last executing test programs: 2m4.368472554s ago: executing program 4 (id=232): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000400)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) 2m4.187215257s ago: executing program 4 (id=233): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000001480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000001500)="306663353a313232373ad36c06c0f16f6870f54c6efddf664f3db9ad2a8731c16f69", 0x22) 2m4.040233322s ago: executing program 4 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x64, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1003, 0x8}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}]}}]}]}]}}]}, 0x64}}, 0x880) 2m3.451804254s ago: executing program 4 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) move_mount(r1, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 2m3.314374948s ago: executing program 4 (id=240): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @local}, 0x14) 2m3.031361465s ago: executing program 4 (id=247): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x8, 0x1, 0x0, 0xc, @vifc_lcl_addr=@private=0xa010100, @private=0xa010100}, 0x10) 2m2.788795238s ago: executing program 32 (id=247): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x8, 0x1, 0x0, 0xc, @vifc_lcl_addr=@private=0xa010100, @private=0xa010100}, 0x10) 1m55.280284613s ago: executing program 3 (id=301): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027fa80a"], 0x57) close(0x3) 1m54.668860874s ago: executing program 3 (id=304): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000680)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) write(r2, &(0x7f00000006c0)="540000001200014000"/23, 0x17) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000840), 0x2) r4 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\x00\x00\x00\x00/\x98|\x84\"xMW\x8d\xceM\x94j`23fP}\xf5/\x8e\x909`\xbd`\xf6(bg\x10\x00U\xf9!\x1b\x8b\x1b\xef\xfeZ9\xcd[\x9emA\xb6\xfbm&\xa9\x06!\xe5-\xa1\xddx\xf4z\xf4\xcc\xef\r\xae\xa3\x88\x1c+\xf9\xfe\xb8Sx\xfa\x83Ab\xee\xdd\x81r\x9ef\x17\x17\xd6\xff\al\x80\xa9Y\x1f;\v\xebJ+\x03\xd97\x16M\xef\xfcm\xe8*\x81_h\x03\x88\x17E\xfe\xc3F\xf3\x00@WR\xcf', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000940)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000980)=0x7) socket$kcm(0x29, 0x7, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff0007058102000200070582"], 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) syz_usb_ep_write(r7, 0x82, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550e, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111, 0x9}}, 0x20) 1m52.633001212s ago: executing program 0 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x12, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 1m52.303229054s ago: executing program 1 (id=321): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x1, 0xc, &(0x7f0000002940)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000029c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a00)={r1, 0x0, 0xe, 0x0, &(0x7f0000002a80)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m52.153869767s ago: executing program 0 (id=323): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000005c0)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000640)=0x4) pwritev(r0, &(0x7f0000000680)=[{&(0x7f00000006c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003090000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000740)=[{&(0x7f00000018c0)="002145000014fc0a0000400600000a0000010a00000200504050000000020000ffff601003852fb3650201010101", 0x2e}], 0x1, 0xffffffff, 0x0) 1m52.071323776s ago: executing program 1 (id=324): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027fa80a"], 0x57) close(0x3) 1m52.059570444s ago: executing program 2 (id=325): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x804818, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x57e, &(0x7f0000000b40)="$eJzs3V9v094ZwPHHpV2jTOqmMSFUFTiUTSpSCU4KQRE385yT1JDYke2g9gpVNEUVKUyUSWtvWG/YJm0vgl3uRewdod3urj/52GlDmz9AS1v6+36qchz72Oc5bnQe3MbHAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHKrtl20pOH57RU1nFsNg+bhy2zvYyvk7mfFiHZFrORbcjm5nq66/tvDzdeSf+ZlLn01J7mkyMnuL6/9+vHVyYne/iMC/ir//sYjbe/svlrrdjtvTyuQC+jG9PBtde17UeA1nbpWXhSoSrls31+uRarmNXS0GsW6qdxQO3EQqgX3ripWKktKF1aDtl+vOg3dW/noXsm2y+pJoaWdMAr8+08KkbvsNRqeXzd1ks1JnUfJG/GpF6tYO02lNja7naVxHUgqFb+kUmlcpZJdKhWLpVKx/LDy8JFtTx5bYR8hx2qc3psWP6ZTHL2Bk5nI8r80xBNf2rIiauCXK1UJJZDmkO2ZXv7//X09st3+/N/L8tcPN8+Kyf8301c3h+X/IbGc3de27MiuvJI16UpXOvL23CM626+6aPHFk0gC8aQpjlmjsjVKKlKWstjyXJalNpX8EGviSUO0RLIqkcSizTvKlVC0OBJLIKEoWRBX7oqSolSkIkuiREtBViWQtvhSl6o45igbsmnO+5Ioa1iMB5WKQ7uR773vOlIa0VvyP07uNIdv4ET2e/kfAAAAAABcWpb57fuU+b5hXte8hrbPOywAAAAAAHCKzF/+55LCfDrrhlhc/wMAAAAAcNlY5h47S0Tycitd2hDL3C7FLwEAAAAAALgkzN//byaFmQPlllgH06Vw/Q8AAAAAwCXx97Fz7Eetaeu//5MwnLL2Wiu/s7bM3LzO1pV0vytHjxjXZq2Z7CCmKKfF5KSr56xcWulgEsxPWbExLg7rMADnIIC/fk0AVyfln3I7rXN7PS3Xsy2/SlvJ17yGLrhB43FRHGdmItYr8Z9fb/5FTPf/4TdnrJxsdjuFF2+66yaWveQoe1vZBIrH5lEcEcs7M9+CueciN5FV7+/xlLkRI2s3b8nGZrdjt1ams6rOVrbTxOctvp8Z0eYHmU9rzWcz3uZ7W9I2c0mbxcKw3mdRFE/Y8w9yJ61zZ+FOWgyIojQuilJ/FIPPxcmjWBoXxdIJowCA87LRl4VkYP4/lne/YZQ7kt2TYe8Lsrt8ZXb/IAtpnYVZM7BOzg4Y0e1xI7p9wuz2n2PPQBqWY5N2/3Ukq35Mdvg4tN2oUbKSU3jl3daf5Nr2zu69za21l52Xndel0lLZfmDbD0syZbqRFeQeAMAA/c/YsQbl/2kZ8RSe/f0kdz/Irqr3jl5VZxnvNwcfKSjIC3kjXVmXRXO3gfnEwcD/d+T7PoawOOaqNW/SZPqEl8URV3W/MHc59I5bGlm3F8P/91Nn8bMAAOCszI/Jw9b4p/BZi2Ouuz/P5aOvjvN9T2sb6+Vpnw0AAH4edPjJysd/s8LQaz0vVipFJ17WKgzcpyr0qnWtPD/Wobvs+HWtWmEQB27QSBaeeVUdqajdagVhrGpBqFpB5K2Y6QNV9uj3SDcdP/bcqNXQTqSVG/ix48aq6kWuarX/2PCiZR2anaOWdr2a5zqxF/gqCtqhqwtKRVr3VfSq2o+9mpcs+qoVek0nzKlnQaPd1KqqIzf0WnGQHrDXlufXgrBpDls475MNAMAFsb2z+2qt2+28HbHwhy+oM2phYMO5M+8qAADIjMnSAAAAAAAAAAAAAAAAAAAAAADgAvjGW/p+hAW5GGGc30Jvht/v3lZvKujz7zILp7Ywduh4/10HJgDf3U8BAAD//x2+Upc=") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x18d042, 0x15) sendmmsg$unix(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}}, {{&(0x7f0000000ac0)=@file={0x1, './file2/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x604e054) 1m51.933030424s ago: executing program 2 (id=326): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000001100)=ANY=[@ANYBLOB="410401"], 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m51.850087079s ago: executing program 0 (id=327): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x2a0471a, &(0x7f0000000640)={[{}]}, 0x82, 0x499, &(0x7f0000000680)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pipe2$9p(&(0x7f0000000d80), 0x0) 1m51.818413516s ago: executing program 1 (id=328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m51.666610732s ago: executing program 2 (id=329): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1000040, &(0x7f0000000200), 0x1, 0x5a3, &(0x7f00000006c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r0 = open(&(0x7f00000005c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000d40)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000e00)={0x1, &(0x7f0000000e40)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./mnt\x00', 0x1ff) 1m51.463388875s ago: executing program 3 (id=330): socket$inet6(0xa, 0x3, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r1, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000080)={0x0, 0xfffffffb}, 0x8) listen(r1, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000200), 0x4000000000001f2, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000300)={0x1}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x40, r5, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r7, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580020007"], 0x4a) 1m51.368048336s ago: executing program 0 (id=331): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="190000000400000004000000020f0000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380), &(0x7f00000003c0)=@tcp6=r1, 0x1}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000640)=ANY=[], 0x0) 1m50.963467267s ago: executing program 1 (id=332): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x10, &(0x7f0000001240)={[{@nolazytime}]}, 0x5, 0x7e5, &(0x7f0000001280)="$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") r0 = creat(&(0x7f0000001a80)='./file1\x00', 0x4) truncate(&(0x7f0000001ac0)='./file1\x00', 0x2fffffd) io_setup(0x202, &(0x7f0000001b00)=0x0) io_submit(r1, 0x3b, &(0x7f0000001b40)=[&(0x7f0000001b80)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001bc0), 0x4000, 0x2000}]) pwritev2(0xffffffffffffffff, &(0x7f00000011c0)=[{&(0x7f0000001200)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 1m50.868591041s ago: executing program 2 (id=333): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2f}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000540)='GPL\x00', 0x5, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 1m50.801967976s ago: executing program 0 (id=334): sendmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="a80000000000000004010000020000009100766244016fc09d20a20b9f6b376fdae08500f316ed56c17f960e84b77cd2f75a9bb94cfd6e31db4f27db136b8404e58cfa9885f6f92a4d7073464d4476ef4d3560ac59f177494b4109a2aee228040213960b37791b468826d348f760ad9b0c31fa55e1b684521bffa6239d8f8aa570bc4283f51622f77f580934e41b7bfab280f335171b173fe7a98536b696ea9d3bf6d50000000000900000000000000014010000060000006e2b06b1e19921d73b675f0aec2af236c0c6c6fca727282390e623558afbd6a3b2e6a76de224b6cf3f65390d5041c002eed93811"], 0x158}, 0x24000010) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000b40), 0x4) sendmsg$kcm(r0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019", 0x3d}, {&(0x7f0000000d00)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000dc0)="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", 0x1a1}, {&(0x7f0000000f80)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 1m50.631107667s ago: executing program 1 (id=335): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r0, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 1m50.629887453s ago: executing program 0 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./trace\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000003bc0)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000003c00)=':', 0x1) 1m50.602561018s ago: executing program 2 (id=337): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) close(0x3) 1m50.600894006s ago: executing program 3 (id=338): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x1, 0xc, &(0x7f0000002940)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000029c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a00)={r1, 0x0, 0xe, 0x0, &(0x7f0000002a80)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m50.469726077s ago: executing program 1 (id=339): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000680)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) write(r2, &(0x7f00000006c0)="540000001200014000"/23, 0x17) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000840), 0x2) r4 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\x00\x00\x00\x00/\x98|\x84\"xMW\x8d\xceM\x94j`23fP}\xf5/\x8e\x909`\xbd`\xf6(bg\x10\x00U\xf9!\x1b\x8b\x1b\xef\xfeZ9\xcd[\x9emA\xb6\xfbm&\xa9\x06!\xe5-\xa1\xddx\xf4z\xf4\xcc\xef\r\xae\xa3\x88\x1c+\xf9\xfe\xb8Sx\xfa\x83Ab\xee\xdd\x81r\x9ef\x17\x17\xd6\xff\al\x80\xa9Y\x1f;\v\xebJ+\x03\xd97\x16M\xef\xfcm\xe8*\x81_h\x03\x88\x17E\xfe\xc3F\xf3\x00@WR\xcf', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000940)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000980)=0x7) socket$kcm(0x29, 0x7, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff0007058102000200070582"], 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) syz_usb_ep_write(r7, 0x82, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550e, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111, 0x9}}, 0x20) 1m50.382296422s ago: executing program 3 (id=340): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x2a0471a, &(0x7f0000000640)={[{}]}, 0x82, 0x499, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pipe2$9p(&(0x7f0000000d80), 0x0) 1m50.379997605s ago: executing program 2 (id=341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m49.768381209s ago: executing program 3 (id=342): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x75d, &(0x7f00000001c0)={[{@noquota}, {@noblock_validity}, {@discard}, {@errors_remount}, {@lazytime, 0x0}, {@sb={'sb', 0x3d, 0x8}}, {@noload}, {@data_journal}, {@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@data_ordered}, {@nombcache}, {@norecovery}, {@bh}, {@dax_never}, {@dax_inode}], [], 0x2c}, 0xa, 0x526, &(0x7f0000001a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) 1m19.608856821s ago: executing program 33 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./trace\x00', &(0x7f0000000380)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000003bc0)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000003c00)=':', 0x1) 54.954277431s ago: executing program 34 (id=339): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000680)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) write(r2, &(0x7f00000006c0)="540000001200014000"/23, 0x17) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000840), 0x2) r4 = memfd_create(&(0x7f0000000880)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\x00\x00\x00\x00/\x98|\x84\"xMW\x8d\xceM\x94j`23fP}\xf5/\x8e\x909`\xbd`\xf6(bg\x10\x00U\xf9!\x1b\x8b\x1b\xef\xfeZ9\xcd[\x9emA\xb6\xfbm&\xa9\x06!\xe5-\xa1\xddx\xf4z\xf4\xcc\xef\r\xae\xa3\x88\x1c+\xf9\xfe\xb8Sx\xfa\x83Ab\xee\xdd\x81r\x9ef\x17\x17\xd6\xff\al\x80\xa9Y\x1f;\v\xebJ+\x03\xd97\x16M\xef\xfcm\xe8*\x81_h\x03\x88\x17E\xfe\xc3F\xf3\x00@WR\xcf', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000940)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000980)=0x7) socket$kcm(0x29, 0x7, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff0007058102000200070582"], 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) syz_usb_ep_write(r7, 0x82, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550e, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111, 0x9}}, 0x20) 29.195956255s ago: executing program 35 (id=341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b4040000000008", "bb67102a8bcaae4ffc222da7000200", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 0s ago: executing program 36 (id=342): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x75d, &(0x7f00000001c0)={[{@noquota}, {@noblock_validity}, {@discard}, {@errors_remount}, {@lazytime, 0x0}, {@sb={'sb', 0x3d, 0x8}}, {@noload}, {@data_journal}, {@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@data_ordered}, {@nombcache}, {@norecovery}, {@bh}, {@dax_never}, {@dax_inode}], [], 0x2c}, 0xa, 0x526, &(0x7f0000001a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 79.988372][ T5622] cgroup: Unknown subsys name 'net' [ 80.144971][ T5622] cgroup: Unknown subsys name 'cpuset' [ 80.154049][ T5622] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.832954][ T5622] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.786137][ T5650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.787274][ T5650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.788450][ T5653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.789339][ T5653] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.791213][ T5653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.791756][ T5653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.808942][ T5650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.818920][ T5654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.819805][ T5654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.822030][ T5654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.823269][ T5654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.824340][ T5654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.826922][ T5654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.829232][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.830402][ T5650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.833511][ T5650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.834017][ T5654] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.836398][ T5650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.855756][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.864898][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.888689][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.889494][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.894399][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.896131][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.904788][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.107867][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.120070][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.126767][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.142600][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.150071][ T5636] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.249489][ T5635] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.304792][ T5637] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.532217][ T5639] infiniband rxe0: set active [ 88.533861][ T5639] infiniband rxe0: added rxe_eth0 [ 88.562126][ T5639] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 88.562167][ T5639] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 88.562209][ T5639] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 88.594887][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.646246][ T5639] RDS/IB: rxe0: added [ 88.646657][ T5639] smc: adding ib device rxe0 with port count 1 [ 88.646765][ T5639] smc: ib device rxe0 port 1 has no pnetid [ 88.680478][ T197] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.698594][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.921827][ T5640] Bluetooth: hci3: command tx timeout [ 88.922052][ T5640] Bluetooth: hci2: command tx timeout [ 89.004173][ T5638] Bluetooth: hci1: command tx timeout [ 89.004428][ T5638] Bluetooth: hci0: command tx timeout [ 89.004539][ T5638] Bluetooth: hci4: command tx timeout [ 89.029688][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.415273][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.569481][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.569588][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.569958][ T5636] bridge_slave_0: entered allmulticast mode [ 89.594808][ T5636] bridge_slave_0: entered promiscuous mode [ 89.675967][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.676082][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.676233][ T5636] bridge_slave_1: entered allmulticast mode [ 89.678537][ T5636] bridge_slave_1: entered promiscuous mode [ 89.761626][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.767305][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.767545][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.767652][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.767800][ T5634] bridge_slave_0: entered allmulticast mode [ 89.769475][ T5634] bridge_slave_0: entered promiscuous mode [ 89.854092][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.854443][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.854601][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.854735][ T5634] bridge_slave_1: entered allmulticast mode [ 89.856892][ T5634] bridge_slave_1: entered promiscuous mode [ 90.021326][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.021507][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.021633][ T5635] bridge_slave_0: entered allmulticast mode [ 90.023774][ T5635] bridge_slave_0: entered promiscuous mode [ 90.066659][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.087184][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.087392][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.087535][ T5635] bridge_slave_1: entered allmulticast mode [ 90.089131][ T5635] bridge_slave_1: entered promiscuous mode [ 90.100280][ T5636] team0: Port device team_slave_0 added [ 90.120042][ T5636] team0: Port device team_slave_1 added [ 90.122672][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.122781][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.122942][ T5637] bridge_slave_0: entered allmulticast mode [ 90.127346][ T5637] bridge_slave_0: entered promiscuous mode [ 90.155422][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.211590][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.211699][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.211832][ T5637] bridge_slave_1: entered allmulticast mode [ 90.213404][ T5637] bridge_slave_1: entered promiscuous mode [ 90.254289][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.255483][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.255498][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.255525][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.260236][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.342758][ T5634] team0: Port device team_slave_0 added [ 90.342909][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.345549][ T5634] team0: Port device team_slave_1 added [ 90.346451][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.346467][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.346495][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.467097][ T5635] team0: Port device team_slave_0 added [ 90.475869][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.523157][ T5635] team0: Port device team_slave_1 added [ 90.526667][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.527895][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.527913][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.527945][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.624753][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.624773][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.624802][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.658889][ T5636] hsr_slave_0: entered promiscuous mode [ 90.667239][ T5636] hsr_slave_1: entered promiscuous mode [ 90.731724][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.731743][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.731788][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.776177][ T5637] team0: Port device team_slave_0 added [ 90.799398][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.799413][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.799432][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.855117][ T5637] team0: Port device team_slave_1 added [ 90.894106][ T5634] hsr_slave_0: entered promiscuous mode [ 90.895161][ T5634] hsr_slave_1: entered promiscuous mode [ 90.895727][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 90.895760][ T5634] Cannot create hsr debugfs directory [ 90.970556][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.970574][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.970596][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.004440][ T5640] Bluetooth: hci2: command tx timeout [ 91.004474][ T5640] Bluetooth: hci3: command tx timeout [ 91.048385][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.048402][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.048425][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.084008][ T5638] Bluetooth: hci4: command tx timeout [ 91.084041][ T5638] Bluetooth: hci0: command tx timeout [ 91.084064][ T5638] Bluetooth: hci1: command tx timeout [ 91.174782][ T5635] hsr_slave_0: entered promiscuous mode [ 91.175581][ T5635] hsr_slave_1: entered promiscuous mode [ 91.176111][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 91.176127][ T5635] Cannot create hsr debugfs directory [ 91.326032][ T5637] hsr_slave_0: entered promiscuous mode [ 91.326805][ T5637] hsr_slave_1: entered promiscuous mode [ 91.327333][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 91.327349][ T5637] Cannot create hsr debugfs directory [ 91.705125][ T5636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.726644][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.742438][ T5636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.750168][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.758214][ T5636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.778949][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.797489][ T5636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.802315][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.915102][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.919250][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.957679][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.967747][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.982671][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.982759][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.983047][ T5639] bridge_slave_0: entered allmulticast mode [ 91.984841][ T5639] bridge_slave_0: entered promiscuous mode [ 91.988072][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.022008][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.022907][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.026047][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.058635][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.058823][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.058970][ T5639] bridge_slave_1: entered allmulticast mode [ 92.064744][ T5639] bridge_slave_1: entered promiscuous mode [ 92.128456][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.146617][ T11] cfg80211: failed to load regulatory.db [ 92.159739][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.216651][ T5639] team0: Port device team_slave_0 added [ 92.219698][ T5639] team0: Port device team_slave_1 added [ 92.284995][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.289402][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.290262][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.315351][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.316822][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.316837][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.316871][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.318818][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.318832][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.318854][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.356758][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.389320][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.438476][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.446193][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.525648][ T5639] hsr_slave_0: entered promiscuous mode [ 92.526943][ T5639] hsr_slave_1: entered promiscuous mode [ 92.527486][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 92.527502][ T5639] Cannot create hsr debugfs directory [ 92.646857][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.650183][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.679308][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.687147][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.710384][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.710719][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.727185][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.775592][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.779224][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.868200][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.913928][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.914102][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.951783][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.982807][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.982884][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.016415][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.020625][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.042394][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.045817][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.047227][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.050291][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.082514][ T5640] Bluetooth: hci3: command tx timeout [ 93.082549][ T5640] Bluetooth: hci2: command tx timeout [ 93.084885][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.109502][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.120001][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.144240][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.161951][ T5638] Bluetooth: hci1: command tx timeout [ 93.161986][ T5638] Bluetooth: hci0: command tx timeout [ 93.162010][ T5638] Bluetooth: hci4: command tx timeout [ 93.163832][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.163906][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.233062][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.233139][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.258469][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.301335][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.301474][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.344626][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.344736][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.448188][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.563692][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.615635][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.615749][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.672076][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.672190][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.748216][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.861598][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.899211][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.899333][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.943463][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.943576][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.368214][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.877320][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.077244][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.092694][ T5634] veth0_vlan: entered promiscuous mode [ 95.138032][ T5634] veth1_vlan: entered promiscuous mode [ 95.167446][ T5640] Bluetooth: hci2: command tx timeout [ 95.167485][ T5640] Bluetooth: hci3: command tx timeout [ 95.242687][ T5638] Bluetooth: hci4: command tx timeout [ 95.242724][ T5638] Bluetooth: hci0: command tx timeout [ 95.242750][ T5638] Bluetooth: hci1: command tx timeout [ 95.245900][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.328210][ T5635] veth0_vlan: entered promiscuous mode [ 95.389110][ T5634] veth0_macvtap: entered promiscuous mode [ 95.397155][ T5635] veth1_vlan: entered promiscuous mode [ 95.441163][ T5634] veth1_macvtap: entered promiscuous mode [ 95.471096][ T5636] veth0_vlan: entered promiscuous mode [ 95.489732][ T5637] veth0_vlan: entered promiscuous mode [ 95.504667][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.529462][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.543256][ T5636] veth1_vlan: entered promiscuous mode [ 95.569759][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.585164][ T5637] veth1_vlan: entered promiscuous mode [ 95.590776][ T5635] veth0_macvtap: entered promiscuous mode [ 95.604847][ T5635] veth1_macvtap: entered promiscuous mode [ 95.691246][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.737475][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.748315][ T288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.760933][ T5639] veth0_vlan: entered promiscuous mode [ 95.767714][ T5636] veth0_macvtap: entered promiscuous mode [ 95.777699][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.805981][ T5637] veth0_macvtap: entered promiscuous mode [ 95.821566][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.822354][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.826993][ T5639] veth1_vlan: entered promiscuous mode [ 95.860402][ T5636] veth1_macvtap: entered promiscuous mode [ 95.869742][ T5637] veth1_macvtap: entered promiscuous mode [ 95.931670][ T207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.931723][ T207] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.931762][ T207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.931807][ T207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.933221][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.933247][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.024556][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.026991][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.074974][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.097092][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.114951][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.114973][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.164739][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.164763][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.197386][ T5639] veth0_macvtap: entered promiscuous mode [ 96.232488][ T288] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233133][ T288] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233238][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233279][ T66] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233319][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233357][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233395][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.233434][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.298183][ T5639] veth1_macvtap: entered promiscuous mode [ 96.345920][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.345945][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.475530][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.486412][ T5634] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.553237][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.650802][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.650834][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.732361][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.751141][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.751186][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.751219][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.751252][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.805275][ T5839] bond0: Unable to set up delay as MII monitoring is disabled [ 96.823601][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.823639][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.928100][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.928123][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.949338][ T5843] loop2: detected capacity change from 0 to 512 [ 96.978340][ T5843] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 96.978368][ T5843] EXT4-fs (loop2): group descriptors corrupted! [ 97.228253][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.228275][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.335465][ T5847] ip_tables: iptables: counters copy to user failed while replacing table [ 98.104550][ T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.104574][ T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.232477][ T207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.232500][ T207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.398707][ T5857] loop2: detected capacity change from 0 to 128 [ 98.936939][ T5875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14'. [ 99.038319][ T5877] Set syz1 is full, maxelem 1029 reached [ 99.111869][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.273191][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 99.275415][ T10] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 99.301033][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 99.301062][ T10] usb 1-1: config 0 has no interface number 0 [ 99.301118][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 99.306271][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.306299][ T10] usb 1-1: Product: syz [ 99.306315][ T10] usb 1-1: Manufacturer: syz [ 99.306330][ T10] usb 1-1: SerialNumber: syz [ 99.360662][ T10] usb 1-1: config 0 descriptor?? [ 99.540030][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.735778][ T5902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25'. [ 99.754964][ T5903] loop1: detected capacity change from 0 to 164 [ 99.899931][ T5903] rock: directory entry would overflow storage [ 99.899939][ T5903] rock: sig=0x4f50, size=4, remaining=3 [ 99.900334][ T5903] isofs: Unable to find the "." directory for NFS. [ 100.344620][ T5916] loop4: detected capacity change from 0 to 256 [ 100.402868][ T5916] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 100.402897][ T5916] FAT-fs (loop4): Can't find a valid FAT filesystem [ 100.869759][ T5937] loop3: detected capacity change from 0 to 512 [ 101.117367][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.117541][ T5937] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.316631][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.592763][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.593883][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.897344][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.919171][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.001401][ T5747] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.152411][ T53] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.153129][ T207] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.153175][ T207] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.153217][ T207] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.171022][ T5747] usb 4-1: Using ep0 maxpacket: 32 [ 102.202338][ T5747] usb 4-1: New USB device found: idVendor=05ac, idProduct=027f, bcdDevice=0.40 [ 102.219206][ T5747] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.219246][ T5747] usb 4-1: config 1 interface 0 has no altsetting 0 [ 102.244031][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.244063][ T5747] usb 4-1: Product: х [ 102.244174][ T5747] usb 4-1: Manufacturer: 揔液侜：傯苍痖ꪾ竭窦蘯Ī濾㧒跣괽ृ茶䗳稱믬颜돠⓱利⵼꘱皉乍໻߹酡ⱛⒶ镘☙๳姃騖□Ꞥ쿠䲂ᦖ꧿퀆渨쏨ፍ椯ۡꕷ◀都Ŏ殜끦舙龜ꔠ鵼窻롅䥬Ṧ㕾⃀䬺坹`悍ᓟ┇딽陣⎞㏮띜鴺㡝䳵 [ 102.244206][ T5747] usb 4-1: SerialNumber: syz [ 102.542616][ T5747] usbhid 4-1:1.0: can't add hid device: -71 [ 102.542759][ T5747] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 102.574974][ T5747] usb 4-1: USB disconnect, device number 2 [ 102.679326][ T5985] loop4: detected capacity change from 0 to 512 [ 102.713403][ T5986] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.48' sets config #-1 [ 102.713700][ T5986] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.48' sets config #1 [ 102.796682][ T5985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.796808][ T5985] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.905569][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.061648][ T5990] syzkaller0: entered promiscuous mode [ 103.061675][ T5990] syzkaller0: entered allmulticast mode [ 103.181338][ T5992] loop3: detected capacity change from 0 to 1024 [ 103.199431][ T5992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.212447][ T5992] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.216779][ T5992] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 103.245926][ T5992] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.257521][ T5992] EXT4-fs error (device loop3): ext4_free_blocks:6717: comm syz.3.55: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.257711][ T5992] loop3: lost filesystem error report for type 5 error -117 [ 103.258102][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1004 failed: -71 [ 103.258153][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 103.258172][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 103.258263][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 103.272653][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 103.272681][ C1] EXT4-fs (loop3): initial error at time 1793401035: ext4_free_blocks:6717 [ 103.272706][ C1] EXT4-fs (loop3): last error at time 1793401035: ext4_free_blocks:6717 [ 103.350810][ T5992] EXT4-fs (loop3): 1 orphan inode deleted [ 103.388563][ T5992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.420378][ T10] usb 1-1: USB disconnect, device number 2 [ 103.434288][ T5992] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 16: comm syz.3.55: path /8/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 104.475179][ T6025] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.187455][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.282097][ T6028] syzkaller0: entered promiscuous mode [ 105.282122][ T6028] syzkaller0: entered allmulticast mode [ 105.331459][ T5770] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.740041][ T5770] usb 5-1: Using ep0 maxpacket: 32 [ 105.747772][ T5770] usb 5-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 105.748968][ T5770] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 105.748995][ T5770] usb 5-1: config 0 has no interface number 0 [ 105.749038][ T5770] usb 5-1: config 0 interface 12 has no altsetting 0 [ 105.751588][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.751690][ T5770] usb 5-1: Product: syz [ 105.751733][ T5770] usb 5-1: Manufacturer: syz [ 105.751776][ T5770] usb 5-1: SerialNumber: syz [ 105.790518][ T5770] usb 5-1: config 0 descriptor?? [ 105.854157][ T6042] loop3: detected capacity change from 0 to 2048 [ 105.908076][ T6042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.991056][ T6046] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 106.595894][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.527382][ T6071] syzkaller0: entered promiscuous mode [ 108.527436][ T6071] syzkaller0: entered allmulticast mode [ 109.238726][ T5770] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 109.238785][ T5770] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 109.238803][ T5770] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 109.238886][ T5770] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 109.380111][ T5770] usb 5-1: USB disconnect, device number 2 [ 109.574448][ T6090] trusted_key: encrypted_key: insufficient parameters specified [ 109.619641][ T6089] tipc: Started in network mode [ 109.619689][ T6089] tipc: Node identity 4244c1dad55f, cluster identity 4711 [ 109.639663][ T6089] tipc: Enabled bearer , priority 0 [ 109.648673][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.92'. [ 109.648888][ T6091] netlink: 'syz.2.92': attribute type 7 has an invalid length. [ 109.648905][ T6091] netlink: 'syz.2.92': attribute type 8 has an invalid length. [ 109.648918][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 109.706489][ T6091] veth0: entered promiscuous mode [ 109.735018][ T6091] veth0: left promiscuous mode [ 109.859536][ T6089] syzkaller0: entered promiscuous mode [ 109.859564][ T6089] syzkaller0: entered allmulticast mode [ 109.865516][ T6093] tipc: Resetting bearer [ 109.885520][ T6095] tipc: Resetting bearer [ 109.929208][ T6095] tipc: Disabling bearer [ 109.989254][ T6101] loop1: detected capacity change from 0 to 512 [ 110.016941][ T6097] syzkaller0: entered promiscuous mode [ 110.016966][ T6097] syzkaller0: entered allmulticast mode [ 110.035012][ T6101] EXT4-fs (loop1): invalid journal inode [ 110.035093][ T6101] EXT4-fs (loop1): can't get journal size [ 110.106196][ T6101] EXT4-fs (loop1): 1 truncate cleaned up [ 110.126145][ T6101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.203093][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.851003][ T5748] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.080085][ T6127] loop1: detected capacity change from 0 to 512 [ 111.135675][ T6127] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 111.135897][ T6127] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 111.138152][ T6127] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.106: iget: bad i_size value: 12154757448730 [ 111.138447][ T6127] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 111.151712][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 111.151747][ C0] EXT4-fs (loop1): initial error at time 1793401042: ext4_orphan_get:1404: inode 13 [ 111.151804][ C0] EXT4-fs (loop1): last error at time 1793401042: ext4_orphan_get:1404: inode 13 [ 111.225522][ T6127] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.106: couldn't read orphan inode 13 (err -117) [ 111.225561][ T6127] loop1: lost filesystem error report for type 5 error -117 [ 111.251928][ T6127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.314648][ T6127] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 111.530078][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.926031][ T5748] usb 1-1: Using ep0 maxpacket: 32 [ 111.926752][ T5748] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 111.929481][ T5748] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 111.929507][ T5748] usb 1-1: config 0 has no interface number 0 [ 111.929551][ T5748] usb 1-1: config 0 interface 12 has no altsetting 0 [ 111.933013][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.933040][ T5748] usb 1-1: Product: syz [ 111.933055][ T5748] usb 1-1: Manufacturer: syz [ 111.933086][ T5748] usb 1-1: SerialNumber: syz [ 111.943185][ T5748] usb 1-1: config 0 descriptor?? [ 112.700451][ T6136] netlink: 136 bytes leftover after parsing attributes in process `syz.1.108'. [ 112.700569][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 113.077676][ T6140] syz.1.110 uses obsolete (PF_INET,SOCK_PACKET) [ 113.407964][ T6142] syzkaller0: entered promiscuous mode [ 113.407990][ T6142] syzkaller0: entered allmulticast mode [ 113.731767][ T6152] process 'syz.4.115' launched './file0' with NULL argv: empty string added [ 114.162977][ T6162] loop4: detected capacity change from 0 to 512 [ 114.225823][ T6162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.225974][ T6162] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.561382][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.836752][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.837432][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.869831][ T6170] loop2: detected capacity change from 0 to 8192 [ 114.878934][ T6170] ======================================================= [ 114.878934][ T6170] WARNING: The mand mount option has been deprecated and [ 114.878934][ T6170] and is ignored by this kernel. Remove the mand [ 114.878934][ T6170] option from the mount to silence this warning. [ 114.878934][ T6170] ======================================================= [ 114.935126][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 115.176274][ T6177] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 115.176302][ T6177] FAT-fs (loop2): Filesystem has been set read-only [ 115.249388][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.267176][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.522723][ T6090] Set syz1 is full, maxelem 65536 reached [ 115.691741][ T53] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.691798][ T53] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.691897][ T53] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.691937][ T53] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.695043][ T5748] f81534 1-1:0.12: f81534_get_register: reg: 1004 failed: -71 [ 115.695098][ T5748] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 115.695113][ T5748] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 115.695182][ T5748] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 115.751735][ T5748] usb 1-1: USB disconnect, device number 3 [ 115.928432][ T6180] syzkaller0: entered promiscuous mode [ 115.928457][ T6180] syzkaller0: entered allmulticast mode [ 115.996864][ T6188] Zero length message leads to an empty skb [ 118.025550][ T6236] hub 5-0:1.0: USB hub found [ 118.029595][ T6236] hub 5-0:1.0: 1 port detected [ 118.099990][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 122.366922][ T6284] hub 5-0:1.0: USB hub found [ 122.368515][ T6284] hub 5-0:1.0: 1 port detected [ 122.493948][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 123.285678][ T6291] netlink: 'syz.3.159': attribute type 10 has an invalid length. [ 123.396133][ T6294] FAULT_INJECTION: forcing a failure. [ 123.396133][ T6294] name failslab, interval 1, probability 0, space 0, times 0 [ 123.396191][ T6294] CPU: 1 UID: 0 PID: 6294 Comm: syz.1.160 Not tainted syzkaller #0 PREEMPT(full) [ 123.396216][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 123.396239][ T6294] Call Trace: [ 123.396248][ T6294] [ 123.396257][ T6294] dump_stack_lvl+0xe8/0x150 [ 123.396312][ T6294] should_fail_ex+0x3eb/0x540 [ 123.396344][ T6294] ? alloc_vmap_area+0x217/0x1410 [ 123.396367][ T6294] should_failslab+0xa8/0x100 [ 123.396403][ T6294] ? alloc_vmap_area+0x217/0x1410 [ 123.396420][ T6294] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 123.396446][ T6294] ? alloc_vmap_area+0x217/0x1410 [ 123.396470][ T6294] alloc_vmap_area+0x217/0x1410 [ 123.396502][ T6294] ? __pfx_alloc_vmap_area+0x10/0x10 [ 123.396523][ T6294] ? __get_vm_area_node+0x195/0x330 [ 123.396540][ T6294] ? __get_vm_area_node+0x195/0x330 [ 123.396563][ T6294] __get_vm_area_node+0x24a/0x330 [ 123.396587][ T6294] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 123.396608][ T6294] ? bpf_prog_calc_tag+0x51/0x370 [ 123.396629][ T6294] ? __pfx___css_rstat_updated+0x10/0x10 [ 123.396657][ T6294] ? pcpu_alloc_noprof+0xde2/0x1900 [ 123.396689][ T6294] ? lock_acquire+0x115/0x350 [ 123.396727][ T6294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.396757][ T6294] ? bpf_prog_calc_tag+0x51/0x370 [ 123.396777][ T6294] __vmalloc_noprof+0xd2/0x120 [ 123.396797][ T6294] ? bpf_prog_calc_tag+0x51/0x370 [ 123.396817][ T6294] bpf_prog_calc_tag+0x51/0x370 [ 123.396839][ T6294] bpf_jit_subprogs+0xa0d/0x4830 [ 123.396887][ T6294] bpf_check+0x1fd6/0x34e0 [ 123.396915][ T6294] ? ktime_get_with_offset+0x93/0x2d0 [ 123.396941][ T6294] ? ktime_get_with_offset+0x93/0x2d0 [ 123.396967][ T6294] ? __pfx_bpf_check+0x10/0x10 [ 123.396995][ T6294] ? bpf_obj_name_cpy+0x194/0x1e0 [ 123.397022][ T6294] bpf_prog_load+0x14da/0x1c60 [ 123.397058][ T6294] ? __pfx_bpf_prog_load+0x10/0x10 [ 123.397089][ T6294] ? __might_fault+0xaf/0x130 [ 123.397113][ T6294] __sys_bpf+0xd86/0xe00 [ 123.397137][ T6294] ? __pfx___sys_bpf+0x10/0x10 [ 123.397158][ T6294] ? do_futex+0x3e7/0x4e0 [ 123.397201][ T6294] ? rcu_is_watching+0x16/0xb0 [ 123.397235][ T6294] __x64_sys_bpf+0xba/0xd0 [ 123.397265][ T6294] do_syscall_64+0x166/0x520 [ 123.397288][ T6294] ? trace_irq_disable+0x3b/0x140 [ 123.397313][ T6294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.397331][ T6294] ? clear_bhb_loop+0x70/0xc0 [ 123.397353][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.397371][ T6294] RIP: 0033:0x7f8087b9f559 [ 123.397403][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.397418][ T6294] RSP: 002b:00007f8088ae4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.397442][ T6294] RAX: ffffffffffffffda RBX: 00007f8087e25fa0 RCX: 00007f8087b9f559 [ 123.397456][ T6294] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 123.397467][ T6294] RBP: 00007f8087c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 123.397479][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.397491][ T6294] R13: 00007f8087e26038 R14: 00007f8087e25fa0 R15: 00007fff29362b48 [ 123.397519][ T6294] [ 123.511720][ T6294] syz.1.160: vmalloc error: size 16, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 123.511945][ T6294] CPU: 1 UID: 0 PID: 6294 Comm: syz.1.160 Not tainted syzkaller #0 PREEMPT(full) [ 123.511972][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 123.511985][ T6294] Call Trace: [ 123.511993][ T6294] [ 123.512002][ T6294] dump_stack_lvl+0xe8/0x150 [ 123.512043][ T6294] warn_alloc+0x24d/0x270 [ 123.512073][ T6294] ? kasan_quarantine_put+0xbb/0x1f0 [ 123.512107][ T6294] ? __pfx_warn_alloc+0x10/0x10 [ 123.512135][ T6294] ? __get_vm_area_node+0x263/0x330 [ 123.512164][ T6294] ? __get_vm_area_node+0x263/0x330 [ 123.512195][ T6294] __vmalloc_node_range_noprof+0x396/0x16f0 [ 123.512226][ T6294] ? __pfx___css_rstat_updated+0x10/0x10 [ 123.512261][ T6294] ? pcpu_alloc_noprof+0xde2/0x1900 [ 123.512301][ T6294] ? lock_acquire+0x115/0x350 [ 123.512346][ T6294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.512384][ T6294] ? bpf_prog_calc_tag+0x51/0x370 [ 123.512403][ T6294] __vmalloc_noprof+0xd2/0x120 [ 123.512428][ T6294] ? bpf_prog_calc_tag+0x51/0x370 [ 123.512453][ T6294] bpf_prog_calc_tag+0x51/0x370 [ 123.512481][ T6294] bpf_jit_subprogs+0xa0d/0x4830 [ 123.512571][ T6294] bpf_check+0x1fd6/0x34e0 [ 123.512609][ T6294] ? ktime_get_with_offset+0x93/0x2d0 [ 123.512642][ T6294] ? ktime_get_with_offset+0x93/0x2d0 [ 123.512675][ T6294] ? __pfx_bpf_check+0x10/0x10 [ 123.512703][ T6294] ? bpf_obj_name_cpy+0x194/0x1e0 [ 123.512736][ T6294] bpf_prog_load+0x14da/0x1c60 [ 123.512779][ T6294] ? __pfx_bpf_prog_load+0x10/0x10 [ 123.512826][ T6294] ? __might_fault+0xaf/0x130 [ 123.512858][ T6294] __sys_bpf+0xd86/0xe00 [ 123.512890][ T6294] ? __pfx___sys_bpf+0x10/0x10 [ 123.512920][ T6294] ? do_futex+0x3e7/0x4e0 [ 123.512982][ T6294] ? rcu_is_watching+0x16/0xb0 [ 123.513024][ T6294] __x64_sys_bpf+0xba/0xd0 [ 123.513061][ T6294] do_syscall_64+0x166/0x520 [ 123.513090][ T6294] ? trace_irq_disable+0x3b/0x140 [ 123.513122][ T6294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.513146][ T6294] ? clear_bhb_loop+0x70/0xc0 [ 123.513175][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.513197][ T6294] RIP: 0033:0x7f8087b9f559 [ 123.513219][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.513258][ T6294] RSP: 002b:00007f8088ae4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.513282][ T6294] RAX: ffffffffffffffda RBX: 00007f8087e25fa0 RCX: 00007f8087b9f559 [ 123.513299][ T6294] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 123.513314][ T6294] RBP: 00007f8087c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 123.513328][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.513341][ T6294] R13: 00007f8087e26038 R14: 00007f8087e25fa0 R15: 00007fff29362b48 [ 123.513378][ T6294] [ 123.573135][ T6294] Mem-Info: [ 123.573186][ T6294] active_anon:5611 inactive_anon:0 isolated_anon:0 [ 123.573186][ T6294] active_file:0 inactive_file:43442 isolated_file:0 [ 123.573186][ T6294] unevictable:0 dirty:225 writeback:0 [ 123.573186][ T6294] slab_reclaimable:10731 slab_unreclaimable:97833 [ 123.573186][ T6294] mapped:29703 shmem:522 pagetables:1101 [ 123.573186][ T6294] sec_pagetables:0 bounce:0 [ 123.573186][ T6294] kernel_misc_reclaimable:0 [ 123.573186][ T6294] free:1320636 free_pcp:13924 free_cma:0 [ 123.573363][ T6294] Node 0 active_anon:22444kB inactive_anon:0kB active_file:0kB inactive_file:173564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118812kB dirty:896kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11920kB pagetables:4260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 123.573510][ T6294] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 123.573651][ T6294] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.573825][ T6294] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 123.573936][ T6294] Node 0 DMA32 free:1336440kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22444kB inactive_anon:0kB active_file:0kB inactive_file:173564kB unevictable:0kB writepending:896kB zspages:0kB present:3129332kB managed:2522872kB mlocked:0kB bounce:0kB free_pcp:55692kB local_pcp:27324kB free_cma:0kB [ 123.574127][ T6294] lowmem_reserve[]: 0 0 1 1 1 [ 123.574223][ T6294] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 123.574406][ T6294] lowmem_reserve[]: 0 0 0 0 0 [ 123.574504][ T6294] Node 1 Normal free:3930744kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.574657][ T6294] lowmem_reserve[]: 0 0 0 0 0 [ 123.574735][ T6294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 123.586488][ T6294] Node 0 DMA32: 160*4kB (UM) 215*8kB (UME) 126*16kB (UM) 74*32kB (UM) 4*64kB (UE) 3*128kB (ME) 6*256kB (UME) 1*512kB (M) 4*1024kB (M) 4*2048kB (UM) 321*4096kB (M) = 1336536kB [ 123.587001][ T6294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 123.587316][ T6294] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 4*16kB (UM) 11*32kB (UM) 3*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3930744kB [ 123.587772][ T6294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.587813][ T6294] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.587856][ T6294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.587887][ T6294] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.587931][ T6294] 43960 total pagecache pages [ 123.587947][ T6294] 0 pages in swap cache [ 123.587970][ T6294] Free swap = 124996kB [ 123.587988][ T6294] Total swap = 124996kB [ 123.588004][ T6294] 2097051 pages RAM [ 123.609658][ T6294] 0 pages HighMem/MovableOnly [ 123.609698][ T6294] 434369 pages reserved [ 123.609719][ T6294] 0 pages cma reserved [ 127.145856][ T6317] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 127.159004][ T6317] raw_sendmsg: syz.3.171 forgot to set AF_INET. Fix it! [ 127.624343][ T6343] Cannot find add_set index 0 as target [ 127.628544][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 127.674048][ T6343] serial 00:03: in use; can't configure [ 128.516174][ T6352] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 128.824525][ T6362] netlink: 108 bytes leftover after parsing attributes in process `syz.2.190'. [ 128.825950][ T6360] loop4: detected capacity change from 0 to 512 [ 128.919844][ T6360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.919969][ T6360] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.030940][ T33] audit: type=1326 audit(1793401060.794:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.191" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f626bb9f559 code=0x0 [ 129.078061][ T5831] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 129.078105][ T5831] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 129.078136][ T5831] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 129.078165][ T5831] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 129.078195][ T5831] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 129.078236][ T5831] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 129.078267][ T5831] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 129.078297][ T5831] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 129.078326][ T5831] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 129.078356][ T5831] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x0 [ 129.135580][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.285885][ T5831] lg-g15 0003:046D:0A07.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 129.509500][ T6373] fido_id[6373]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.728357][ T6385] Set syz1 is full, maxelem 1029 reached [ 129.770034][ T6383] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 129.898998][ T6388] FAULT_INJECTION: forcing a failure. [ 129.898998][ T6388] name failslab, interval 1, probability 0, space 0, times 0 [ 129.899035][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.2.198 Not tainted syzkaller #0 PREEMPT(full) [ 129.899062][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.899076][ T6388] Call Trace: [ 129.899096][ T6388] [ 129.899106][ T6388] dump_stack_lvl+0xe8/0x150 [ 129.899151][ T6388] should_fail_ex+0x3eb/0x540 [ 129.899187][ T6388] should_failslab+0xa8/0x100 [ 129.899223][ T6388] ? alloc_empty_file+0x5b/0x1d0 [ 129.899249][ T6388] kmem_cache_alloc_noprof+0x9c/0x600 [ 129.899279][ T6388] ? alloc_empty_file+0x5b/0x1d0 [ 129.899312][ T6388] alloc_empty_file+0x5b/0x1d0 [ 129.899340][ T6388] alloc_file_pseudo+0x110/0x1e0 [ 129.899370][ T6388] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 129.899398][ T6388] ? _raw_spin_unlock+0x28/0x50 [ 129.899433][ T6388] sock_alloc_file+0xb8/0x2e0 [ 129.899463][ T6388] ? __sys_socket+0x12b/0x1b0 [ 129.899500][ T6388] __sys_socket+0x13f/0x1b0 [ 129.899539][ T6388] __x64_sys_socket+0x7a/0x90 [ 129.899575][ T6388] do_syscall_64+0x166/0x520 [ 129.899604][ T6388] ? trace_irq_disable+0x3b/0x140 [ 129.899636][ T6388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.899663][ T6388] ? clear_bhb_loop+0x70/0xc0 [ 129.899692][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.899714][ T6388] RIP: 0033:0x7f9b6859f559 [ 129.899736][ T6388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.899755][ T6388] RSP: 002b:00007f9b6944e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 129.899779][ T6388] RAX: ffffffffffffffda RBX: 00007f9b68825fa0 RCX: 00007f9b6859f559 [ 129.899796][ T6388] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011 [ 129.899811][ T6388] RBP: 00007f9b68636b20 R08: 0000000000000000 R09: 0000000000000000 [ 129.899825][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.899839][ T6388] R13: 00007f9b68826038 R14: 00007f9b68825fa0 R15: 00007ffd6152e578 [ 129.899876][ T6388] [ 130.127769][ T6390] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 130.340521][ T6396] netlink: 108 bytes leftover after parsing attributes in process `syz.4.202'. [ 130.425295][ T6398] loop3: detected capacity change from 0 to 512 [ 130.540459][ T6398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.540676][ T6398] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.754818][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.314089][ T6419] file system registered [ 131.626422][ T6430] loop3: detected capacity change from 0 to 512 [ 131.676936][ T6430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.677056][ T6430] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.000398][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.117281][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.117381][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.351864][ T6457] netlink: 188 bytes leftover after parsing attributes in process `syz.0.225'. [ 134.394882][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.395539][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.584565][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.590514][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.744265][ T998] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.892202][ T998] usb 3-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 134.898140][ T998] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.898189][ T998] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.898212][ T998] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.918187][ T998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.918280][ T998] usb 3-1: Product: syz [ 134.918323][ T998] usb 3-1: Manufacturer: syz [ 134.918365][ T998] usb 3-1: SerialNumber: syz [ 135.021394][ T53] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.021447][ T53] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.021483][ T53] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.021518][ T53] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.523625][ T998] usb 3-1: Cannot retrieve CPort count: -110 [ 135.523680][ T998] usb 3-1: Cannot retrieve CPort count: -110 [ 135.523707][ T998] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 136.017664][ T6516] capability: warning: `syz.1.252' uses 32-bit capabilities (legacy support in use) [ 136.073054][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.075266][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.086344][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.096658][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.124685][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.478900][ T288] bridge_slave_1: left allmulticast mode [ 136.478944][ T288] bridge_slave_1: left promiscuous mode [ 136.481005][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.519583][ T6532] loop1: detected capacity change from 0 to 512 [ 136.542378][ T288] bridge_slave_0: left allmulticast mode [ 136.542408][ T288] bridge_slave_0: left promiscuous mode [ 136.544213][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.673043][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.673073][ T6532] FAT-fs (loop1): Filesystem has been set read-only [ 136.673136][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.698936][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.699323][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.719398][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.719718][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.744982][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.745472][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.746051][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.773327][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.790262][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.790601][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.799467][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.817906][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.818418][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.818779][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.819136][ T6532] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 136.819440][ T6532] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 136.873746][ T6537] loop5: detected capacity change from 0 to 7 [ 136.921722][ T1716] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.921844][ T1716] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.928433][ T6537] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.928486][ T6537] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.928548][ T6537] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.928575][ T6537] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.928616][ T6537] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.928641][ T6537] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.928706][ T6537] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.928732][ T6537] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.928788][ T6537] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.928815][ T6537] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.928855][ T6537] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.928881][ T6537] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.928901][ T6537] ldm_validate_partition_table(): Disk read failed. [ 136.928938][ T6537] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.928964][ T6537] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.929003][ T6537] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.929029][ T6537] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.929069][ T6537] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 136.929095][ T6537] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.929142][ T6537] Dev loop5: unable to read RDB block 0 [ 136.929280][ T6537] loop5: unable to read partition table [ 136.929496][ T6537] loop5: partition table beyond EOD, truncated [ 136.933607][ T6537] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 137.192132][ T5831] usb 3-1: USB disconnect, device number 2 [ 137.382876][ T288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.425899][ T288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.446748][ T288] bond0 (unregistering): Released all slaves [ 137.557840][ T6553] can0: slcan on pts0. [ 137.709723][ T6552] can0 (unregistered): slcan off pts0. [ 137.745287][ T288] tipc: Left network mode [ 137.745812][ T6564] loop1: detected capacity change from 0 to 8192 [ 137.885982][ T6567] FAULT_INJECTION: forcing a failure. [ 137.885982][ T6567] name fail_futex, interval 1, probability 0, space 0, times 1 [ 137.886022][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.3.266 Not tainted syzkaller #0 PREEMPT(full) [ 137.886049][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.886062][ T6567] Call Trace: [ 137.886071][ T6567] [ 137.886081][ T6567] dump_stack_lvl+0xe8/0x150 [ 137.886125][ T6567] should_fail_ex+0x3eb/0x540 [ 137.886166][ T6567] get_futex_key+0x1ab/0x1410 [ 137.886201][ T6567] ? __pfx_futex_wake_mark+0x10/0x10 [ 137.886247][ T6567] ? __pfx_get_futex_key+0x10/0x10 [ 137.886293][ T6567] futex_wake+0x119/0x5f0 [ 137.886328][ T6567] ? __pfx_futex_wake+0x10/0x10 [ 137.886367][ T6567] ? pin_kill+0x2b2/0x540 [ 137.886401][ T6567] do_futex+0x458/0x4e0 [ 137.886431][ T6567] ? __pfx_do_futex+0x10/0x10 [ 137.886464][ T6567] __se_sys_futex+0x3a8/0x450 [ 137.886493][ T6567] ? __se_sys_acct+0x3b1/0x9d0 [ 137.886520][ T6567] ? __pfx___se_sys_futex+0x10/0x10 [ 137.886543][ T6567] ? __pfx___se_sys_acct+0x10/0x10 [ 137.886577][ T6567] ? __x64_sys_futex+0x21/0xf0 [ 137.886604][ T6567] do_syscall_64+0x166/0x520 [ 137.886633][ T6567] ? trace_irq_disable+0x3b/0x140 [ 137.886665][ T6567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.886689][ T6567] ? clear_bhb_loop+0x70/0xc0 [ 137.886717][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.886740][ T6567] RIP: 0033:0x7f626bb9f559 [ 137.886761][ T6567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.886780][ T6567] RSP: 002b:00007f626cae50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.886804][ T6567] RAX: ffffffffffffffda RBX: 00007f626be25fa8 RCX: 00007f626bb9f559 [ 137.886822][ T6567] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f626be25fac [ 137.886837][ T6567] RBP: 00007f626be25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 137.886852][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.886865][ T6567] R13: 00007f626be26038 R14: 00007ffebd118ae0 R15: 00007ffebd118bc8 [ 137.886900][ T6567] [ 138.130910][ T6570] loop0: detected capacity change from 0 to 164 [ 138.201415][ T5638] Bluetooth: hci2: command tx timeout [ 138.325334][ T6570] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 138.850254][ T6517] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.988713][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 139.897940][ T6600] loop3: detected capacity change from 0 to 2048 [ 140.014805][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.053373][ T6600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.183745][ T10] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 140.184935][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.184992][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.185017][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.200539][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.200566][ T10] usb 1-1: Product: syz [ 140.200581][ T10] usb 1-1: Manufacturer: syz [ 140.200596][ T10] usb 1-1: SerialNumber: syz [ 140.282267][ T5638] Bluetooth: hci2: command tx timeout [ 140.296030][ T33] audit: type=1800 audit(1793401072.054:3): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.276" name="file1" dev="loop3" ino=15 res=0 errno=-22 [ 140.570511][ T288] hsr_slave_0: left promiscuous mode [ 140.579764][ T288] hsr_slave_1: left promiscuous mode [ 140.587559][ T288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.616983][ T288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.649538][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.921589][ T10] usb 1-1: Cannot retrieve CPort count: -110 [ 140.921641][ T10] usb 1-1: Cannot retrieve CPort count: -110 [ 140.921675][ T10] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 141.436471][ T288] team0 (unregistering): Port device team_slave_1 removed [ 141.473744][ T288] team0 (unregistering): Port device team_slave_0 removed [ 141.497407][ T6655] netlink: 340 bytes leftover after parsing attributes in process `syz.2.290'. [ 141.497549][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 141.784901][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 142.069428][ T6667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 142.343025][ T5898] usb 1-1: USB disconnect, device number 4 [ 142.363145][ T5638] Bluetooth: hci2: command tx timeout [ 142.587226][ T6680] loop0: detected capacity change from 0 to 512 [ 142.850306][ T6691] loop2: detected capacity change from 0 to 512 [ 142.864089][ T6691] EXT4-fs: Ignoring removed i_version option [ 142.995723][ T6691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.083703][ T6691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.083840][ T6691] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.153098][ T6680] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 143.153135][ T6680] FAT-fs (loop0): Filesystem has been set read-only [ 143.281729][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.285886][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.291237][ T6517] bridge_slave_0: entered allmulticast mode [ 143.300276][ T6517] bridge_slave_0: entered promiscuous mode [ 143.343514][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.345181][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.345365][ T6517] bridge_slave_1: entered allmulticast mode [ 143.381404][ T6517] bridge_slave_1: entered promiscuous mode [ 143.428997][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.442172][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.501070][ T6517] team0: Port device team_slave_0 added [ 143.504372][ T6517] team0: Port device team_slave_1 added [ 143.548906][ T6701] FAULT_INJECTION: forcing a failure. [ 143.548906][ T6701] name fail_futex, interval 1, probability 0, space 0, times 0 [ 143.548940][ T6701] CPU: 0 UID: 0 PID: 6701 Comm: syz.1.300 Not tainted syzkaller #0 PREEMPT(full) [ 143.548966][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 143.548979][ T6701] Call Trace: [ 143.548988][ T6701] [ 143.548998][ T6701] dump_stack_lvl+0xe8/0x150 [ 143.549041][ T6701] should_fail_ex+0x3eb/0x540 [ 143.549077][ T6701] get_futex_key+0x1ab/0x1410 [ 143.549113][ T6701] ? __pfx_futex_wake_mark+0x10/0x10 [ 143.549152][ T6701] ? __pfx_get_futex_key+0x10/0x10 [ 143.549196][ T6701] futex_wake+0x119/0x5f0 [ 143.549241][ T6701] ? __pfx_futex_wake+0x10/0x10 [ 143.549281][ T6701] ? pin_kill+0x2b2/0x540 [ 143.549316][ T6701] do_futex+0x458/0x4e0 [ 143.549346][ T6701] ? __pfx_do_futex+0x10/0x10 [ 143.549380][ T6701] __se_sys_futex+0x3a8/0x450 [ 143.549409][ T6701] ? __se_sys_acct+0x3b1/0x9d0 [ 143.549435][ T6701] ? __pfx___se_sys_futex+0x10/0x10 [ 143.549460][ T6701] ? __pfx___se_sys_acct+0x10/0x10 [ 143.549494][ T6701] ? __x64_sys_futex+0x21/0xf0 [ 143.549522][ T6701] do_syscall_64+0x166/0x520 [ 143.549551][ T6701] ? trace_irq_disable+0x3b/0x140 [ 143.549583][ T6701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.549628][ T6701] ? clear_bhb_loop+0x70/0xc0 [ 143.549657][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.549680][ T6701] RIP: 0033:0x7f8087b9f559 [ 143.549701][ T6701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.549719][ T6701] RSP: 002b:00007f8088ae40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.549743][ T6701] RAX: ffffffffffffffda RBX: 00007f8087e25fa8 RCX: 00007f8087b9f559 [ 143.549765][ T6701] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8087e25fac [ 143.549780][ T6701] RBP: 00007f8087e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 143.549796][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.549809][ T6701] R13: 00007f8087e26038 R14: 00007fff29362a60 R15: 00007fff29362b48 [ 143.549842][ T6701] [ 143.723667][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.723727][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.723802][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.818505][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.818525][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.818554][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.034719][ T6517] hsr_slave_0: entered promiscuous mode [ 144.039691][ T6517] hsr_slave_1: entered promiscuous mode [ 144.053711][ T6714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.303'. [ 144.189543][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 144.210422][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.440940][ T5638] Bluetooth: hci2: command tx timeout [ 144.609761][ T6517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.617989][ T998] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.636523][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.662454][ T6517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.682782][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.685777][ T6517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.729766][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.739617][ T6517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.765786][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.781800][ T998] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 144.783203][ T998] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.783261][ T998] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.783288][ T998] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.838446][ T998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.838482][ T998] usb 4-1: Product: syz [ 144.838500][ T998] usb 4-1: Manufacturer: syz [ 144.838518][ T998] usb 4-1: SerialNumber: syz [ 145.181675][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.263450][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.304634][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.304747][ T6220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.350425][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.350540][ T6220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.391242][ T998] usb 4-1: Cannot retrieve CPort count: -110 [ 145.391297][ T998] usb 4-1: Cannot retrieve CPort count: -110 [ 145.391325][ T998] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 145.777498][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 145.824184][ T6772] capability: warning: `syz.0.315' uses deprecated v2 capabilities in a way that may be insecure [ 146.246277][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 146.633169][ T6802] loop2: detected capacity change from 0 to 164 [ 146.653810][ T6802] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 146.910074][ T6813] loop0: detected capacity change from 0 to 512 [ 146.976565][ T6813] EXT4-fs (loop0): 1 truncate cleaned up [ 146.998650][ T6813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.057640][ T6813] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.327: bg 0: block 465: padding at end of block bitmap is not set [ 147.119984][ T5898] usb 4-1: USB disconnect, device number 3 [ 147.179194][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.207770][ T6818] loop2: detected capacity change from 0 to 1024 [ 147.253813][ T6818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.253938][ T6818] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.302473][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.451639][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.330'. [ 147.451676][ T6830] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 147.491219][ T6818] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.329: bg 0: block 112: padding at end of block bitmap is not set [ 147.692444][ T6836] loop1: detected capacity change from 0 to 2048 [ 147.729115][ T6836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.778015][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 148.005118][ T5637] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.300758][ T6517] veth0_vlan: entered promiscuous mode [ 148.331731][ T6517] veth1_vlan: entered promiscuous mode [ 148.356117][ T6860] loop3: detected capacity change from 0 to 512 [ 148.384057][ T6860] EXT4-fs (loop3): 1 truncate cleaned up [ 148.399985][ T6860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.459130][ T6517] veth0_macvtap: entered promiscuous mode [ 148.498226][ T6517] veth1_macvtap: entered promiscuous mode [ 148.570197][ T6860] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.340: bg 0: block 465: padding at end of block bitmap is not set [ 148.733357][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 148.744720][ T5898] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 148.797750][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.882951][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.978480][ T5898] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 149.022015][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.022073][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.022098][ T5898] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.120117][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.120149][ T5898] usb 2-1: Product: syz [ 149.120165][ T5898] usb 2-1: Manufacturer: syz [ 149.120180][ T5898] usb 2-1: SerialNumber: syz [ 149.170811][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.158061][ T5898] usb 2-1: Cannot retrieve CPort count: -110 [ 152.202987][ T5898] usb 2-1: Cannot retrieve CPort count: -110 [ 152.203615][ T5898] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 154.593907][ T6866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.596715][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.597356][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.597602][ T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.708365][ T5782] usb 2-1: USB disconnect, device number 2 [ 194.864465][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.869964][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.224788][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 212.225384][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 212.227658][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 212.228124][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 256.300512][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.303222][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.256298][ T5650] Bluetooth: hci2: command 0x0406 tx timeout [ 317.584297][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.587811][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.232473][ T36] INFO: task kworker/u8:7:207 blocked for more than 143 seconds. [ 346.232654][ T36] Not tainted syzkaller #0 [ 346.232811][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.232976][ T36] task:kworker/u8:7 state:D stack:23128 pid:207 tgid:207 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 346.233448][ T36] Workqueue: ipv6_addrconf addrconf_dad_work [ 346.233626][ T36] Call Trace: [ 346.233670][ T36] [ 346.242935][ T36] __schedule+0x17dd/0x5830 [ 346.243270][ T36] ? trace_event_buffer_commit+0x258/0x7a0 [ 346.325818][ T36] ? trace_event_raw_event_lock+0x1c7/0x280 [ 346.450711][ T36] ? __pfx___schedule+0x10/0x10 [ 346.515685][ T36] ? schedule+0x90/0x2b0 [ 346.577517][ T36] ? schedule+0x90/0x2b0 [ 346.578138][ T36] schedule+0x164/0x2b0 [ 346.670655][ T36] schedule_preempt_disabled+0x13/0x30 [ 346.675674][ T36] __mutex_lock+0x7c4/0x15a0 [ 346.736384][ T36] ? __mutex_lock+0x5cd/0x15a0 [ 346.737470][ T36] ? addrconf_dad_work+0x116/0x15c0 [ 346.737885][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 346.739711][ T36] ? trace_event_buffer_commit+0x258/0x7a0 [ 346.800701][ T36] addrconf_dad_work+0x116/0x15c0 [ 346.812846][ T36] ? __pfx_trace_event_raw_event_workqueue_execute_start+0x10/0x10 [ 346.813825][ T36] ? __pfx_addrconf_dad_work+0x10/0x10 [ 346.815706][ T36] ? rcu_is_watching+0x16/0xb0 [ 346.816591][ T36] ? process_scheduled_works+0x97a/0x1630 [ 346.817031][ T36] process_scheduled_works+0xc3d/0x1630 [ 346.898923][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.900191][ T36] ? assign_work+0x3cf/0x5d0 [ 347.024980][ T36] worker_thread+0xa47/0xfb0 [ 347.072061][ T36] ? __kthread_parkme+0x71/0x1f0 [ 347.131153][ T36] kthread+0x38b/0x480 [ 347.131627][ T36] ? __pfx_worker_thread+0x10/0x10 [ 347.187365][ T36] ? __pfx_kthread+0x10/0x10 [ 347.188287][ T36] ret_from_fork+0x514/0xb70 [ 347.188668][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 347.189052][ T36] ? __switch_to+0xc78/0x1410 [ 347.315183][ T36] ? __pfx_kthread+0x10/0x10 [ 347.315535][ T36] ret_from_fork_asm+0x1a/0x30 [ 347.378815][ T36] [ 347.447226][ T36] INFO: task syz-executor:6517 blocked for more than 144 seconds. [ 347.447357][ T36] Not tainted syzkaller #0 [ 347.447480][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.447609][ T36] task:syz-executor state:D stack:20888 pid:6517 tgid:6517 ppid:1 task_flags:0x400140 flags:0x00080002 [ 347.447997][ T36] Call Trace: [ 347.448159][ T36] [ 347.523351][ T36] __schedule+0x17dd/0x5830 [ 347.523979][ T36] ? trace_event_buffer_commit+0x258/0x7a0 [ 347.525183][ T36] ? trace_event_raw_event_lock+0x1c7/0x280 [ 347.662676][ T36] ? __pfx___schedule+0x10/0x10 [ 347.729596][ T36] ? schedule+0x90/0x2b0 [ 347.779434][ T36] ? schedule+0x90/0x2b0 [ 347.780542][ T36] schedule+0x164/0x2b0 [ 347.879565][ T36] schedule_preempt_disabled+0x13/0x30 [ 347.879967][ T36] __mutex_lock+0x7c4/0x15a0 [ 347.880437][ T36] ? __mutex_lock+0x5cd/0x15a0 [ 347.929390][ T36] ? reg_process_self_managed_hints+0xae/0x170 [ 347.930042][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 348.014778][ T36] ? __pfx_reg_process_self_managed_hint+0x10/0x10 [ 348.138370][ T36] reg_process_self_managed_hints+0xae/0x170 [ 348.139080][ T36] wiphy_register+0x25a0/0x3290 [ 348.181845][ T36] ? __pfx_wiphy_register+0x10/0x10 [ 348.182510][ T36] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 348.183642][ T36] ? ieee80211_init_rate_ctrl_alg+0x501/0x540 [ 348.249955][ T36] ieee80211_register_hw+0x3d72/0x4b30 [ 348.301266][ T36] ? ieee80211_register_hw+0x19b1/0x4b30 [ 348.352951][ T36] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 348.409801][ T36] ? __asan_memset+0x22/0x50 [ 348.410088][ T36] ? __hrtimer_setup+0x1b7/0x260 [ 348.410343][ T36] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 348.502732][ T36] mac80211_hwsim_new_radio+0x32f1/0x5990 [ 348.608395][ T36] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 348.608886][ T36] ? trace_kmalloc+0x2a/0xf0 [ 348.610696][ T36] hwsim_new_radio_nl+0xd8b/0xf90 [ 348.752596][ T36] genl_family_rcv_msg_doit+0x233/0x340 [ 348.753252][ T36] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 348.785187][ T36] ? bpf_lsm_capable+0x9/0x20 [ 348.785440][ T36] ? security_capable+0x7e/0x2c0 [ 348.911087][ T36] genl_rcv_msg+0x614/0x7a0 [ 348.912168][ T36] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.955889][ T36] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 348.956489][ T36] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 349.002377][ T36] netlink_rcv_skb+0x226/0x4a0 [ 349.030538][ T36] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.135683][ T36] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.200733][ T36] ? down_read+0x2b9/0x320 [ 349.205261][ T36] genl_rcv+0x28/0x40 [ 349.205716][ T36] netlink_unicast+0x8ef/0xa80 [ 349.208059][ T36] netlink_sendmsg+0x7f0/0xb20 [ 349.209372][ T36] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.210226][ T36] ? aa_sock_msg_perm+0x144/0x210 [ 349.285155][ T36] ? apparmor_socket_sendmsg+0x98/0x360 [ 349.285552][ T36] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.285837][ T36] sock_sendmsg_nosec+0x14e/0x190 [ 349.405676][ T36] __sys_sendto+0x408/0x5a0 [ 349.406703][ T36] ? __pfx___sys_sendto+0x10/0x10 [ 349.532188][ T36] ? trace_syscall_enter+0x58/0x110 [ 349.549779][ T36] __x64_sys_sendto+0xde/0x100 [ 349.550489][ T36] do_syscall_64+0x166/0x520 [ 349.709025][ T36] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.709241][ T36] ? clear_bhb_loop+0x70/0xc0 [ 349.709980][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.710320][ T36] RIP: 0033:0x7f4db755fd8e [ 349.756537][ T36] RSP: 002b:00007fffdd8a12c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 349.806078][ T36] RAX: ffffffffffffffda RBX: 000055557f6f2500 RCX: 00007f4db755fd8e [ 349.806213][ T36] RDX: 0000000000000024 RSI: 00007f4db8354670 RDI: 0000000000000003 [ 349.806340][ T36] RBP: 0000000000000001 R08: 00007fffdd8a1344 R09: 000000000000000c [ 349.806481][ T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 349.806622][ T36] R13: 0000000000000000 R14: 00007f4db8354670 R15: 0000000000000000 [ 349.947419][ T36] [ 349.948151][ T36] [ 349.948151][ T36] Showing all locks held in the system: [ 349.948196][ T36] locks held by kworker/u8:1/14: 3, last CPU#0: [ 349.948250][ T36] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 350.035382][ T36] #1: ffffc90000137c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 350.036402][ T36] #2: ffff888067c50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 350.037145][ T36] locks held by kworker/1:1/32: 2, last CPU#1: [ 350.256629][ T36] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 350.257549][ T36] #1: ffffc90000a87c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 350.258590][ T36] locks held by kworker/u8:2/34: 4, last CPU#0: [ 350.258636][ T36] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 350.367414][ T36] #1: ffffc90000aa7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 350.368334][ T36] #2: ffff888067c40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 350.449735][ T36] #3: ffff8880b823c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 350.450127][ T36] locks held by khungtaskd/36: 1, last CPU#0: [ 350.450232][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 350.579737][ T36] locks held by kworker/u8:3/53: 4, last CPU#0: [ 350.580022][ T36] #0: ffff88801d2ae148 ((wq_completion)vmap_drain){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 350.643174][ T36] #1: ffffc90000be7c40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 350.643867][ T36] #2: ffffffff90290780 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 350.747923][ T36] #3: ffff8880b823c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 350.749043][ T36] locks held by kworker/u8:5/66: 3, last CPU#0: [ 350.796648][ T36] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 350.798291][ T36] #1: ffffc9000208fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 350.981829][ T36] #2: ffff8880b8326498 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 351.085288][ T36] locks held by kworker/u8:7/207: 3, on CPU#0: [ 351.085412][ T36] #0: ffff88801eb20948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.086423][ T36] #1: ffffc90002eb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.087178][ T36] #2: ffffffff91693d20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 351.177256][ T36] locks held by kworker/u8:8/288: 3, last CPU#1: [ 351.177353][ T36] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.283650][ T36] #1: ffffc90003067c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.284289][ T36] #2: ffff888079fbf258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 351.285492][ T36] locks held by kworker/u8:9/315: 6, last CPU#0: [ 351.385996][ T36] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.386719][ T36] #1: ffffc90003097c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.387296][ T36] #2: ffffffff8ffe61d0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 351.452824][ T36] #3: ffffffff9023cb20 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 351.453955][ T36] #4: ffffffff8fffd220 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 351.534269][ T36] #5: ffff8880b823c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 351.535058][ T36] locks held by klogd/4991: 1, last CPU#0: [ 351.535210][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 351.536458][ T36] locks held by getty/5390: 2, on CPU#0: [ 351.536682][ T36] #0: ffff888036eaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 351.673628][ T36] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 351.676717][ T36] locks held by syz-executor/5639: 1, last CPU#0: [ 351.676839][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 351.792445][ T36] locks held by kworker/0:4/5747: 2, last CPU#0: [ 351.792555][ T36] #0: ffff88802fcf7148 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.793588][ T36] #1: ffffc90004507c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.794361][ T36] locks held by kworker/u8:10/6219: 3, last CPU#0: [ 351.794425][ T36] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.892155][ T36] #1: ffffc900065f7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.893044][ T36] #2: ffff8880260a0258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 352.232660][ T36] locks held by kworker/u8:11/6220: 3, last CPU#0: [ 352.232761][ T36] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 352.233515][ T36] #1: ffffc90006627c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 352.234653][ T36] #2: ffff888029196258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 352.267698][ T36] locks held by syz-executor/6517: 5, on CPU#1: [ 352.267841][ T36] #0: ffffffff916f8028 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.269116][ T36] #1: ffffffff916f7e60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 352.478935][ T36] #2: ffffffff91693d20 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_register+0x207b/0x3290 [ 352.479488][ T36] #3: ffffffff918dc280 (cfg80211_mutex){+.+.}-{4:4}, at: wiphy_register+0x2089/0x3290 [ 352.544711][ T36] #4: ffff888067c50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xae/0x170 [ 352.545441][ T36] locks held by syz.0.336/6851: 8, last CPU#0: [ 352.545588][ T36] #0: ffff888072959430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 352.706835][ T36] #1: ffff888022ae0478 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 352.707334][ T36] #2: ffffffff901cda80 (event_mutex){+.+.}-{4:4}, at: ftrace_set_clr_event+0x476/0x680 [ 352.789537][ T36] #3: ffffffff901bc4c0 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register+0x3f/0x90 [ 352.790360][ T36] #4: ffffffff8ffe61d0 (cpu_hotplug_lock){++++}-{0:0}, at: __static_call_update+0x9b/0x620 [ 352.909893][ T36] #5: ffffffff90232460 (static_call_mutex){+.+.}-{4:4}, at: __static_call_update+0xa9/0x620 [ 353.000280][ T36] #6: ffff8880b823c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 353.030451][ T36] #7: ffff8880b8224708 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 353.044615][ T36] locks held by kworker/u8:13/6873: 4, last CPU#0: [ 353.044657][ T36] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 353.046863][ T36] #1: ffffc90004a5fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 353.047292][ T36] #2: ffffffff8ffe61d0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 353.048543][ T36] #3: ffffffff9023cb20 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 353.050006][ T36] locks held by syz-executor/6874: 1, last CPU#0: [ 353.050136][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 353.429596][ T36] locks held by dhcpcd-run-hook/6875: 4, last CPU#0: [ 353.429665][ T36] #0: ffffffff9023a5b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 353.430257][ T36] #1: ffff888032e68340 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 [ 353.530722][ T36] #2: ffff88807e8c4080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 [ 353.625550][ T36] #3: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 353.682168][ T36] locks held by kworker/u8:14/6876: 4, last CPU#1: [ 353.682363][ T36] #0: ffff88803374e148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 353.794510][ T36] #1: ffffc90003ab7c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 353.795419][ T36] #2: ffff8880556eb9c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 353.860124][ T36] #3: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x41f/0xfc0 [ 353.864222][ T36] locks held by syz-executor/6877: 4, last CPU#1: [ 353.864595][ T36] #0: ffffffff9023a5b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 353.929496][ T36] #1: ffff888032de3440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 [ 353.930059][ T36] #2: ffff888032de2800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 [ 354.054641][ T36] #3: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 354.055494][ T36] locks held by syz-executor/6880: 2, last CPU#1: [ 354.055657][ T36] #0: ffff888032de4080 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 354.238968][ T36] #1: ffff8880b833c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 354.240049][ T36] locks held by syz-executor/6884: 1, last CPU#1: [ 354.354676][ T36] #0: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 354.355750][ T36] locks held by kworker/1:8/6889: 2, last CPU#1: [ 354.355945][ T36] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.357097][ T36] #1: ffffc9000497fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.438497][ T36] [ 354.438537][ T36] ============================================= [ 354.438537][ T36] [ 354.438591][ T36] NMI backtrace for cpu 1 [ 354.438630][ T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 354.438678][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 354.438718][ T36] Call Trace: [ 354.438800][ T36] [ 354.438902][ T36] dump_stack_lvl+0xe8/0x150 [ 354.439396][ T36] nmi_cpu_backtrace+0x274/0x2d0 [ 354.439858][ T36] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 354.440423][ T36] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 354.440779][ T36] sys_info+0x135/0x170 [ 354.441033][ T36] watchdog+0x1073/0x10f0 [ 354.442218][ T36] ? watchdog+0x209/0x10f0 [ 354.443244][ T36] kthread+0x38b/0x480 [ 354.443854][ T36] ? __pfx_watchdog+0x10/0x10 [ 354.443913][ T36] ? __pfx_kthread+0x10/0x10 [ 354.444211][ T36] ret_from_fork+0x514/0xb70 [ 354.444935][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 354.445508][ T36] ? __switch_to+0xc78/0x1410 [ 354.445922][ T36] ? __pfx_kthread+0x10/0x10 [ 354.446419][ T36] ret_from_fork_asm+0x1a/0x30 [ 354.448353][ T36] [ 354.453895][ T36] Sending NMI from CPU 1 to CPUs 0: [ 354.454077][ C0] NMI backtrace for cpu 0 [ 354.454170][ C0] CPU: 0 UID: 0 PID: 35 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 354.454224][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 354.454245][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x80 [ 354.454305][ C0] Code: 65 48 8b 0d a8 3b 18 13 65 48 8b 15 a8 3b 18 13 f7 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 <81> fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 [ 354.454337][ C0] RSP: 0018:ffffc90000007670 EFLAGS: 00000246 [ 354.454395][ C0] RAX: ffffffff81cdca71 RBX: ffff88813fe0a000 RCX: ffff8880202a8000 [ 354.454434][ C0] RDX: 0000000000000102 RSI: 0000000000000100 RDI: 0000000000000000 [ 354.454472][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 1ffff11027fc9a22 [ 354.454514][ C0] R10: dffffc0000000000 R11: ffffed1027fc9a23 R12: 1ffffffff2037fb4 [ 354.454560][ C0] R13: 0000000000000000 R14: ffffffff901bfda0 R15: 0000000000000000 [ 354.454605][ C0] FS: 0000000000000000(0000) GS:ffff88812340b000(0000) knlGS:0000000000000000 [ 354.454656][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.454707][ C0] CR2: 00007f0d26a047b8 CR3: 000000007f8a2000 CR4: 00000000003526f0 [ 354.454764][ C0] Call Trace: [ 354.454843][ C0] [ 354.454896][ C0] trace_buffer_unlock_commit_regs+0x101/0x520 [ 354.455153][ C0] ? ring_buffer_event_data+0x94/0x100 [ 354.455544][ C0] trace_event_buffer_commit+0x223/0x7a0 [ 354.457304][ C0] trace_event_raw_event_lock+0x1c7/0x280 [ 354.457675][ C0] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 354.457775][ C0] ? lock_acquire+0x115/0x350 [ 354.458661][ C0] ? lock_acquire+0x115/0x350 [ 354.459049][ C0] ? unwind_next_frame+0x8f/0x2550 [ 354.459186][ C0] ? unwind_next_frame+0x8f/0x2550 [ 354.459353][ C0] lock_release+0x396/0x3c0 [ 354.459746][ C0] ? deref_stack_reg+0x18e/0x220 [ 354.460334][ C0] ? unwind_next_frame+0x8f/0x2550 [ 354.460447][ C0] unwind_next_frame+0x1baa/0x2550 [ 354.461056][ C0] ? __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 354.461356][ C0] ? unwind_next_frame+0x8f/0x2550 [ 354.462044][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 354.462208][ C0] arch_stack_walk+0x11b/0x150 [ 354.463091][ C0] ? rcu_free_sheaf+0x31/0x200 [ 354.463855][ C0] stack_trace_save+0xa9/0x100 [ 354.464085][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 354.464816][ C0] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 354.465096][ C0] ? ring_buffer_event_data+0x94/0x100 [ 354.465468][ C0] kasan_save_track+0x3e/0x80 [ 354.465573][ C0] ? kasan_save_track+0x3e/0x80 [ 354.465671][ C0] ? kasan_save_free_info+0x40/0x50 [ 354.465777][ C0] ? __kasan_slab_free+0x5c/0x80 [ 354.465901][ C0] ? __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 354.470600][ C0] kasan_save_free_info+0x40/0x50 [ 354.470904][ C0] __kasan_slab_free+0x5c/0x80 [ 354.471530][ C0] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 354.472102][ C0] ? rcu_core+0x8b0/0x1230 [ 354.472377][ C0] rcu_free_sheaf+0x31/0x200 [ 354.472981][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 354.473460][ C0] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 354.473671][ C0] ? rcu_core+0x8b0/0x1230 [ 354.473841][ C0] rcu_core+0x92e/0x1230 [ 354.475624][ C0] ? __pfx_rcu_core+0x10/0x10 [ 354.475755][ C0] ? sched_balance_domains+0x770/0x880 [ 354.476925][ C0] ? sched_balance_domains+0xe8/0x880 [ 354.477376][ C0] handle_softirqs+0x265/0x8d0 [ 354.478545][ C0] __irq_exit_rcu+0xc6/0x220 [ 354.478843][ C0] irq_exit_rcu+0x9/0x30 [ 354.479017][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 354.479305][ C0] [ 354.479376][ C0] [ 354.479642][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 354.479757][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 354.479813][ C0] Code: f7 e8 9d 34 9d f5 f7 c3 00 02 00 00 74 05 e8 e0 dc c9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d4 28 8e f5 65 48 8b 05 ac c1 d9 08 48 85 c0 74 18 5b 41 5e c3 [ 354.479847][ C0] RSP: 0018:ffffc90000ab7ca8 EFLAGS: 00000206 [ 354.479906][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 354.479944][ C0] RDX: 0000000000000000 RSI: ffffffff8e6a8c20 RDI: 0000000000000001 [ 354.479983][ C0] RBP: ffffc90000ab7e18 R08: ffffffff91bdfabf R09: 1ffffffff237bf57 [ 354.480033][ C0] R10: dffffc0000000000 R11: fffffbfff237bf58 R12: 0000000000000002 [ 354.480079][ C0] R13: ffff8880202a8000 R14: ffffffff9c203ee0 R15: dffffc0000000000 [ 354.481513][ C0] nbcon_kthread_func+0x724/0x8d0 [ 354.482730][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 354.482889][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 354.484022][ C0] ? __kthread_parkme+0x71/0x1f0 [ 354.484529][ C0] ? __kthread_parkme+0x199/0x1f0 [ 354.485271][ C0] kthread+0x38b/0x480 [ 354.485850][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 354.486099][ C0] ? __pfx_kthread+0x10/0x10 [ 354.486383][ C0] ret_from_fork+0x514/0xb70 [ 354.486942][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 354.487442][ C0] ? __switch_to+0xc78/0x1410 [ 354.488337][ C0] ? __pfx_kthread+0x10/0x10 [ 354.488795][ C0] ret_from_fork_asm+0x1a/0x30 [ 354.490916][ C0] [ 355.859975][ T36] Kernel panic - not syncing: hung_task: blocked tasks [ 356.017986][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 356.027150][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 356.037279][ T36] Call Trace: [ 356.040653][ T36] [ 356.043693][ T36] vpanic+0x26f/0x710 [ 356.048288][ T36] panic+0xc5/0xd0 [ 356.052494][ T36] ? __pfx_panic+0x10/0x10 [ 356.057232][ T36] ? preempt_schedule_common+0x7f/0xd0 [ 356.063003][ T36] ? preempt_schedule_thunk+0x16/0x40 [ 356.068847][ T36] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 356.075618][ T36] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 356.082681][ T36] watchdog+0x10e7/0x10f0 [ 356.087901][ T36] ? watchdog+0x209/0x10f0 [ 356.093399][ T36] kthread+0x38b/0x480 [ 356.097863][ T36] ? __pfx_watchdog+0x10/0x10 [ 356.102732][ T36] ? __pfx_kthread+0x10/0x10 [ 356.108143][ T36] ret_from_fork+0x514/0xb70 [ 356.113236][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 356.118646][ T36] ? __switch_to+0xc78/0x1410 [ 356.124158][ T36] ? __pfx_kthread+0x10/0x10 [ 356.129321][ T36] ret_from_fork_asm+0x1a/0x30 [ 356.135904][ T36] [ 356.139207][ T36] Kernel Offset: disabled [ 356.143650][ T36] Rebooting in 86400 seconds..