (loop1): Ignoring removed orlov option [ 151.174557][ T5873] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 151.245154][ T5873] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.057499][ T5898] loop2: detected capacity change from 0 to 1024 [ 153.080111][ T5901] loop1: detected capacity change from 0 to 256 [ 153.185003][ T5903] loop0: detected capacity change from 0 to 1024 [ 153.203034][ T5898] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.522220][ T5898] 9pnet: p9_fd_create_unix (5898): problem connecting socket: ./file1: -111 [ 153.524591][ T5903] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 154.178858][ T5930] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 154.198480][ T5930] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 154.388047][ T5935] device syzkaller0 entered promiscuous mode [ 154.406199][ T5935] [ 154.408656][ T5935] ============================================ [ 154.414890][ T5935] WARNING: possible recursive locking detected [ 154.421042][ T5935] syzkaller #0 Not tainted [ 154.425450][ T5935] -------------------------------------------- [ 154.431771][ T5935] syz.4.501/5935 is trying to acquire lock: [ 154.437660][ T5935] ffff88805b5cc108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 154.446897][ T5935] [ 154.446897][ T5935] but task is already holding lock: [ 154.454385][ T5935] ffff88805b5cc108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 154.463733][ T5935] [ 154.463733][ T5935] other info that might help us debug this: [ 154.471805][ T5935] Possible unsafe locking scenario: [ 154.471805][ T5935] [ 154.479414][ T5935] CPU0 [ 154.482702][ T5935] ---- [ 154.486001][ T5935] lock(&sch->q.lock); [ 154.490158][ T5935] lock(&sch->q.lock); [ 154.494317][ T5935] [ 154.494317][ T5935] *** DEADLOCK *** [ 154.494317][ T5935] [ 154.502452][ T5935] May be due to missing lock nesting notation [ 154.502452][ T5935] [ 154.510855][ T5935] 3 locks held by syz.4.501/5935: [ 154.515964][ T5935] #0: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 154.525546][ T5935] #1: ffff88805b5cc108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 154.535306][ T5935] #2: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 154.544896][ T5935] [ 154.544896][ T5935] stack backtrace: [ 154.550787][ T5935] CPU: 0 PID: 5935 Comm: syz.4.501 Not tainted syzkaller #0 [ 154.558269][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.568331][ T5935] Call Trace: [ 154.571702][ T5935] [ 154.574634][ T5935] dump_stack_lvl+0x188/0x250 [ 154.579322][ T5935] ? show_regs_print_info+0x20/0x20 [ 154.584532][ T5935] ? load_image+0x410/0x410 [ 154.589049][ T5935] __lock_acquire+0x1247/0x7b50 [ 154.593996][ T5935] ? stack_trace_snprint+0xe0/0xe0 [ 154.599124][ T5935] ? lockdep_unlock+0x143/0x2e0 [ 154.603990][ T5935] ? verify_lock_unused+0x140/0x140 [ 154.609198][ T5935] ? add_lock_to_list+0x18d/0x280 [ 154.614236][ T5935] ? __lock_acquire+0x2844/0x7b50 [ 154.619296][ T5935] lock_acquire+0x19e/0x400 [ 154.623886][ T5935] ? __dev_queue_xmit+0xa2b/0x2e50 [ 154.629005][ T5935] ? read_lock_is_recursive+0x10/0x10 [ 154.634391][ T5935] ? rcu_read_lock_bh_held+0x76/0xf0 [ 154.639688][ T5935] ? rcu_read_lock_held+0x40/0x40 [ 154.644721][ T5935] ? mark_lock+0x94/0x320 [ 154.649078][ T5935] _raw_spin_lock+0x2a/0x40 [ 154.654293][ T5935] ? __dev_queue_xmit+0xa2b/0x2e50 [ 154.659595][ T5935] __dev_queue_xmit+0xa2b/0x2e50 [ 154.664638][ T5935] ? lock_chain_count+0x20/0x20 [ 154.669508][ T5935] ? dev_queue_xmit+0x20/0x20 [ 154.674192][ T5935] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 154.680104][ T5935] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 154.686008][ T5935] ? _raw_spin_unlock+0x40/0x40 [ 154.690872][ T5935] ? stack_trace_save+0xa6/0xf0 [ 154.695745][ T5935] ? netdev_core_pick_tx+0x300/0x300 [ 154.701041][ T5935] sch_frag_xmit_hook+0x2d8/0x1be0 [ 154.706163][ T5935] ? __kasan_slab_alloc+0xa9/0xc0 [ 154.711198][ T5935] ? __kasan_slab_alloc+0x92/0xc0 [ 154.716244][ T5935] ? slab_post_alloc_hook+0x4c/0x380 [ 154.721659][ T5935] ? kmem_cache_alloc+0x15d/0x280 [ 154.726780][ T5935] ? skb_clone+0x1bd/0x350 [ 154.731209][ T5935] ? tcf_mirred_act+0x5b0/0x1640 [ 154.736159][ T5935] ? tcf_action_exec+0x177/0x570 [ 154.741102][ T5935] ? basic_classify+0x1ae/0x2c0 [ 154.746144][ T5935] ? tcf_classify+0x218/0xad0 [ 154.750921][ T5935] ? qfq_enqueue+0x31b/0x1310 [ 154.755785][ T5935] ? dev_qdisc_enqueue+0x48/0x210 [ 154.760825][ T5935] ? __dev_queue_xmit+0xbde/0x2e50 [ 154.765947][ T5935] ? packet_sendmsg+0x3b4f/0x4de0 [ 154.770981][ T5935] ? mq_dump_class_stats+0x430/0x430 [ 154.776360][ T5935] ? do_syscall_64+0x4c/0xa0 [ 154.780953][ T5935] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.787038][ T5935] ? __copy_skb_header+0x3ba/0x4f0 [ 154.792158][ T5935] ? memcpy+0x3c/0x60 [ 154.796143][ T5935] ? __copy_skb_header+0x3ba/0x4f0 [ 154.801257][ T5935] ? __skb_clone+0x446/0x6c0 [ 154.805858][ T5935] ? skb_clone+0x1f1/0x350 [ 154.810279][ T5935] ? tcf_mirred_act+0x59a/0x1640 [ 154.815229][ T5935] tcf_mirred_act+0xc5a/0x1640 [ 154.820012][ T5935] tcf_action_exec+0x177/0x570 [ 154.824801][ T5935] basic_classify+0x1ae/0x2c0 [ 154.829497][ T5935] tcf_classify+0x218/0xad0 [ 154.834018][ T5935] qfq_enqueue+0x31b/0x1310 [ 154.838540][ T5935] ? sch_tree_lock+0x110/0x110 [ 154.843314][ T5935] ? do_raw_spin_lock+0x128/0x2f0 [ 154.848359][ T5935] ? __rwlock_init+0x140/0x140 [ 154.853142][ T5935] ? __alloc_skb+0x473/0x750 [ 154.857828][ T5935] dev_qdisc_enqueue+0x48/0x210 [ 154.862692][ T5935] __dev_queue_xmit+0xbde/0x2e50 [ 154.867655][ T5935] ? dev_queue_xmit+0x20/0x20 [ 154.872331][ T5935] ? virtio_net_hdr_to_skb+0xb8c/0x11e0 [ 154.877896][ T5935] ? packet_cached_dev_get+0x270/0x270 [ 154.883372][ T5935] ? skb_put+0x10e/0x200 [ 154.887707][ T5935] packet_sendmsg+0x3b4f/0x4de0 [ 154.892565][ T5935] ? sched_move_task+0x2c0/0x4f0 [ 154.897566][ T5935] ? aa_sk_perm+0x7dc/0x910 [ 154.902295][ T5935] ? packet_getsockopt+0x9a0/0x9a0 [ 154.907425][ T5935] ? unpack_rlimits+0x88e/0x1230 [ 154.912374][ T5935] ? apparmor_socket_sendmsg+0x88/0x230 [ 154.917931][ T5935] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 154.923226][ T5935] ? security_socket_sendmsg+0x7c/0xa0 [ 154.928693][ T5935] ? packet_getsockopt+0x9a0/0x9a0 [ 154.933823][ T5935] ____sys_sendmsg+0x5be/0x8f0 [ 154.938863][ T5935] ? __sys_sendmsg_sock+0x30/0x30 [ 154.943990][ T5935] ? import_iovec+0x6f/0xa0 [ 154.948506][ T5935] ___sys_sendmsg+0x236/0x2e0 [ 154.953197][ T5935] ? __sys_sendmsg+0x290/0x290 [ 154.957985][ T5935] __se_sys_sendmsg+0x1b7/0x2a0 [ 154.962870][ T5935] ? __x64_sys_sendmsg+0x80/0x80 [ 154.967824][ T5935] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.973825][ T5935] ? lockdep_hardirqs_on+0x94/0x140 [ 154.979036][ T5935] do_syscall_64+0x4c/0xa0 [ 154.983454][ T5935] ? clear_bhb_loop+0x30/0x80 [ 154.988131][ T5935] ? clear_bhb_loop+0x30/0x80 [ 154.992815][ T5935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.998718][ T5935] RIP: 0033:0x7faf61147159 [ 155.003327][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.023029][ T5935] RSP: 002b:00007faf5f39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.031541][ T5935] RAX: ffffffffffffffda RBX: 00007faf613cefa0 RCX: 00007faf61147159 [ 155.039610][ T5935] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 155.047676][ T5935] RBP: 00007faf611de03b R08: 0000000000000000 R09: 0000000000000000 [ 155.055686][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.063682][ T5935] R13: 00007faf613cf038 R14: 00007faf613cefa0 R15: 00007ffcb73e9488 [ 155.071922][ T5935]