last executing test programs: 13.007034346s ago: executing program 1 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setuid(0xee01) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x8000000000000001, 0x9}) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4400c881, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_opts(r6, 0x0, 0xd, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x28, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 7.458408954s ago: executing program 1 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'V'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 7.24770502s ago: executing program 1 (id=442): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x57, 0xec}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102400, 0x19000) r6 = semget$private(0x0, 0x20000000102, 0x0) semop(r6, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}], 0x1) semctl$SETALL(r6, 0x0, 0x11, 0x0) 6.219593985s ago: executing program 1 (id=444): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000300003000000000000040000000000000000000000000000000000000000fc0200000000000000000000000000000300050000000000020000fee0412986bcf9b40020000000030006000000000002"], 0x80}}, 0x0) 6.174261927s ago: executing program 3 (id=445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, {0x81, 0x80, 0x94, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 6.075047809s ago: executing program 2 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x204) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0x7ffffffd, 0x4) bind$l2tp(r4, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fbff000014002000ffffffffffff00000000ffff0000000008000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) 5.919785193s ago: executing program 3 (id=447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x8, 0xe, 0x0, &(0x7f0000000900)="35850000c70d85ffb782762f280d", 0x0, 0xffc2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.055398654s ago: executing program 2 (id=448): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) 4.884975508s ago: executing program 2 (id=449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.739020682s ago: executing program 3 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) kexec_load(0x20000000, 0x0, 0x0, 0x2a0000) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f00000001c0)=@s={0x5, @SEQ_MIDIPUTC=0xed, 0x10, 0x36}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000002c0)=""/48, 0x30) getdents64(r4, 0xfffffffffffffffe, 0x29) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) socket(0x10, 0x803, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x2, 0x2, 0x39565559, 0x1, 0x0, [{0x7, 0x1}, {0x2, 0x535}, {0x7, 0x1ff}, {0x5, 0x338b}, {0x4, 0x2}, {0x4, 0x3}, {0xe, 0x6}, {0x4, 0x4a}], 0x2, 0x7, 0x7, 0x0, 0x2}}) 4.738769322s ago: executing program 2 (id=451): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 3.699208988s ago: executing program 2 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa090400"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000d0}, 0xffffffffffffff90, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1050}, 0x20008801) 3.698052168s ago: executing program 0 (id=460): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) writev(r0, &(0x7f0000001a00)=[{&(0x7f0000000940)="88", 0x1}], 0x1) 3.687454018s ago: executing program 3 (id=453): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0xa}) 2.746974751s ago: executing program 0 (id=454): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x6000170) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc100092e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$eJzs2r9rZFUUB/Dzkqwbs2Qn4i92QbxooTaPTWqLDbILYkDRHWEtZN+aFx3ynAl5QyAWJtXa+idYi6WdIFvapPEvsLCRNCm3EJ9kZjSJxCxpZkL4fJocOPlyz+NeLreY/be//XJ9rc7Xin5MZVlM3Y7deJLFQkzFP3bjrTfu//LKR/c/eW95ZeXOhyndXb63uJRSuv7qz9Pxw2uP+9c+/vH6T1djb+HT/YOl3/de2rux/9e9Lzp16tSp2+unIj3s9frFw6pMq516PU/pg6os6jJ1unW5eaK/VvU2NrZT0V2dn9vYLOs6Fd3ttF5up34v9bOZVHxedLopz/M0Pxec5Zmn9NvfP2maOGiuPIimaZ79Lq49jvnfohXZcyl7/nb24oPs5d3sxkHTtMY0MeN1xv4v2//L79ilPhtRfbPV3moP/w77y2vRiSrKuBWt+DMOj8nIsL777sqdW2lgIR5VO6P8zlZ7+mR+MVqxcHp+cZhP8aj6Y3Rj7Wy1r8ZcxJWIUX4pWvHC6fmlo/xg/enB+rPx5uvH1s+jFb9+Fr2oYjUOs0f5rxdTeuf9lXRy/puD/wMAuGzy9K9T3295/n/9Yf4c78P/vK9m4ubMZL+diHr7q/WiqspNRVVuzl6MMS5DEZENDlg2OmjHWof3wgWYUHFmMdFriTE52vRJTwIAAAAAAAAAAMB5jOPnhJP+RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GL7OwAA//9TB8zx") r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x40) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0xe) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x9, 0x0, 0xffff}, 0x20) sendmsg$inet6(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)}, 0x400c0c0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f0000000380)=ANY=[], 0x1009, 0x1) 2.746715831s ago: executing program 1 (id=455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.655916544s ago: executing program 1 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 2.655784414s ago: executing program 3 (id=457): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="080000000000000000000000000000000000000086"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) 2.550945677s ago: executing program 3 (id=458): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x6bf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x1}, 0x1}, 0x18) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='iocharset', &(0x7f0000000100)='iocharset', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) syz_usb_connect$uac2(0x3, 0x136, &(0x7f0000000fc0)=ANY=[@ANYBLOB], &(0x7f0000000900)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x6, 0x99, 0x3, 0x8, 0x2e}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x240a}}, {0xc1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2001}}]}) 1.633365389s ago: executing program 2 (id=459): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @broadcast}]}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {{0xa}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) eventfd2(0x50, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) 1.332314137s ago: executing program 0 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x3c, 0x13, 0x401, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x72800, 0x183}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6ccf6}, @IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2802c8d1}, 0x4000000) 1.167117041s ago: executing program 0 (id=462): socket$inet6_udp(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0xe) 148.383136ms ago: executing program 0 (id=463): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c40)=@newsa={0xf0, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@remote, @in=@multicast1, 0x4e20, 0x1, 0x4ea1, 0x602, 0x2, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0x4d2, 0xe}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x8d5, 0x0, 0x743}, {0x4, 0x7fffffffffffffff}, {0x0, 0x4}, 0x70bd28, 0x3500, 0x2, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 0s ago: executing program 0 (id=464): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0xa00}, {0x0, 0x100000000000000}]}, 0x68) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 73.134754][ T5757] cgroup: Unknown subsys name 'net' [ 73.293624][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.658816][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.136899][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.148228][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.157734][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.166006][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.175079][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.183191][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.197602][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.205025][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.214314][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.222140][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.229863][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.237405][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.245962][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.253797][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.261438][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.283992][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.305294][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.312989][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.321787][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.328930][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.337479][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.345664][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.353241][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.360328][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.728701][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.750335][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 76.875619][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.920474][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.929752][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.936968][ T5776] bridge_slave_0: entered allmulticast mode [ 76.943940][ T5776] bridge_slave_0: entered promiscuous mode [ 76.954006][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 77.005831][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.013981][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.022972][ T5776] bridge_slave_1: entered allmulticast mode [ 77.030395][ T5776] bridge_slave_1: entered promiscuous mode [ 77.037503][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.044617][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.052014][ T5768] bridge_slave_0: entered allmulticast mode [ 77.059464][ T5768] bridge_slave_0: entered promiscuous mode [ 77.092970][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.100227][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.107718][ T5768] bridge_slave_1: entered allmulticast mode [ 77.114342][ T5768] bridge_slave_1: entered promiscuous mode [ 77.144042][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.174058][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.215504][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.229634][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.278628][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.285785][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.295060][ T5772] bridge_slave_0: entered allmulticast mode [ 77.302978][ T5772] bridge_slave_0: entered promiscuous mode [ 77.311444][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.318689][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.325857][ T5772] bridge_slave_1: entered allmulticast mode [ 77.333213][ T5772] bridge_slave_1: entered promiscuous mode [ 77.342692][ T5776] team0: Port device team_slave_0 added [ 77.353647][ T5768] team0: Port device team_slave_0 added [ 77.371571][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.378772][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.385910][ T5773] bridge_slave_0: entered allmulticast mode [ 77.392999][ T5773] bridge_slave_0: entered promiscuous mode [ 77.411070][ T5776] team0: Port device team_slave_1 added [ 77.418569][ T5768] team0: Port device team_slave_1 added [ 77.424526][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.432904][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.441962][ T5773] bridge_slave_1: entered allmulticast mode [ 77.449341][ T5773] bridge_slave_1: entered promiscuous mode [ 77.493496][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.505661][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.552742][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.562984][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.570764][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.596967][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.611502][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.618506][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.644583][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.656321][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.663497][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.689605][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.713836][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.745822][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.755379][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.781827][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.795248][ T5772] team0: Port device team_slave_0 added [ 77.805209][ T5772] team0: Port device team_slave_1 added [ 77.840127][ T5773] team0: Port device team_slave_0 added [ 77.874989][ T5773] team0: Port device team_slave_1 added [ 77.896299][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.908208][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.935332][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.954250][ T5776] hsr_slave_0: entered promiscuous mode [ 77.962477][ T5776] hsr_slave_1: entered promiscuous mode [ 77.985909][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.992927][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.019034][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.061864][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.069118][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.095491][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.150331][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.157320][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.185086][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.203351][ T5772] hsr_slave_0: entered promiscuous mode [ 78.209711][ T5772] hsr_slave_1: entered promiscuous mode [ 78.215749][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.224262][ T5772] Cannot create hsr debugfs directory [ 78.234931][ T5768] hsr_slave_0: entered promiscuous mode [ 78.242306][ T5768] hsr_slave_1: entered promiscuous mode [ 78.248755][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.256309][ T5768] Cannot create hsr debugfs directory [ 78.278178][ T5086] Bluetooth: hci0: command tx timeout [ 78.324436][ T5773] hsr_slave_0: entered promiscuous mode [ 78.331688][ T5773] hsr_slave_1: entered promiscuous mode [ 78.338374][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.345926][ T5773] Cannot create hsr debugfs directory [ 78.357658][ T5086] Bluetooth: hci3: command tx timeout [ 78.447580][ T5086] Bluetooth: hci2: command tx timeout [ 78.453298][ T5086] Bluetooth: hci1: command tx timeout [ 78.714321][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.741915][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.762707][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.776979][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.849888][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.870276][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.888073][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.898711][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.966978][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.987221][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.007154][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.020326][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.115428][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.125908][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.139259][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.158024][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.175316][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.204293][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.227649][ T4808] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.235002][ T4808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.260011][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.267147][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.290889][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.331573][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.363727][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.370910][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.395401][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.412123][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.419298][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.465081][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.493606][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.527073][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.534209][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.585901][ T4808] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.593146][ T4808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.665339][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.731205][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.769538][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.776733][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.828350][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.835517][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.936878][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.102256][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.112828][ T5776] veth0_vlan: entered promiscuous mode [ 80.152456][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.174938][ T5776] veth1_vlan: entered promiscuous mode [ 80.302796][ T5773] veth0_vlan: entered promiscuous mode [ 80.324716][ T5772] veth0_vlan: entered promiscuous mode [ 80.343462][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.357844][ T5086] Bluetooth: hci0: command tx timeout [ 80.365185][ T5776] veth0_macvtap: entered promiscuous mode [ 80.374592][ T5772] veth1_vlan: entered promiscuous mode [ 80.391499][ T5773] veth1_vlan: entered promiscuous mode [ 80.413147][ T5776] veth1_macvtap: entered promiscuous mode [ 80.435694][ T5773] veth0_macvtap: entered promiscuous mode [ 80.438614][ T5086] Bluetooth: hci3: command tx timeout [ 80.465725][ T5773] veth1_macvtap: entered promiscuous mode [ 80.502233][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.513851][ T5772] veth0_macvtap: entered promiscuous mode [ 80.517801][ T5086] Bluetooth: hci1: command tx timeout [ 80.520646][ T5774] Bluetooth: hci2: command tx timeout [ 80.531904][ T5772] veth1_macvtap: entered promiscuous mode [ 80.544147][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.572363][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.581720][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.591102][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.601030][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.615348][ T5768] veth0_vlan: entered promiscuous mode [ 80.624649][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.635471][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.650341][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.678858][ T5768] veth1_vlan: entered promiscuous mode [ 80.692701][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.705040][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.716676][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.747009][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.755916][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.774432][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.783376][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.798326][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.811964][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.822286][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.835248][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.847183][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.882301][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.902619][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.913776][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.924958][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.936535][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.975961][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.980133][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.994459][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.004852][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.005855][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.021949][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.060794][ T5768] veth0_macvtap: entered promiscuous mode [ 81.084721][ T5768] veth1_macvtap: entered promiscuous mode [ 81.146511][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.160901][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.164436][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.171417][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.183647][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.191052][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.207733][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.218377][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.229428][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.279265][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.295507][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.311684][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.323206][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.334420][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.345092][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.355024][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.365637][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.378329][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.390766][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.400126][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.409534][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.418336][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.473422][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.502546][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.533323][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.533916][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.556680][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.580136][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.840202][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.881998][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.961730][ T5838] syz.2.3[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.995277][ T5838] loop2: detected capacity change from 0 to 128 [ 82.706606][ T5774] Bluetooth: hci0: command tx timeout [ 82.716274][ T5774] Bluetooth: hci3: command tx timeout [ 83.016998][ T5086] Bluetooth: hci2: command tx timeout [ 83.022716][ T5774] Bluetooth: hci1: command tx timeout [ 83.547355][ C0] sched: RT throttling activated [ 83.681264][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.722218][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.297522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 86.653847][ T5086] Bluetooth: hci1: command tx timeout [ 86.667452][ T5086] Bluetooth: hci3: command tx timeout [ 86.672904][ T5086] Bluetooth: hci0: command tx timeout [ 86.678430][ T5771] Bluetooth: hci2: command tx timeout [ 86.844490][ T1200] cfg80211: failed to load regulatory.db [ 87.857427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 88.554726][ T5854] loop1: detected capacity change from 0 to 32768 [ 88.589944][ T5854] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6 (5854) [ 88.733473][ T5854] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.744431][ T5854] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 88.753271][ T5854] BTRFS info (device loop1): use zlib compression, level 3 [ 88.760703][ T5854] BTRFS info (device loop1): turning on sync discard [ 88.767510][ T5854] BTRFS info (device loop1): using free space tree [ 91.650307][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 91.651507][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 91.661825][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 91.671300][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 91.681287][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 91.690691][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 91.700542][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 91.709867][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 91.719787][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 91.731044][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 91.741319][ T5854] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 91.764447][ T5854] BTRFS error (device loop1): open_ctree failed: -12 [ 92.083993][ T5759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5759) [ 92.521107][ T5883] ip_tables: iptables: counters copy to user failed while replacing table [ 94.798438][ T5893] syz_tun: entered allmulticast mode [ 94.869746][ T5893] syz_tun (unregistering): left allmulticast mode [ 95.778377][ T5904] loop2: detected capacity change from 0 to 1024 [ 95.785908][ T5904] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.159610][ T5904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.222766][ T5897] ip_tables: iptables: counters copy to user failed while replacing table [ 97.125590][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.679965][ T5925] CIFS mount error: No usable UNC path provided in device string! [ 97.679965][ T5925] [ 97.691122][ T5925] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 98.013531][ T9] IPVS: starting estimator thread 0... [ 98.462268][ T5928] IPVS: using max 18 ests per chain, 43200 per kthread [ 100.657574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.964983][ T28] audit: type=1326 audit(1791462041.378:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.3.20" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12e8b9e199 code=0x0 [ 101.356280][ T5938] FAULT_INJECTION: forcing a failure. [ 101.356280][ T5938] name failslab, interval 1, probability 0, space 0, times 1 [ 101.356435][ T5938] CPU: 0 PID: 5938 Comm: syz.0.22 Not tainted syzkaller #0 [ 101.356458][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.356478][ T5938] Call Trace: [ 101.356490][ T5938] [ 101.356499][ T5938] dump_stack_lvl+0x18c/0x250 [ 101.356528][ T5938] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 101.356554][ T5938] ? show_regs_print_info+0x20/0x20 [ 101.356573][ T5938] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 101.356621][ T5938] should_fail_ex+0x394/0x4c0 [ 101.356657][ T5938] should_failslab+0x9/0x20 [ 101.356687][ T5938] slab_pre_alloc_hook+0x59/0x300 [ 101.356713][ T5938] kmem_cache_alloc+0x5a/0x2c0 [ 101.356740][ T5938] ? __kernfs_new_node+0xe5/0x7f0 [ 101.356775][ T5938] __kernfs_new_node+0xe5/0x7f0 [ 101.356810][ T5938] ? kernfs_new_node+0x260/0x260 [ 101.356852][ T5938] ? up_write+0x1be/0x410 [ 101.356878][ T5938] kernfs_new_node+0x14c/0x260 [ 101.356912][ T5938] __kernfs_create_file+0x4b/0x2e0 [ 101.356937][ T5938] sysfs_add_file_mode_ns+0x237/0x2f0 [ 101.356968][ T5938] sysfs_merge_group+0x184/0x320 [ 101.356994][ T5938] ? sysfs_remove_groups+0xa0/0xa0 [ 101.357014][ T5938] ? device_add_attrs+0x725/0x830 [ 101.357044][ T5938] ? device_add_class_symlinks+0x240/0x240 [ 101.357076][ T5938] dpm_sysfs_add+0xd2/0x270 [ 101.357104][ T5938] device_add+0x55c/0xc40 [ 101.357133][ T5938] device_create+0x26a/0x300 [ 101.357164][ T5938] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 101.357192][ T5938] ? _raw_spin_unlock+0x40/0x40 [ 101.357219][ T5938] ? root_device_unregister+0x100/0x100 [ 101.357244][ T5938] ? update_attr+0x550/0x730 [ 101.357277][ T5938] ? is_console_locked+0x9/0x20 [ 101.357300][ T5938] ? csi_J+0xa16/0xea0 [ 101.357332][ T5938] vcs_make_sysfs+0x32/0x80 [ 101.357351][ T5938] vc_allocate+0x5a7/0x680 [ 101.357379][ T5938] ? vc_cons_allocated+0x70/0x70 [ 101.357416][ T5938] con_install+0xa0/0x720 [ 101.357443][ T5938] ? mutex_lock_nested+0x20/0x20 [ 101.357471][ T5938] ? show_tty_active+0x30/0x30 [ 101.357509][ T5938] tty_init_dev+0xd3/0x4c0 [ 101.357540][ T5938] tty_open+0x7dd/0xcc0 [ 101.357574][ T5938] ? __lock_acquire+0x7eb0/0x7eb0 [ 101.357609][ T5938] ? tty_compat_ioctl+0x8b0/0x8b0 [ 101.357642][ T5938] ? do_raw_spin_unlock+0x121/0x230 [ 101.357674][ T5938] chrdev_open+0x58c/0x600 [ 101.357703][ T5938] ? cd_forget+0x160/0x160 [ 101.357730][ T5938] ? cd_forget+0x160/0x160 [ 101.357759][ T5938] do_dentry_open+0x880/0x14b0 [ 101.357789][ T5938] ? cd_forget+0x160/0x160 [ 101.357818][ T5938] path_openat+0x284f/0x3270 [ 101.357864][ T5938] ? do_sys_openat2+0xda/0x1d0 [ 101.357887][ T5938] ? __x64_sys_openat+0x139/0x160 [ 101.357915][ T5938] ? verify_lock_unused+0x140/0x140 [ 101.357940][ T5938] ? do_filp_open+0x430/0x430 [ 101.357979][ T5938] do_filp_open+0x1f2/0x430 [ 101.358006][ T5938] ? vfs_tmpfile+0x620/0x620 [ 101.358055][ T5938] ? _raw_spin_unlock+0x28/0x40 [ 101.358080][ T5938] ? alloc_fd+0x590/0x640 [ 101.358115][ T5938] do_sys_openat2+0x134/0x1d0 [ 101.358144][ T5938] ? do_sys_open+0xe0/0xe0 [ 101.358170][ T5938] ? lockdep_hardirqs_on+0x98/0x150 [ 101.358207][ T5938] __x64_sys_openat+0x139/0x160 [ 101.358239][ T5938] do_syscall_64+0x55/0xb0 [ 101.358257][ T5938] ? clear_bhb_loop+0x40/0x90 [ 101.358277][ T5938] ? clear_bhb_loop+0x40/0x90 [ 101.358299][ T5938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.358329][ T5938] RIP: 0033:0x7fbb3615e9ce [ 101.358348][ T5938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.358365][ T5938] RSP: 002b:00007fbb37086b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.358389][ T5938] RAX: ffffffffffffffda RBX: 00007fbb370876c0 RCX: 00007fbb3615e9ce [ 101.358405][ T5938] RDX: 0000000000000002 RSI: 00007fbb37086c00 RDI: ffffffffffffff9c [ 101.358420][ T5938] RBP: 00007fbb36235888 R08: 0000000000000000 R09: 0000000000000000 [ 101.358433][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.358446][ T5938] R13: 00007fbb36426038 R14: 00007fbb36425fa0 R15: 00007ffcab9d6e98 [ 101.358478][ T5938] [ 103.576749][ T5938] tty tty20: ldisc open failed (-12), clearing slot 19 [ 105.336549][ T5958] loop3: detected capacity change from 0 to 512 [ 106.647923][ T5970] loop0: detected capacity change from 0 to 2048 [ 106.918504][ T5958] fscrypt: Error allocating hmac(sha512): -2 [ 106.957939][ T5970] NILFS (loop0): unrecognized mount option "’Å(£?€` [ 106.957939][ T5970] " [ 108.517127][ T5985] loop2: detected capacity change from 0 to 256 [ 110.006673][ T5987] tipc: Started in network mode [ 110.011769][ T5987] tipc: Node identity 4, cluster identity 4711 [ 110.017999][ T5987] tipc: Node number set to 4 [ 110.379043][ T5998] process 'syz.0.30' launched './file0' with NULL argv: empty string added [ 110.595757][ T6000] loop1: detected capacity change from 0 to 8 [ 110.668672][ T6000] SQUASHFS error: Failed to read block 0x4de: -5 [ 110.677128][ T6000] SQUASHFS error: Failed to read block 0x4de: -5 [ 110.694089][ T28] audit: type=1800 audit(1791462051.818:3): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.34" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 111.967279][ T6006] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 112.458664][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'. [ 112.687929][ T5811] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 113.032950][ T5811] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.190681][ T5811] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.227473][ T5811] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 113.256871][ T5811] usb 2-1: Product: syz [ 113.278329][ T5811] usb 2-1: Manufacturer: syz [ 113.332885][ T5811] hub 2-1:4.0: bad descriptor, ignoring hub [ 113.366831][ T5811] hub: probe of 2-1:4.0 failed with error -5 [ 113.376700][ T5761] udevd[5761]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 113.414039][ T5811] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 114.510756][ T5761] udevd[5761]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 114.920671][ T6020] ======================================================= [ 114.920671][ T6020] WARNING: The mand mount option has been deprecated and [ 114.920671][ T6020] and is ignored by this kernel. Remove the mand [ 114.920671][ T6020] option from the mount to silence this warning. [ 114.920671][ T6020] ======================================================= [ 115.026638][ T6020] overlayfs: conflicting options: userxattr,redirect_dir=on [ 115.096497][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 115.146437][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 115.187843][ T5884] usb 2-1: USB disconnect, device number 2 [ 115.317414][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 115.445875][ T6025] netlink: 'syz.1.40': attribute type 4 has an invalid length. [ 117.749580][ T6051] overlayfs: failed to resolve './file2': -2 [ 118.101280][ T6055] netlink: 292 bytes leftover after parsing attributes in process `syz.0.42'. [ 118.613222][ T6051] FAULT_INJECTION: forcing a failure. [ 118.613222][ T6051] name failslab, interval 1, probability 0, space 0, times 0 [ 118.626173][ T6051] CPU: 1 PID: 6051 Comm: syz.2.38 Not tainted syzkaller #0 [ 118.633380][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.643454][ T6051] Call Trace: [ 118.646739][ T6051] [ 118.649663][ T6051] dump_stack_lvl+0x18c/0x250 [ 118.654346][ T6051] ? show_regs_print_info+0x20/0x20 [ 118.659548][ T6051] ? load_image+0x420/0x420 [ 118.664053][ T6051] ? __might_sleep+0xe0/0xe0 [ 118.668640][ T6051] ? __lock_acquire+0x7eb0/0x7eb0 [ 118.673662][ T6051] should_fail_ex+0x394/0x4c0 [ 118.678366][ T6051] should_failslab+0x9/0x20 [ 118.682897][ T6051] slab_pre_alloc_hook+0x59/0x300 [ 118.687913][ T6051] ? __rwlock_init+0x150/0x150 [ 118.692673][ T6051] kmem_cache_alloc+0x5a/0x2c0 [ 118.697435][ T6051] ? key_alloc+0x306/0x1030 [ 118.701934][ T6051] key_alloc+0x306/0x1030 [ 118.706261][ T6051] keyring_alloc+0x45/0xb0 [ 118.710677][ T6051] look_up_user_keyrings+0x45d/0x670 [ 118.715960][ T6051] ? key_validate+0xf0/0xf0 [ 118.720454][ T6051] ? lookup_user_key+0xd1/0x1140 [ 118.725382][ T6051] lookup_user_key+0x361/0x1140 [ 118.730228][ T6051] ? lookup_user_key_possessed+0x40/0x40 [ 118.735850][ T6051] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 118.741821][ T6051] ? futex_unqueue+0xcb/0xf0 [ 118.746403][ T6051] ? futex_wait+0x4a7/0x5c0 [ 118.750929][ T6051] keyctl_get_persistent+0x24f/0x7a0 [ 118.756225][ T6051] ? futex_wait_setup+0x270/0x270 [ 118.761250][ T6051] ? proc_key_users_show+0x310/0x310 [ 118.766578][ T6051] __se_sys_keyctl+0x829/0xb50 [ 118.771375][ T6051] ? __x64_sys_keyctl+0xc0/0xc0 [ 118.776246][ T6051] ? do_futex+0x2ff/0x3e0 [ 118.780610][ T6051] ? __ia32_sys_get_robust_list+0x110/0x110 [ 118.786559][ T6051] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 118.792537][ T6051] ? lock_chain_count+0x20/0x20 [ 118.797392][ T6051] ? lockdep_hardirqs_on+0x98/0x150 [ 118.802592][ T6051] ? __x64_sys_keyctl+0x20/0xc0 [ 118.807433][ T6051] do_syscall_64+0x55/0xb0 [ 118.811857][ T6051] ? clear_bhb_loop+0x40/0x90 [ 118.816521][ T6051] ? clear_bhb_loop+0x40/0x90 [ 118.821185][ T6051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.827079][ T6051] RIP: 0033:0x7f13a5f9e199 [ 118.831487][ T6051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.851096][ T6051] RSP: 002b:00007f13a6f38028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 118.859516][ T6051] RAX: ffffffffffffffda RBX: 00007f13a6225fa0 RCX: 00007f13a5f9e199 [ 118.867489][ T6051] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 118.875449][ T6051] RBP: 00007f13a6035888 R08: 0000000000000000 R09: 0000000000000000 [ 118.883425][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.891386][ T6051] R13: 00007f13a6226038 R14: 00007f13a6225fa0 R15: 00007ffe1fe35cc8 [ 118.899359][ T6051] [ 119.060844][ T6063] syzkaller0: entered promiscuous mode [ 119.081911][ T6063] syzkaller0: entered allmulticast mode [ 119.252482][ T6063] tipc: Started in network mode [ 119.452468][ T6063] tipc: Node identity c294b551dae2, cluster identity 4711 [ 119.621643][ T6063] tipc: Enabled bearer , priority 0 [ 119.964673][ T6060] tipc: Resetting bearer [ 120.088133][ T6060] tipc: Disabling bearer [ 121.073004][ T6084] loop1: detected capacity change from 0 to 128 [ 121.436937][ T6093] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.454600][ T6093] Zero length message leads to an empty skb [ 122.028874][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.49'. [ 122.039850][ T6092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.49'. [ 125.869823][ T6123] syz.0.54 (6123) used greatest stack depth: 16600 bytes left [ 128.215274][ T6155] syz.3.60 uses obsolete (PF_INET,SOCK_PACKET) [ 129.231700][ T6155] loop3: detected capacity change from 0 to 1024 [ 129.290432][ T6155] EXT4-fs: Ignoring removed bh option [ 129.707674][ T6155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.326738][ T6168] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 131.479145][ T6174] netlink: 52 bytes leftover after parsing attributes in process `syz.0.64'. [ 132.084334][ T5768] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.127429][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.147887][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.209636][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.519492][ T6189] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 133.546590][ T6189] CIFS mount error: No usable UNC path provided in device string! [ 133.546590][ T6189] [ 133.556924][ T6189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.437513][ T5833] IPVS: starting estimator thread 0... [ 135.516056][ T6203] loop3: detected capacity change from 0 to 1024 [ 135.527640][ T6200] IPVS: using max 17 ests per chain, 40800 per kthread [ 137.197509][ T6223] netlink: 168 bytes leftover after parsing attributes in process `syz.3.71'. [ 138.056098][ T6232] ip_tables: iptables: counters copy to user failed while replacing table [ 144.119184][ T6271] sctp: [Deprecated]: syz.0.80 (pid 6271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.119184][ T6271] Use struct sctp_sack_info instead [ 144.958519][ T6272] netlink: 'syz.3.83': attribute type 10 has an invalid length. [ 145.147767][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.156171][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.180831][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.188052][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.196086][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.203310][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.221999][ T6272] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 151.244495][ T6295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.680523][ T6301] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 152.698259][ T5810] IPVS: starting estimator thread 0... [ 152.704639][ T6301] IPVS: sh: FWM 3 0x00000003 - no destination available [ 152.717215][ T6301] autofs4:pid:6301:autofs_fill_super: called with bogus options [ 152.817654][ T6307] IPVS: using max 21 ests per chain, 50400 per kthread [ 153.446142][ T6309] loop3: detected capacity change from 0 to 40427 [ 153.496254][ T6309] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 154.430516][ T6309] F2FS-fs (loop3): invalid crc value [ 154.436494][ T6309] F2FS-fs (loop3): invalid crc value [ 154.443238][ T6309] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 154.596086][ T6318] loop3: detected capacity change from 0 to 8 [ 154.687101][ T6318] SQUASHFS error: Unable to read inode 0x11f [ 154.830183][ T6312] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.484559][ T6343] batadv_slave_1: entered promiscuous mode [ 155.978201][ T6354] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 156.016663][ T6352] sctp: [Deprecated]: syz.2.104 (pid 6352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.016663][ T6352] Use struct sctp_sack_info instead [ 156.480263][ T6342] batadv_slave_1: left promiscuous mode [ 156.657559][ T5812] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.941296][ T5812] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.982228][ T5812] usb 2-1: config 2 has an invalid interface number: 247 but max is 1 [ 157.008959][ T5812] usb 2-1: config 2 has an invalid interface number: 33 but max is 1 [ 157.036090][ T5812] usb 2-1: config 2 has no interface number 0 [ 157.059788][ T5812] usb 2-1: config 2 has no interface number 1 [ 157.086205][ T5812] usb 2-1: config 2 interface 247 has no altsetting 0 [ 157.109228][ T5812] usb 2-1: config 2 interface 33 has no altsetting 0 [ 157.126589][ T5812] usb 2-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=81.34 [ 157.136536][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.176460][ T5812] usb 2-1: Product: syz [ 157.181394][ T5812] usb 2-1: Manufacturer: syz [ 157.189110][ T5812] usb 2-1: SerialNumber: syz [ 158.106184][ T5812] usb 2-1: USB disconnect, device number 3 [ 159.527928][ T6418] X.509: Couldn't decode AuthKeyIdentifier [ 159.822415][ T6400] loop3: detected capacity change from 0 to 32768 [ 159.913486][ T6400] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.115034][ T6400] XFS (loop3): Ending clean mount [ 160.339007][ T5768] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.629959][ T6462] sctp: [Deprecated]: syz.1.146 (pid 6462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.629959][ T6462] Use struct sctp_sack_info instead [ 160.663023][ T6460] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 162.170010][ T6497] sctp: [Deprecated]: syz.3.164 (pid 6497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.170010][ T6497] Use struct sctp_sack_info instead [ 162.215578][ T6495] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 163.758130][ T6547] netlink: 'syz.2.191': attribute type 7 has an invalid length. [ 163.779144][ T6549] capability: warning: `syz.1.193' uses deprecated v2 capabilities in a way that may be insecure [ 165.643887][ T6608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 165.707472][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 166.882301][ T6654] loop3: detected capacity change from 0 to 32768 [ 166.958024][ T6654] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.968485][ T6654] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 166.977186][ T6654] BTRFS info (device loop3): use zlib compression, level 3 [ 166.984519][ T6654] BTRFS info (device loop3): turning on sync discard [ 166.991226][ T6654] BTRFS info (device loop3): using free space tree [ 167.153721][ T6654] BTRFS info (device loop3): enabling ssd optimizations [ 167.180543][ T6682] loop1: detected capacity change from 0 to 512 [ 167.258840][ T6682] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.387673][ T6682] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 167.875677][ T5768] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.143971][ T6746] loop1: detected capacity change from 0 to 40427 [ 170.190212][ T6746] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 170.231311][ T6746] F2FS-fs (loop1): invalid crc value [ 170.267431][ T6746] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.238562][ T6746] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.664440][ T6813] loop3: detected capacity change from 0 to 8192 [ 172.710526][ T6813] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 172.818261][ T6813] ntfs3: loop3: ino=b, mi_enum_attr [ 172.826653][ T6813] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 172.860886][ T6813] ntfs3: loop3: Failed to load $Extend (-22). [ 172.867019][ T6813] ntfs3: loop3: Failed to initialize $Extend. [ 173.892437][ T6832] raw_sendmsg: syz.1.308 forgot to set AF_INET. Fix it! [ 174.378044][ T6843] tunl0: entered allmulticast mode [ 174.384062][ T6843] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 176.340046][ T5774] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 176.350362][ T5774] Bluetooth: hci2: Injecting HCI hardware error event [ 176.363225][ T5086] Bluetooth: hci2: hardware error 0x00 [ 177.661159][ T6864] netlink: 44 bytes leftover after parsing attributes in process `syz.2.323'. [ 177.885125][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.902218][ T28] audit: type=1800 audit(1791462119.038:4): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.329" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 177.923237][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.935975][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.945187][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.017666][ T6879] libceph: resolve '‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 178.036522][ T6880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.261269][ T6883] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 178.306854][ T6883] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 178.320300][ T6883] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 178.331718][ T6883] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 178.342134][ T6883] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 178.517508][ T5086] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 180.791503][ T6929] syz.3.345: attempt to access beyond end of device [ 180.791503][ T6929] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 180.804729][ T6929] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 181.507855][ T6923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.355'. [ 181.516896][ T6923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.355'. [ 182.039998][ T6945] netlink: 'syz.1.354': attribute type 10 has an invalid length. [ 182.059998][ T6945] geneve0: entered promiscuous mode [ 182.095179][ T6945] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 182.459162][ T6937] loop3: detected capacity change from 0 to 32768 [ 182.525343][ T6937] [ 182.525343][ T6937] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.525343][ T6937] [ 182.623558][ T6937] JFS: metapage_get_blocks failed [ 182.638991][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.361'. [ 182.648140][ T6961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.361'. [ 182.649575][ T6937] ERROR: (device loop3): release_metapage: metapage_write_one() failed [ 182.649575][ T6937] [ 182.746394][ T6937] ERROR: (device loop3): remounting filesystem as read-only [ 182.758131][ T6937] ERROR: (device loop3): diWrite: ixpxd invalid [ 182.758131][ T6937] [ 182.766891][ T6937] ERROR: (device loop3): txCommit: [ 182.766891][ T6937] [ 184.432029][ T6977] tipc: Started in network mode [ 184.436948][ T6977] tipc: Node identity 4, cluster identity 4711 [ 184.443204][ T6977] tipc: Node number set to 4 [ 184.820761][ T6958] loop1: detected capacity change from 0 to 65536 [ 184.881680][ T6958] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 184.972341][ T6958] XFS (loop1): Ending clean mount [ 185.182963][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 186.075815][ T6979] loop3: detected capacity change from 0 to 65536 [ 186.217033][ T6979] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 186.347140][ T6979] XFS (loop3): Ending clean mount [ 186.365184][ T7019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.379'. [ 186.407184][ T6979] XFS (loop3): Quotacheck needed: Please wait. [ 186.535698][ T6979] XFS (loop3): Quotacheck: Done. [ 187.287937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 187.440520][ T7021] tipc: Cannot configure node identity twice [ 187.713983][ T5768] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 187.714276][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.382'. [ 191.251080][ T7062] tipc: Started in network mode [ 191.257028][ T7062] tipc: Node identity 4, cluster identity 4711 [ 191.263403][ T7062] tipc: Node number set to 4 [ 192.122278][ T7074] overlayfs: failed to clone upperpath [ 192.132975][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.143024][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.158987][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.176729][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.309539][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.464898][ T7091] tipc: Cannot configure node identity twice [ 194.580359][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.586682][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.983602][ T7103] (null): rxe_set_mtu: Set mtu to 1024 [ 197.796409][ T7103] infiniband syz1: set active [ 197.801636][ T7103] infiniband syz1: added bond_slave_1 [ 197.811068][ T7103] syz1: rxe_create_cq: returned err = -12 [ 197.827659][ T7103] infiniband syz1: Couldn't create ib_mad CQ [ 197.836473][ T7103] infiniband syz1: Couldn't open port 1 [ 197.963161][ T7103] RDS/IB: syz1: added [ 197.968092][ T7103] smc: adding ib device syz1 with port count 1 [ 197.974496][ T7103] smc: ib device syz1 port 1 has pnetid [ 198.192215][ T7124] loop3: detected capacity change from 0 to 1024 [ 198.205705][ T7124] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.397789][ T7124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.437828][ T7124] ip_tables: iptables: counters copy to user failed while replacing table [ 198.739967][ T7131] netlink: 64 bytes leftover after parsing attributes in process `syz.1.423'. [ 198.779720][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.150382][ T7143] syz_tun: entered allmulticast mode [ 200.907046][ T7143] syz_tun (unregistering): left allmulticast mode [ 201.485179][ T7147] netlink: 104 bytes leftover after parsing attributes in process `syz.1.427'. [ 202.317706][ T5771] Bluetooth: hci1: command 0x0406 tx timeout [ 202.325193][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 202.397544][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 202.647774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 203.057368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 204.517183][ T7165] ip_tables: iptables: counters copy to user failed while replacing table [ 205.617502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 207.302638][ T7181] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 207.335758][ T7181] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 208.177455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 210.088259][ T7207] loop3: detected capacity change from 0 to 8 [ 212.385725][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.458'. [ 213.260626][ T7208] udevd[7208]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 214.574646][ T7247] smc: removing ib device syz1 [ 214.960788][ T7247] ------------[ cut here ]------------ [ 214.966305][ T7247] WARNING: CPU: 0 PID: 7247 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x42/0x50 [ 214.977044][ T7247] Modules linked in: [ 214.980968][ T7247] CPU: 0 PID: 7247 Comm: syz.2.459 Not tainted syzkaller #0 [ 214.988260][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.998429][ T7247] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 215.003913][ T7247] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 80 a4 fc f9 48 83 3b 00 75 07 e8 45 c3 a3 f9 5b c3 e8 3e c3 a3 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 215.023589][ T7247] RSP: 0018:ffffc9000b4d7128 EFLAGS: 00010246 [ 215.029686][ T7247] RAX: ffffffff87e3cd72 RBX: ffff8880791652f0 RCX: 0000000000080000 [ 215.038333][ T7247] RDX: ffffc9000d532000 RSI: 000000000007ffff RDI: 0000000000080000 [ 215.046311][ T7247] RBP: 0000000000000002 R08: ffff888079164753 R09: 1ffff1100f22c8ea [ 215.054304][ T7247] R10: dffffc0000000000 R11: ffffed100f22c8eb R12: dffffc0000000000 [ 215.062305][ T7247] R13: 0000000000000010 R14: ffffffff87e20a50 R15: dffffc0000000000 [ 215.070304][ T7247] FS: 00007f13a6f386c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 215.079268][ T7247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.085857][ T7247] CR2: 00007fbb36f556c8 CR3: 000000002c8f6000 CR4: 00000000003506f0 [ 215.093851][ T7247] Call Trace: [ 215.097137][ T7247] [ 215.100141][ T7247] rxe_dealloc+0x33/0x100 [ 215.104481][ T7247] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 215.111331][ T7247] ib_dealloc_device+0x4e/0x1f0 [ 215.116197][ T7247] __ib_unregister_device+0x110/0x170 [ 215.121587][ T7247] ib_unregister_device_and_put+0xb8/0xf0 [ 215.127339][ T7247] nldev_dellink+0x27b/0x310 [ 215.131946][ T7247] ? nldev_newlink+0x620/0x620 [ 215.136747][ T7247] ? apparmor_capable+0x137/0x1a0 [ 215.142227][ T7247] ? bpf_lsm_capable+0x9/0x10 [ 215.146904][ T7247] ? security_capable+0x89/0xb0 [ 215.151773][ T7247] ? nldev_newlink+0x620/0x620 [ 215.156535][ T7247] rdma_nl_rcv+0x6fd/0xa60 [ 215.161019][ T7247] ? rdma_nl_net_init+0x190/0x190 [ 215.166066][ T7247] ? __lock_acquire+0x7eb0/0x7eb0 [ 215.171120][ T7247] ? net_generic+0x1e/0x240 [ 215.175617][ T7247] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.180831][ T7247] netlink_unicast+0x7b1/0x930 [ 215.185593][ T7247] netlink_sendmsg+0x8d0/0xbf0 [ 215.190371][ T7247] ? netlink_getsockopt+0x590/0x590 [ 215.195564][ T7247] ? apparmor_socket_sendmsg+0x8e/0x330 [ 215.201117][ T7247] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.206393][ T7247] ? security_socket_sendmsg+0x80/0xa0 [ 215.211860][ T7247] ? netlink_getsockopt+0x590/0x590 [ 215.217059][ T7247] ____sys_sendmsg+0x61b/0x980 [ 215.221850][ T7247] ? __asan_memset+0x22/0x40 [ 215.226444][ T7247] ? __sys_sendmsg_sock+0x30/0x30 [ 215.231523][ T7247] ? __import_iovec+0x5f2/0x850 [ 215.236385][ T7247] ? import_iovec+0x73/0xa0 [ 215.240949][ T7247] ___sys_sendmsg+0x2a6/0x360 [ 215.246024][ T7247] ? __sys_sendmsg+0x2b0/0x2b0 [ 215.250851][ T7247] __se_sys_sendmsg+0x1d0/0x2c0 [ 215.255721][ T7247] ? __x64_sys_sendmsg+0x80/0x80 [ 215.260685][ T7247] ? lockdep_hardirqs_on+0x98/0x150 [ 215.265879][ T7247] do_syscall_64+0x55/0xb0 [ 215.270319][ T7247] ? clear_bhb_loop+0x40/0x90 [ 215.274987][ T7247] ? clear_bhb_loop+0x40/0x90 [ 215.279703][ T7247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.285595][ T7247] RIP: 0033:0x7f13a5f9e199 [ 215.290039][ T7247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.309705][ T7247] RSP: 002b:00007f13a6f38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.318617][ T7247] RAX: ffffffffffffffda RBX: 00007f13a6225fa0 RCX: 00007f13a5f9e199 [ 215.326653][ T7247] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 215.334773][ T7247] RBP: 00007f13a6035888 R08: 0000000000000000 R09: 0000000000000000 [ 215.342845][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.351248][ T7247] R13: 00007f13a6226038 R14: 00007f13a6225fa0 R15: 00007ffe1fe35cc8 [ 215.359281][ T7247] [ 215.362305][ T7247] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.369566][ T7247] CPU: 0 PID: 7247 Comm: syz.2.459 Not tainted syzkaller #0 [ 215.376918][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.386960][ T7247] Call Trace: [ 215.390226][ T7247] [ 215.393142][ T7247] dump_stack_lvl+0x18c/0x250 [ 215.397811][ T7247] ? show_regs_print_info+0x20/0x20 [ 215.403429][ T7247] ? load_image+0x420/0x420 [ 215.407928][ T7247] panic+0x2ca/0x720 [ 215.411815][ T7247] ? bpf_jit_dump+0xd0/0xd0 [ 215.416314][ T7247] __warn+0x2e0/0x470 [ 215.420302][ T7247] ? rxe_pool_cleanup+0x42/0x50 [ 215.425138][ T7247] ? rxe_pool_cleanup+0x42/0x50 [ 215.429975][ T7247] report_bug+0x2be/0x4f0 [ 215.434466][ T7247] ? rxe_pool_cleanup+0x42/0x50 [ 215.439300][ T7247] ? rxe_pool_cleanup+0x42/0x50 [ 215.444135][ T7247] ? rxe_pool_cleanup+0x44/0x50 [ 215.447780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 215.457178][ T7247] handle_bug+0xcf/0x120 [ 215.461416][ T7247] exc_invalid_op+0x1a/0x50 [ 215.465905][ T7247] asm_exc_invalid_op+0x1a/0x20 [ 215.470745][ T7247] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 215.476199][ T7247] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 80 a4 fc f9 48 83 3b 00 75 07 e8 45 c3 a3 f9 5b c3 e8 3e c3 a3 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 215.495823][ T7247] RSP: 0018:ffffc9000b4d7128 EFLAGS: 00010246 [ 215.501882][ T7247] RAX: ffffffff87e3cd72 RBX: ffff8880791652f0 RCX: 0000000000080000 [ 215.509842][ T7247] RDX: ffffc9000d532000 RSI: 000000000007ffff RDI: 0000000000080000 [ 215.517812][ T7247] RBP: 0000000000000002 R08: ffff888079164753 R09: 1ffff1100f22c8ea [ 215.525766][ T7247] R10: dffffc0000000000 R11: ffffed100f22c8eb R12: dffffc0000000000 [ 215.533728][ T7247] R13: 0000000000000010 R14: ffffffff87e20a50 R15: dffffc0000000000 [ 215.541707][ T7247] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 215.548463][ T7247] ? rxe_pool_cleanup+0x42/0x50 [ 215.553309][ T7247] ? rxe_pool_cleanup+0x42/0x50 [ 215.558151][ T7247] rxe_dealloc+0x33/0x100 [ 215.562551][ T7247] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 215.569311][ T7247] ib_dealloc_device+0x4e/0x1f0 [ 215.574192][ T7247] __ib_unregister_device+0x110/0x170 [ 215.579568][ T7247] ib_unregister_device_and_put+0xb8/0xf0 [ 215.585292][ T7247] nldev_dellink+0x27b/0x310 [ 215.589880][ T7247] ? nldev_newlink+0x620/0x620 [ 215.594704][ T7247] ? apparmor_capable+0x137/0x1a0 [ 215.599718][ T7247] ? bpf_lsm_capable+0x9/0x10 [ 215.604382][ T7247] ? security_capable+0x89/0xb0 [ 215.609222][ T7247] ? nldev_newlink+0x620/0x620 [ 215.613972][ T7247] rdma_nl_rcv+0x6fd/0xa60 [ 215.618402][ T7247] ? rdma_nl_net_init+0x190/0x190 [ 215.623429][ T7247] ? __lock_acquire+0x7eb0/0x7eb0 [ 215.628453][ T7247] ? net_generic+0x1e/0x240 [ 215.632953][ T7247] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.638180][ T7247] netlink_unicast+0x7b1/0x930 [ 215.642956][ T7247] netlink_sendmsg+0x8d0/0xbf0 [ 215.647716][ T7247] ? netlink_getsockopt+0x590/0x590 [ 215.652910][ T7247] ? apparmor_socket_sendmsg+0x8e/0x330 [ 215.658451][ T7247] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.663731][ T7247] ? security_socket_sendmsg+0x80/0xa0 [ 215.669173][ T7247] ? netlink_getsockopt+0x590/0x590 [ 215.674357][ T7247] ____sys_sendmsg+0x61b/0x980 [ 215.679114][ T7247] ? __asan_memset+0x22/0x40 [ 215.683721][ T7247] ? __sys_sendmsg_sock+0x30/0x30 [ 215.688747][ T7247] ? __import_iovec+0x5f2/0x850 [ 215.693603][ T7247] ? import_iovec+0x73/0xa0 [ 215.698102][ T7247] ___sys_sendmsg+0x2a6/0x360 [ 215.702776][ T7247] ? __sys_sendmsg+0x2b0/0x2b0 [ 215.707553][ T7247] __se_sys_sendmsg+0x1d0/0x2c0 [ 215.712394][ T7247] ? __x64_sys_sendmsg+0x80/0x80 [ 215.717360][ T7247] ? lockdep_hardirqs_on+0x98/0x150 [ 215.722555][ T7247] do_syscall_64+0x55/0xb0 [ 215.726956][ T7247] ? clear_bhb_loop+0x40/0x90 [ 215.731624][ T7247] ? clear_bhb_loop+0x40/0x90 [ 215.736288][ T7247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.742175][ T7247] RIP: 0033:0x7f13a5f9e199 [ 215.746587][ T7247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.766188][ T7247] RSP: 002b:00007f13a6f38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.774610][ T7247] RAX: ffffffffffffffda RBX: 00007f13a6225fa0 RCX: 00007f13a5f9e199 [ 215.782570][ T7247] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 215.790542][ T7247] RBP: 00007f13a6035888 R08: 0000000000000000 R09: 0000000000000000 [ 215.798498][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.806492][ T7247] R13: 00007f13a6226038 R14: 00007f13a6225fa0 R15: 00007ffe1fe35cc8 [ 215.814476][ T7247] [ 215.817748][ T7247] Kernel Offset: disabled [ 215.822142][ T7247] Rebooting in 86400 seconds..