last executing test programs: 5.99966213s ago: executing program 2 (id=453): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0), 0x0, 0x2, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000280)={0x80, r4, r2}) 5.816292355s ago: executing program 4 (id=457): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0xfffffffffffffffe, 0x1) 5.59881705s ago: executing program 2 (id=458): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0xffffffffffffffff) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 5.082204363s ago: executing program 4 (id=459): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000240)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@noauto_da_alloc}, {@resuid}, {@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0xd2942, 0x4) io_setup(0x20ff, &(0x7f0000000840)=0x0) io_submit(r1, 0x3, &(0x7f0000000880)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000900)='p', 0x8200, 0x600}]) 4.938439137s ago: executing program 2 (id=461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x36, 0x0, &(0x7f0000000200)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.695429343s ago: executing program 2 (id=465): socket(0x2d, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001cc0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000001d00), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYRES32=0x0, @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000003ec0)="$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") r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f00000041c0)='.\x00', 0x570009ec) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001dc0)={0x22001500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.579636821s ago: executing program 4 (id=469): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000007c0)='100', 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x29305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000300), 0x4000087, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x22, 0x1, 0x2, "27425ba25f173b3ccec1d8665c00840000000000796caf19e30200", 0x34325241}) syz_emit_ethernet(0x52, &(0x7f0000000940)={@local, @local, @val={@val, {0x88a8}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff10f5", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 3.575053411s ago: executing program 0 (id=478): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x47, 0x0, 0x8}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000003c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 3.028369525s ago: executing program 0 (id=473): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x6c, 0x66, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x14, 0x4, 0x0, 0x17, 0xc, 0x65, 0x7b98, 0x40, 0x1, 0x4, @multicast1, @loopback, {[@rr={0x7, 0x3, 0x54}, @cipso={0x86, 0x2a, 0x1, [{0x6, 0x7, "abcbae4ca3"}, {0x7, 0x4, "8cfb"}, {0x5, 0x11, "bdc32e2c803418c7d6ff621df9ada7"}, {0x7, 0x8, "14abc9b4b4d5"}]}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x8, [0x0, 0x80338c]}]}}}}}}}, 0x0) 2.974929185s ago: executing program 1 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6001010000481100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e220048"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0xa24c68e5f41c431f, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x28004}, 0x0) 2.862885689s ago: executing program 1 (id=475): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_PTRACER(0x1c, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) ioprio_get$pid(0x2, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000200)="8907040400", 0x5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000380)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e34, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc60, @remote, 0xffffffff}, r6, 0x9dffffff}}, 0x48) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x25) 2.862659738s ago: executing program 0 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000980)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000b40), 0x56) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$kcm(r5, &(0x7f0000000b80)={&(0x7f0000000bc0)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000cc0)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 2.861834089s ago: executing program 3 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000"], 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000000103010000000000000000000a0000000c000200000000010000000134004a0060000000"], 0x54}}, 0x0) 1.530692391s ago: executing program 1 (id=479): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x210080, &(0x7f0000000080)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x143041, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file1\x00', 0x88842, 0x0) fcntl$setlease(r0, 0x400, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file7\x00', 0x1000) 1.389152205s ago: executing program 1 (id=480): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000300)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) getdents64(r0, &(0x7f0000000540)=""/181, 0xb5) r4 = socket$inet(0x2, 0x4000000000000001, 0x106) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r6, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r5, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000280)={0x0, 0x4, 0x3ff}, 0x8) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) 1.389006895s ago: executing program 2 (id=481): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x1400c, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@nomblk_io_submit}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x457, &(0x7f0000000540)="$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") truncate(&(0x7f0000000f00)='./file1\x00', 0x2fffffd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x103402, 0x49) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000f80)={0x18, 0x1, 0x0, {0x3ff}}, 0x18) 1.388929165s ago: executing program 3 (id=482): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) 1.384613595s ago: executing program 0 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000980)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000b40), 0x56) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$kcm(r5, &(0x7f0000000b80)={&(0x7f0000000bc0)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000cc0)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 1.262893688s ago: executing program 3 (id=483): setns(0xc9, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000005940)=[{{&(0x7f0000003380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x20000800) 1.156912881s ago: executing program 3 (id=484): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000b0000000600000002000093080000"], 0x0, 0x47, 0x0, 0x8}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000003c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 164.639046ms ago: executing program 2 (id=486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff, 0x7}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}}, 0x0) 164.384696ms ago: executing program 3 (id=487): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x6c, 0x66, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x14, 0x4, 0x0, 0x17, 0xc, 0x65, 0x7b98, 0x40, 0x1, 0x4, @multicast1, @loopback, {[@rr={0x7, 0x3, 0x54}, @cipso={0x86, 0x2a, 0x1, [{0x6, 0x7, "abcbae4ca3"}, {0x7, 0x4, "8cfb"}, {0x5, 0x11, "bdc32e2c803418c7d6ff621df9ada7"}, {0x7, 0x8, "14abc9b4b4d5"}]}, @timestamp={0x44, 0xc, 0x48, 0x0, 0x8, [0x0, 0x80338c]}]}}}}}}}, 0x0) 164.278166ms ago: executing program 4 (id=488): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x20, 0x4) sendto$inet(r0, &(0x7f0000004100)="b401fc3dd54d47da66fe01f993acaac8cd0200ad", 0x14, 0xb00, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) 155.718625ms ago: executing program 0 (id=497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000980)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000b40), 0x56) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$kcm(r5, &(0x7f0000000b80)={&(0x7f0000000bc0)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000cc0)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 154.658805ms ago: executing program 1 (id=489): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 54.554118ms ago: executing program 4 (id=490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x36, 0x0, &(0x7f0000000200)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 53.213178ms ago: executing program 3 (id=492): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_PTRACER(0x1c, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) ioprio_get$pid(0x2, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000200)="8907040400", 0x5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000380)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e34, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc60, @remote, 0xffffffff}, r6, 0x9dffffff}}, 0x48) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @private=0xa010100}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x25) 51.919158ms ago: executing program 1 (id=502): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1c0) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000580)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1\x00', 0x1c0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000020b40)={0x0, 0x0, &(0x7f0000020b80)={&(0x7f0000020bc0)={0x10, 0x3f5, 0x4, 0x0, 0x25dfdbfc}, 0x26}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/os_desc/c.1\x00') 11.526339ms ago: executing program 0 (id=493): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x10, 0xc9, 0x5}}}, 0x7) 0s ago: executing program 4 (id=494): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 72.051469][ T4173] cgroup: Unknown subsys name 'net' [ 72.209219][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.773165][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.096053][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 75.106038][ T4195] rdma_rxe: failed to add rxe_eth0 [ 75.116995][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 75.125418][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.133472][ T4190] rdma_rxe: failed to add rxe_eth0 [ 75.144131][ T4185] rdma_rxe: rxe_register_device failed with error -23 [ 75.151457][ T4185] rdma_rxe: failed to add rxe_eth0 [ 75.162764][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 75.186391][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.197820][ T4186] rdma_rxe: failed to add rxe_eth0 [ 75.234569][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.483919][ T4196] infiniband rxe0: set active [ 75.490079][ T4196] infiniband rxe0: added rxe_eth0 [ 75.509002][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.583380][ T4196] RDS/IB: rxe0: added [ 75.588500][ T4196] smc: adding ib device rxe0 with port count 1 [ 75.612828][ T4196] smc: ib device rxe0 port 1 has pnetid [ 75.637761][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 75.652784][ T1107] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.679901][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 75.696929][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.771464][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 75.812097][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 75.933229][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.941491][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.951276][ T4195] device bridge_slave_0 entered promiscuous mode [ 75.960725][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.988529][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.997153][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.006738][ T4195] device bridge_slave_1 entered promiscuous mode [ 76.021751][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.087310][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.100805][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.110058][ T4185] device bridge_slave_0 entered promiscuous mode [ 76.127139][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.142253][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.151833][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.166539][ T4190] device bridge_slave_0 entered promiscuous mode [ 76.182296][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.190266][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.200391][ T4185] device bridge_slave_1 entered promiscuous mode [ 76.215168][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.225703][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.233146][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.241303][ T4190] device bridge_slave_1 entered promiscuous mode [ 76.274788][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.302431][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.369997][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.387515][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.400645][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.409275][ T4186] device bridge_slave_0 entered promiscuous mode [ 76.424602][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.443378][ T4195] team0: Port device team_slave_0 added [ 76.468819][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.482741][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.491639][ T4186] device bridge_slave_1 entered promiscuous mode [ 76.506305][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.518179][ T4195] team0: Port device team_slave_1 added [ 76.577225][ T4190] team0: Port device team_slave_0 added [ 76.594814][ T4190] team0: Port device team_slave_1 added [ 76.600736][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.621537][ T4185] team0: Port device team_slave_0 added [ 76.640553][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.653812][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.681263][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.697042][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.739559][ T4185] team0: Port device team_slave_1 added [ 76.769158][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.781813][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.832631][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.852154][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.862297][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.873772][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.906685][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.931436][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.943425][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.973620][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.999820][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.008021][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.035870][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 77.043224][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.052776][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 77.059672][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.060637][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 77.070870][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.080699][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.112615][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 77.118907][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 77.125718][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.164042][ T3851] infiniband rxe0: set active [ 77.169283][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.203311][ T4186] team0: Port device team_slave_0 added [ 77.256100][ T4186] team0: Port device team_slave_1 added [ 77.275759][ T4195] device hsr_slave_0 entered promiscuous mode [ 77.284176][ T4195] device hsr_slave_1 entered promiscuous mode [ 77.294845][ T4190] device hsr_slave_0 entered promiscuous mode [ 77.302310][ T4190] device hsr_slave_1 entered promiscuous mode [ 77.310139][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.318349][ T4190] Cannot create hsr debugfs directory [ 77.369966][ T4185] device hsr_slave_0 entered promiscuous mode [ 77.377631][ T4185] device hsr_slave_1 entered promiscuous mode [ 77.385175][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.393571][ T4185] Cannot create hsr debugfs directory [ 77.434905][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.441911][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.471212][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.484732][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.491726][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.518383][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.702008][ T4186] device hsr_slave_0 entered promiscuous mode [ 77.709111][ T4186] device hsr_slave_1 entered promiscuous mode [ 77.717085][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.726414][ T4186] Cannot create hsr debugfs directory [ 77.806948][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 77.979110][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.987507][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.996695][ T4196] device bridge_slave_0 entered promiscuous mode [ 78.006871][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.014760][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.023564][ T4196] device bridge_slave_1 entered promiscuous mode [ 78.055267][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.075355][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.085394][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.100081][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.125726][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.135648][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.153436][ T4196] team0: Port device team_slave_0 added [ 78.171749][ T4196] team0: Port device team_slave_1 added [ 78.206921][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.214833][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.241140][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.262744][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.273577][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.280764][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.308866][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.338517][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.357654][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.388228][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.401460][ T4196] device hsr_slave_0 entered promiscuous mode [ 78.411859][ T4196] device hsr_slave_1 entered promiscuous mode [ 78.419239][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.427957][ T4196] Cannot create hsr debugfs directory [ 78.535614][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.566813][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.599350][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.607001][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.620913][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.659124][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.670030][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.699293][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.722418][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.733518][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.745689][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.756105][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.763422][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.772707][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.783851][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.793698][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.801103][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.811052][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.823959][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.836736][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.858501][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.879489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.889945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.901708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.913535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.924565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.956660][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.969758][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.013718][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.024062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.035070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.045155][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.084480][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.093908][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.112319][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.119732][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 79.120687][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 79.133338][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 79.144488][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.162801][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.178241][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.200233][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.207402][ T1107] Bluetooth: hci4: command 0x041b tx timeout [ 79.224359][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 79.243896][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.259949][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.274090][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.299754][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.331429][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.353441][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.365474][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.381216][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.392397][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.403589][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.414984][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.425356][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.434628][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.447407][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.466150][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.478814][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.490949][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.529537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.541082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.551902][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.561696][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.587124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.608028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.639793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.652295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.670364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.682871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.695596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.713393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.724766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.734482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.752071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.764821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.776898][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.785563][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.829971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.868199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.880876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.895289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.913379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.921696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.942388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.967273][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.977204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.989225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.019818][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.040091][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.051123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.060968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.077287][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.099046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.108727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.118299][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.130946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.144446][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.152688][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.163268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.203662][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.219598][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.229963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.242147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.254206][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.261960][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.271664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.281223][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.297242][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.309211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.320901][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.331539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.349284][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.361393][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.396669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.409578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.423488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.438294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.451491][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.460832][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.470994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.482192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.491035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.508732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.527193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.544487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.567046][ T4195] device veth0_vlan entered promiscuous mode [ 80.582837][ T4195] device veth1_vlan entered promiscuous mode [ 80.599285][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.618029][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.634499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.646584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.657165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.669602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.685709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.695512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.707808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.723083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.734270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.745248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.760363][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.793099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.824441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.843349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.856286][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.863626][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.918808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.929652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.947474][ T4195] device veth0_macvtap entered promiscuous mode [ 80.996149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.013608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.023425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.034173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.044629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.054402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.063866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.072102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.084157][ T4195] device veth1_macvtap entered promiscuous mode [ 81.102118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.123981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.131604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.174643][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.193148][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 81.199267][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.206822][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 81.230682][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 81.236712][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.252136][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.281748][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.293705][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 81.299903][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 81.309963][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.319618][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.329360][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.338990][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.348799][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.378325][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.405689][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.417878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.432630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.450199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.457923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.477625][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.487951][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.497352][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.508298][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.559206][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.571077][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.581747][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.591389][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.601128][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.610590][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.677563][ T4190] device veth0_vlan entered promiscuous mode [ 81.709629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.719640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.736389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.751140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.797445][ T4185] device veth0_vlan entered promiscuous mode [ 81.810014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.818863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.829789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.839967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.850981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.859470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.869672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.879127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.892258][ T4190] device veth1_vlan entered promiscuous mode [ 81.907207][ T4186] device veth0_vlan entered promiscuous mode [ 81.931691][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.942175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.950041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.987411][ T4185] device veth1_vlan entered promiscuous mode [ 82.013869][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.022303][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.042394][ T4186] device veth1_vlan entered promiscuous mode [ 82.061714][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.117116][ T4190] device veth0_macvtap entered promiscuous mode [ 82.129267][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.142270][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.154270][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.165838][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.177215][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.199720][ T4190] device veth1_macvtap entered promiscuous mode [ 82.221328][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.231338][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.242111][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.265654][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.274595][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.284663][ T4186] device veth0_macvtap entered promiscuous mode [ 82.305712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.318771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.341348][ T4186] device veth1_macvtap entered promiscuous mode [ 82.354762][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.377192][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.391752][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.406733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.417817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.428109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.438256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.451428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.485457][ T4196] device veth0_vlan entered promiscuous mode [ 82.500206][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.517695][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.529953][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.541278][ T4185] device veth0_macvtap entered promiscuous mode [ 82.550015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.558676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.571139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.581247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.591319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.601482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.617938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.636749][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.654026][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.670515][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.681702][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.706690][ T4185] device veth1_macvtap entered promiscuous mode [ 82.729216][ T4196] device veth1_vlan entered promiscuous mode [ 82.740551][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.757699][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.771782][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.784473][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.798601][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.826609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.842382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.853776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.870973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.890312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.908353][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.929858][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.940204][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.959252][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.970867][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.990740][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.008251][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.024070][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.036983][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.049700][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.060660][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.072985][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.087522][ T4196] device veth0_macvtap entered promiscuous mode [ 83.097520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.107293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.125524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.135181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.144438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.154891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.164743][ T4313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 83.183663][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.210394][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.221288][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.233063][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.244295][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.256381][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.269859][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.283174][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 83.289353][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 83.300724][ T4196] device veth1_macvtap entered promiscuous mode [ 83.311936][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.321501][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 83.328165][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.341944][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.353752][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 83.362788][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 83.366924][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.386987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.398692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.408421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.425563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.472994][ T4317] ftl_cs: FTL header not found. [ 83.511943][ T4317] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 83.582296][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.596399][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.612088][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.624123][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.636359][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.648086][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.658364][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.669434][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.688671][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.709442][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.721698][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.731354][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.740535][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.755818][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.766570][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.771259][ T4325] loop0: detected capacity change from 0 to 32768 [ 83.797278][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.811676][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.827949][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.840220][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.850728][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.862776][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.873573][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.885002][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.896475][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.909630][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.921786][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.944185][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.959668][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.969968][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.989878][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.013507][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.027395][ T4325] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 84.038471][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.051221][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.240115][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.273295][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.320170][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.334096][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.356496][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.398345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.427706][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.455656][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.466625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.488841][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.511573][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.535075][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.543089][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.551384][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.595927][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.630235][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.647931][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.675388][ T4332] device syzkaller0 entered promiscuous mode [ 84.699519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.730585][ T1395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.749206][ T1395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.893965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.041585][ T4345] loop4: detected capacity change from 0 to 512 [ 85.065144][ T4347] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 85.087988][ T4345] ======================================================= [ 85.087988][ T4345] WARNING: The mand mount option has been deprecated and [ 85.087988][ T4345] and is ignored by this kernel. Remove the mand [ 85.087988][ T4345] option from the mount to silence this warning. [ 85.087988][ T4345] ======================================================= [ 85.247022][ T4355] netlink: 'syz.2.15': attribute type 17 has an invalid length. [ 85.247045][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 85.398339][ T4345] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.10: inode has both inline data and extents flags [ 85.475751][ T4345] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.10: couldn't read orphan inode 15 (err -117) [ 85.647222][ T4345] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,acl,nodiscard,,errors=continue. Quota mode: none. [ 85.716175][ T4345] EXT4-fs (loop4): shut down requested (0) [ 85.764150][ T4374] device syzkaller0 entered promiscuous mode [ 85.795907][ T4384] syz.4.10 uses obsolete (PF_INET,SOCK_PACKET) [ 86.009404][ T4389] device syzkaller0 entered promiscuous mode [ 86.103462][ T4394] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 86.182370][ T4396] netlink: 'syz.3.29': attribute type 16 has an invalid length. [ 86.198557][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 86.395503][ T4404] capability: warning: `syz.1.43' uses deprecated v2 capabilities in a way that may be insecure [ 86.470687][ T4407] device syzkaller0 entered promiscuous mode [ 86.545150][ T4407] tipc: Started in network mode [ 86.545283][ T4407] tipc: Node identity 6aba7e2e758f, cluster identity 4711 [ 86.546277][ T4407] tipc: Enabled bearer , priority 0 [ 86.547470][ T4405] tipc: Resetting bearer [ 86.610647][ T4405] tipc: Disabling bearer [ 86.789285][ T4422] loop2: detected capacity change from 0 to 256 [ 86.909476][ T4427] netlink: 'syz.4.41': attribute type 16 has an invalid length. [ 86.948233][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 87.089542][ T4438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'. [ 87.243273][ T4444] loop2: detected capacity change from 0 to 1024 [ 87.393836][ T4444] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.446621][ T4322] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.532980][ T4444] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.748024][ T4457] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 88.016003][ T4467] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 88.050182][ T4471] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 88.208877][ T4479] netlink: 'syz.1.58': attribute type 16 has an invalid length. [ 88.258935][ T4479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 88.339856][ T4484] loop3: detected capacity change from 0 to 512 [ 88.449986][ T4484] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.60: inode has both inline data and extents flags [ 88.507691][ T4484] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.60: couldn't read orphan inode 15 (err -117) [ 88.578920][ T4484] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,acl,nodiscard,,errors=continue. Quota mode: none. [ 88.708385][ T4484] EXT4-fs (loop3): shut down requested (0) [ 88.916042][ T4514] FAULT_INJECTION: forcing a failure. [ 88.916042][ T4514] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 88.916087][ T4514] CPU: 1 PID: 4514 Comm: syz.1.66 Not tainted syzkaller #0 [ 88.916109][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.916130][ T4514] Call Trace: [ 88.916137][ T4514] [ 88.916146][ T4514] dump_stack_lvl+0x188/0x250 [ 88.916193][ T4514] ? show_regs_print_info+0x20/0x20 [ 88.916229][ T4514] ? load_image+0x410/0x410 [ 88.916255][ T4514] ? __lock_acquire+0x7d40/0x7d40 [ 88.916287][ T4514] should_fail+0x383/0x4b0 [ 88.916322][ T4514] prepare_alloc_pages+0x1e3/0x5b0 [ 88.916356][ T4514] __alloc_pages+0x11b/0x480 [ 88.916384][ T4514] ? zone_statistics+0x170/0x170 [ 88.916417][ T4514] ? alloc_pages+0x452/0x560 [ 88.916444][ T4514] __get_free_pages+0x8/0x30 [ 88.916466][ T4514] kasan_populate_vmalloc_pte+0x21/0xc0 [ 88.916490][ T4514] __apply_to_page_range+0x987/0xd10 [ 88.916521][ T4514] ? kasan_populate_vmalloc+0x70/0x70 [ 88.916547][ T4514] alloc_vmap_area+0x19e8/0x1b30 [ 88.916587][ T4514] ? vm_map_ram+0xba0/0xba0 [ 88.916620][ T4514] __get_vm_area_node+0x14f/0x2d0 [ 88.916650][ T4514] __vmalloc_node_range+0xef/0x8b0 [ 88.916673][ T4514] ? sock_map_alloc+0x1f6/0x310 [ 88.916714][ T4514] bpf_map_area_alloc+0xd4/0xe0 [ 88.916736][ T4514] ? sock_map_alloc+0x1f6/0x310 [ 88.916774][ T4514] sock_map_alloc+0x1f6/0x310 [ 88.916799][ T4514] map_create+0x481/0x2330 [ 88.916822][ T4514] ? bpf_lsm_bpf+0x5/0x10 [ 88.916851][ T4514] __sys_bpf+0x30a/0x6f0 [ 88.916892][ T4514] ? bpf_link_show_fdinfo+0x380/0x380 [ 88.916937][ T4514] __x64_sys_bpf+0x78/0x90 [ 88.916961][ T4514] do_syscall_64+0x4c/0xa0 [ 88.916982][ T4514] ? clear_bhb_loop+0x30/0x80 [ 88.917007][ T4514] ? clear_bhb_loop+0x30/0x80 [ 88.917031][ T4514] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.917064][ T4514] RIP: 0033:0x7f3ca627b559 [ 88.917084][ T4514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.917109][ T4514] RSP: 002b:00007f3ca44d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.917134][ T4514] RAX: ffffffffffffffda RBX: 00007f3ca6502fa0 RCX: 00007f3ca627b559 [ 88.917150][ T4514] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 88.917178][ T4514] RBP: 00007f3ca6312ab8 R08: 0000000000000000 R09: 0000000000000000 [ 88.917192][ T4514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.917205][ T4514] R13: 00007f3ca6503038 R14: 00007f3ca6502fa0 R15: 00007ffd4d6716e8 [ 88.917235][ T4514] [ 89.062292][ T4519] loop2: detected capacity change from 0 to 1024 [ 89.204621][ T4519] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.69: lblock 2 mapped to illegal pblock 2 (length 1) [ 89.214389][ T4519] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 89.214479][ T4519] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.69: lblock 0 mapped to illegal pblock 48 (length 1) [ 89.214769][ T4519] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 89.400731][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.582010][ T4519] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.69: Failed to acquire dquot type 0 [ 89.590839][ T4519] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 89.592494][ T4519] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.69: mark_inode_dirty error [ 89.595526][ T4519] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 89.595965][ T4519] EXT4-fs (loop2): 1 orphan inode deleted [ 89.595990][ T4519] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 89.600646][ T4533] netlink: 'syz.0.73': attribute type 17 has an invalid length. [ 89.600679][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 89.626344][ T9] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.627796][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 89.627902][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 89.707838][ T4535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 89.707866][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 89.715120][ T4535] ip_tables: iptables: counters copy to user failed while replacing table [ 89.771103][ T4195] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 89.798746][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.799317][ T4195] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 89.800218][ T4195] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 90.356561][ T4557] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.414577][ T4554] FAULT_INJECTION: forcing a failure. [ 90.414577][ T4554] name failslab, interval 1, probability 0, space 0, times 1 [ 90.482163][ T4554] CPU: 1 PID: 4554 Comm: syz.3.82 Not tainted syzkaller #0 [ 90.489446][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.499712][ T4554] Call Trace: [ 90.503029][ T4554] [ 90.505993][ T4554] dump_stack_lvl+0x188/0x250 [ 90.510711][ T4554] ? show_regs_print_info+0x20/0x20 [ 90.515987][ T4554] ? load_image+0x410/0x410 [ 90.520571][ T4554] ? __might_sleep+0xf0/0xf0 [ 90.525243][ T4554] ? __lock_acquire+0x7d40/0x7d40 [ 90.530327][ T4554] should_fail+0x383/0x4b0 [ 90.534803][ T4554] should_failslab+0x5/0x20 [ 90.539355][ T4554] slab_pre_alloc_hook+0x51/0xc0 [ 90.544346][ T4554] kmem_cache_alloc_node+0x47/0x2c0 [ 90.549681][ T4554] ? alloc_vmap_area+0x668/0x1b30 [ 90.554764][ T4554] alloc_vmap_area+0x668/0x1b30 [ 90.559781][ T4554] ? vm_map_ram+0xba0/0xba0 [ 90.564348][ T4554] __get_vm_area_node+0x14f/0x2d0 [ 90.569434][ T4554] __vmalloc_node_range+0xef/0x8b0 [ 90.574611][ T4554] ? sock_map_alloc+0x1f6/0x310 [ 90.579535][ T4554] bpf_map_area_alloc+0xd4/0xe0 [ 90.584547][ T4554] ? sock_map_alloc+0x1f6/0x310 [ 90.590001][ T4554] sock_map_alloc+0x1f6/0x310 [ 90.594916][ T4554] map_create+0x481/0x2330 [ 90.599383][ T4554] ? bpf_lsm_bpf+0x5/0x10 [ 90.604284][ T4554] __sys_bpf+0x30a/0x6f0 [ 90.609115][ T4554] ? bpf_link_show_fdinfo+0x380/0x380 [ 90.615014][ T4554] __x64_sys_bpf+0x78/0x90 [ 90.619582][ T4554] do_syscall_64+0x4c/0xa0 [ 90.624412][ T4554] ? clear_bhb_loop+0x30/0x80 [ 90.629532][ T4554] ? clear_bhb_loop+0x30/0x80 [ 90.634984][ T4554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.641138][ T4554] RIP: 0033:0x7f4a73084559 [ 90.646124][ T4554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.666058][ T4554] RSP: 002b:00007f4a712dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.675048][ T4554] RAX: ffffffffffffffda RBX: 00007f4a7330bfa0 RCX: 00007f4a73084559 [ 90.683546][ T4554] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 90.691558][ T4554] RBP: 00007f4a7311bab8 R08: 0000000000000000 R09: 0000000000000000 [ 90.699577][ T4554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.707920][ T4554] R13: 00007f4a7330c038 R14: 00007f4a7330bfa0 R15: 00007ffcfbbba238 [ 90.716390][ T4554] [ 90.719507][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.891585][ T4568] netlink: 'syz.1.85': attribute type 17 has an invalid length. [ 90.912083][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 90.939535][ T4572] loop2: detected capacity change from 0 to 1024 [ 91.007040][ T4574] netlink: 348 bytes leftover after parsing attributes in process `syz.0.88'. [ 91.392962][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 91.414561][ T4572] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.471754][ T4572] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.588481][ T4586] netlink: 'syz.1.100': attribute type 17 has an invalid length. [ 91.606920][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 91.773691][ T26] audit: type=1800 audit(1792305783.999:2): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.87" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 91.918010][ T2856] cfg80211: failed to load regulatory.db [ 92.228905][ T4618] FAULT_INJECTION: forcing a failure. [ 92.228905][ T4618] name failslab, interval 1, probability 0, space 0, times 0 [ 92.249182][ T4618] CPU: 1 PID: 4618 Comm: syz.2.97 Not tainted syzkaller #0 [ 92.256751][ T4618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.267579][ T4618] Call Trace: [ 92.271259][ T4618] [ 92.274569][ T4618] dump_stack_lvl+0x188/0x250 [ 92.279294][ T4618] ? show_regs_print_info+0x20/0x20 [ 92.284540][ T4618] ? load_image+0x410/0x410 [ 92.290347][ T4618] ? __might_sleep+0xf0/0xf0 [ 92.294984][ T4618] ? __lock_acquire+0x7d40/0x7d40 [ 92.300324][ T4618] should_fail+0x383/0x4b0 [ 92.305053][ T4618] should_failslab+0x5/0x20 [ 92.309600][ T4618] slab_pre_alloc_hook+0x51/0xc0 [ 92.314590][ T4618] kmem_cache_alloc_node+0x47/0x2c0 [ 92.319839][ T4618] ? alloc_vmap_area+0x668/0x1b30 [ 92.324911][ T4618] alloc_vmap_area+0x668/0x1b30 [ 92.329928][ T4618] ? vm_map_ram+0xba0/0xba0 [ 92.334492][ T4618] __get_vm_area_node+0x14f/0x2d0 [ 92.339566][ T4618] __vmalloc_node_range+0xef/0x8b0 [ 92.344719][ T4618] ? sock_map_alloc+0x1f6/0x310 [ 92.349619][ T4618] bpf_map_area_alloc+0xd4/0xe0 [ 92.354504][ T4618] ? sock_map_alloc+0x1f6/0x310 [ 92.359402][ T4618] sock_map_alloc+0x1f6/0x310 [ 92.364120][ T4618] map_create+0x481/0x2330 [ 92.368601][ T4618] ? bpf_lsm_bpf+0x5/0x10 [ 92.372975][ T4618] __sys_bpf+0x30a/0x6f0 [ 92.377282][ T4618] ? bpf_link_show_fdinfo+0x380/0x380 [ 92.382707][ T4618] __x64_sys_bpf+0x78/0x90 [ 92.387158][ T4618] do_syscall_64+0x4c/0xa0 [ 92.391611][ T4618] ? clear_bhb_loop+0x30/0x80 [ 92.396453][ T4618] ? clear_bhb_loop+0x30/0x80 [ 92.401167][ T4618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.407102][ T4618] RIP: 0033:0x7f8c8088b559 [ 92.411550][ T4618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.431192][ T4618] RSP: 002b:00007f8c7eae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.439654][ T4618] RAX: ffffffffffffffda RBX: 00007f8c80b12fa0 RCX: 00007f8c8088b559 [ 92.447661][ T4618] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 92.455665][ T4618] RBP: 00007f8c80922ab8 R08: 0000000000000000 R09: 0000000000000000 [ 92.463709][ T4618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.471715][ T4618] R13: 00007f8c80b13038 R14: 00007f8c80b12fa0 R15: 00007fffbf5e1c38 [ 92.481025][ T4618] [ 92.484898][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.640186][ T4623] loop4: detected capacity change from 0 to 8 [ 93.876865][ T4645] netlink: 'syz.3.105': attribute type 17 has an invalid length. [ 93.929074][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 94.141734][ T4662] loop4: detected capacity change from 0 to 512 [ 94.273352][ T4671] FAULT_INJECTION: forcing a failure. [ 94.273352][ T4671] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.296869][ T4671] CPU: 1 PID: 4671 Comm: syz.0.114 Not tainted syzkaller #0 [ 94.304236][ T4671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.314339][ T4671] Call Trace: [ 94.317655][ T4671] [ 94.320626][ T4671] dump_stack_lvl+0x188/0x250 [ 94.325373][ T4671] ? show_regs_print_info+0x20/0x20 [ 94.330622][ T4671] ? load_image+0x410/0x410 [ 94.335167][ T4671] ? __lock_acquire+0x7d40/0x7d40 [ 94.340343][ T4671] should_fail+0x383/0x4b0 [ 94.344809][ T4671] prepare_alloc_pages+0x1e3/0x5b0 [ 94.349970][ T4671] __alloc_pages+0x11b/0x480 [ 94.354611][ T4671] ? zone_statistics+0x170/0x170 [ 94.359610][ T4671] ? alloc_pages+0x452/0x560 [ 94.364289][ T4671] __get_free_pages+0x8/0x30 [ 94.368926][ T4671] kasan_populate_vmalloc_pte+0x21/0xc0 [ 94.374515][ T4671] __apply_to_page_range+0x987/0xd10 [ 94.379966][ T4671] ? kasan_populate_vmalloc+0x70/0x70 [ 94.385385][ T4671] alloc_vmap_area+0x19e8/0x1b30 [ 94.390378][ T4671] ? vm_map_ram+0xba0/0xba0 [ 94.394928][ T4671] __get_vm_area_node+0x14f/0x2d0 [ 94.400014][ T4671] __vmalloc_node_range+0xef/0x8b0 [ 94.405167][ T4671] ? sock_map_alloc+0x1f6/0x310 [ 94.410062][ T4671] bpf_map_area_alloc+0xd4/0xe0 [ 94.414993][ T4671] ? sock_map_alloc+0x1f6/0x310 [ 94.419884][ T4671] sock_map_alloc+0x1f6/0x310 [ 94.424600][ T4671] map_create+0x481/0x2330 [ 94.429090][ T4671] ? bpf_lsm_bpf+0x5/0x10 [ 94.433462][ T4671] __sys_bpf+0x30a/0x6f0 [ 94.437952][ T4671] ? bpf_link_show_fdinfo+0x380/0x380 [ 94.443396][ T4671] __x64_sys_bpf+0x78/0x90 [ 94.447861][ T4671] do_syscall_64+0x4c/0xa0 [ 94.452315][ T4671] ? clear_bhb_loop+0x30/0x80 [ 94.457032][ T4671] ? clear_bhb_loop+0x30/0x80 [ 94.461837][ T4671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.467953][ T4671] RIP: 0033:0x7f9cfb2da559 [ 94.472413][ T4671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.492061][ T4671] RSP: 002b:00007f9cf9532028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.500513][ T4671] RAX: ffffffffffffffda RBX: 00007f9cfb561fa0 RCX: 00007f9cfb2da559 [ 94.508510][ T4671] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 94.516525][ T4671] RBP: 00007f9cfb371ab8 R08: 0000000000000000 R09: 0000000000000000 [ 94.524532][ T4671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.532533][ T4671] R13: 00007f9cfb562038 R14: 00007f9cfb561fa0 R15: 00007ffde598ada8 [ 94.540546][ T4671] [ 94.613630][ T4662] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.683014][ T4662] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.039978][ T4662] EXT4-fs (loop4): 1 truncate cleaned up [ 95.055198][ T4685] loop3: detected capacity change from 0 to 8 [ 95.091973][ T4662] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 95.204474][ T4680] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.290028][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.554742][ T4694] loop2: detected capacity change from 0 to 128 [ 95.899797][ T4696] netlink: 'syz.1.124': attribute type 17 has an invalid length. [ 95.956911][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 96.311425][ T4694] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.324987][ T4694] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.148236][ T4705] device syzkaller0 entered promiscuous mode [ 97.163105][ T4705] tipc: Started in network mode [ 97.177920][ T4705] tipc: Node identity caf5944af9b7, cluster identity 4711 [ 97.185826][ T4705] tipc: Enabled bearer , priority 0 [ 97.237759][ T4705] tipc: Resetting bearer [ 97.280523][ T4704] tipc: Resetting bearer [ 97.338656][ T4704] tipc: Disabling bearer [ 97.442129][ T4720] FAULT_INJECTION: forcing a failure. [ 97.442129][ T4720] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 97.478679][ T4720] CPU: 1 PID: 4720 Comm: syz.4.133 Not tainted syzkaller #0 [ 97.486487][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.496596][ T4720] Call Trace: [ 97.499919][ T4720] [ 97.502891][ T4720] dump_stack_lvl+0x188/0x250 [ 97.508652][ T4720] ? show_regs_print_info+0x20/0x20 [ 97.513935][ T4720] ? load_image+0x410/0x410 [ 97.518590][ T4720] ? __lock_acquire+0x7d40/0x7d40 [ 97.523762][ T4720] should_fail+0x383/0x4b0 [ 97.528244][ T4720] prepare_alloc_pages+0x1e3/0x5b0 [ 97.533863][ T4720] __alloc_pages+0x11b/0x480 [ 97.539494][ T4720] ? zone_statistics+0x170/0x170 [ 97.545169][ T4720] ? alloc_pages+0x452/0x560 [ 97.550445][ T4720] __get_free_pages+0x8/0x30 [ 97.555109][ T4720] kasan_populate_vmalloc_pte+0x21/0xc0 [ 97.560827][ T4720] __apply_to_page_range+0x987/0xd10 [ 97.566205][ T4720] ? kasan_populate_vmalloc+0x70/0x70 [ 97.572151][ T4720] alloc_vmap_area+0x19e8/0x1b30 [ 97.577196][ T4720] ? vm_map_ram+0xba0/0xba0 [ 97.584141][ T4720] __get_vm_area_node+0x14f/0x2d0 [ 97.589236][ T4720] __vmalloc_node_range+0xef/0x8b0 [ 97.595039][ T4720] ? sock_map_alloc+0x1f6/0x310 [ 97.600573][ T4720] bpf_map_area_alloc+0xd4/0xe0 [ 97.606086][ T4720] ? sock_map_alloc+0x1f6/0x310 [ 97.611325][ T4720] sock_map_alloc+0x1f6/0x310 [ 97.616063][ T4720] map_create+0x481/0x2330 [ 97.620934][ T4720] ? bpf_lsm_bpf+0x5/0x10 [ 97.625600][ T4720] __sys_bpf+0x30a/0x6f0 [ 97.630198][ T4720] ? bpf_link_show_fdinfo+0x380/0x380 [ 97.636280][ T4720] __x64_sys_bpf+0x78/0x90 [ 97.641280][ T4720] do_syscall_64+0x4c/0xa0 [ 97.645846][ T4720] ? clear_bhb_loop+0x30/0x80 [ 97.650835][ T4720] ? clear_bhb_loop+0x30/0x80 [ 97.656085][ T4720] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.662044][ T4720] RIP: 0033:0x7f473200d559 [ 97.666633][ T4720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.686283][ T4720] RSP: 002b:00007f4730265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.694743][ T4720] RAX: ffffffffffffffda RBX: 00007f4732294fa0 RCX: 00007f473200d559 [ 97.703498][ T4720] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 97.711680][ T4720] RBP: 00007f47320a4ab8 R08: 0000000000000000 R09: 0000000000000000 [ 97.719691][ T4720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.727701][ T4720] R13: 00007f4732295038 R14: 00007f4732294fa0 R15: 00007ffd7ae58648 [ 97.735740][ T4720] [ 98.391473][ T4746] netlink: 'syz.0.138': attribute type 17 has an invalid length. [ 98.422697][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 98.683641][ T4759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.468640][ T4771] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 99.726729][ T4779] loop4: detected capacity change from 0 to 512 [ 99.868901][ T4779] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 100.023581][ T4779] EXT4-fs (loop4): 1 truncate cleaned up [ 100.043776][ T4779] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nolazytime,discard,init_itable=0x0000000000000000,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 100.222709][ C1] sched: RT throttling activated [ 100.733538][ T4795] netlink: 'syz.3.153': attribute type 17 has an invalid length. [ 100.776276][ T4795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 101.699919][ T4201] Bluetooth: Frame is too long (len 10, expected len 8) [ 101.991840][ T4842] loop4: detected capacity change from 0 to 1024 [ 102.049171][ T4839] netlink: 'syz.0.171': attribute type 17 has an invalid length. [ 102.049269][ T4842] EXT4-fs (loop4): Ignoring removed oldalloc option [ 102.061532][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 102.168887][ T4842] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,nodioread_nolock,oldalloc,journal_dev=0x0000000000001000,delalloc,nogrpid,,errors=continue. Quota mode: none. [ 102.277847][ T4842] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.897153][ T26] audit: type=1800 audit(1792305795.089:3): pid=4869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.172" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 103.011584][ T26] audit: type=1800 audit(1792305795.119:4): pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.172" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 103.135860][ T4887] netlink: 'syz.1.186': attribute type 17 has an invalid length. [ 103.172534][ T4887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 103.594249][ T4920] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 103.912853][ T4930] netlink: 'syz.0.201': attribute type 17 has an invalid length. [ 104.076657][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 104.848361][ T26] audit: type=1326 audit(1792305797.069:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473200d559 code=0x7ffc0000 [ 104.924263][ T26] audit: type=1326 audit(1792305797.099:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473200d559 code=0x7ffc0000 [ 104.955500][ T26] audit: type=1326 audit(1792305797.099:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f473200d559 code=0x7ffc0000 [ 105.007296][ T26] audit: type=1326 audit(1792305797.099:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473200d559 code=0x7ffc0000 [ 105.064984][ T26] audit: type=1326 audit(1792305797.099:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.212" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473200d559 code=0x7ffc0000 [ 105.092309][ T4973] netlink: 'syz.3.215': attribute type 17 has an invalid length. [ 105.114454][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 105.146975][ T4981] tmpfs: Bad value for 'nr_blocks' [ 105.304632][ T4996] loop2: detected capacity change from 0 to 256 [ 105.421069][ T4996] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.608221][ T5015] tmpfs: Bad value for 'nr_blocks' [ 105.714136][ T5021] netlink: 'syz.0.235': attribute type 17 has an invalid length. [ 105.740376][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 105.797823][ T5020] loop3: detected capacity change from 0 to 4096 [ 106.108197][ T5020] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: writeback. [ 106.905339][ T5020] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.234: corrupted inode contents [ 106.933553][ T26] audit: type=1800 audit(1792305799.159:10): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.227" name="file1" dev="loop2" ino=1048626 res=0 errno=0 [ 106.978500][ T5020] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #15: comm syz.3.234: mark_inode_dirty error [ 107.020188][ T5020] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.234: corrupted inode contents [ 107.042725][ T5020] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.234: mark_inode_dirty error [ 107.075202][ T5051] tmpfs: Bad value for 'nr_blocks' [ 107.080973][ T5020] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.234: corrupted inode contents [ 107.133646][ T5020] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.234: mark_inode_dirty error [ 107.155031][ T5020] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.234: corrupted inode contents [ 107.180767][ T5020] EXT4-fs error (device loop3): ext4_truncate:4286: inode #15: comm syz.3.234: mark_inode_dirty error [ 107.208602][ T5020] EXT4-fs error (device loop3) in ext4_setattr:5645: Corrupt filesystem [ 107.226516][ T5020] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.234: corrupted inode contents [ 107.257581][ T5020] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 107.324753][ T5056] device syzkaller0 entered promiscuous mode [ 107.393453][ T5065] Zero length message leads to an empty skb [ 107.482349][ T5064] FAULT_INJECTION: forcing a failure. [ 107.482349][ T5064] name failslab, interval 1, probability 0, space 0, times 0 [ 107.507462][ T5064] CPU: 0 PID: 5064 Comm: syz.1.252 Not tainted syzkaller #0 [ 107.516159][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.526747][ T5064] Call Trace: [ 107.531049][ T5064] [ 107.534019][ T5064] dump_stack_lvl+0x188/0x250 [ 107.538833][ T5064] ? show_regs_print_info+0x20/0x20 [ 107.545805][ T5064] ? load_image+0x410/0x410 [ 107.551158][ T5064] ? __might_sleep+0xf0/0xf0 [ 107.557338][ T5064] ? __lock_acquire+0x7d40/0x7d40 [ 107.562966][ T5064] should_fail+0x383/0x4b0 [ 107.569624][ T5064] should_failslab+0x5/0x20 [ 107.574914][ T5064] slab_pre_alloc_hook+0x51/0xc0 [ 107.580155][ T5064] ? __proc_create+0x36f/0x8b0 [ 107.585838][ T5064] kmem_cache_alloc+0x3d/0x280 [ 107.590917][ T5064] __proc_create+0x36f/0x8b0 [ 107.595734][ T5064] ? proc_symlink+0x210/0x210 [ 107.603162][ T5064] ? proc_symlink+0x210/0x210 [ 107.608352][ T5064] proc_create_data+0xa0/0x2d0 [ 107.613604][ T5064] cache_register_net+0x2d6/0x480 [ 107.619533][ T5064] nfsd_export_init+0x92/0x1e0 [ 107.625186][ T5064] nfsd_init_net+0x29/0x1e0 [ 107.629760][ T5064] ops_init+0x360/0x5f0 [ 107.635235][ T5064] setup_net+0x39e/0xa10 [ 107.640164][ T5064] ? copy_net_ns+0x5b0/0x5b0 [ 107.647171][ T5064] ? copy_net_ns+0x324/0x5b0 [ 107.652380][ T5064] ? down_read_killable+0x1ce/0x340 [ 107.658729][ T5064] copy_net_ns+0x33e/0x5b0 [ 107.663402][ T5064] create_new_namespaces+0x3ce/0x700 [ 107.669166][ T5064] unshare_nsproxy_namespaces+0x116/0x160 [ 107.675319][ T5064] ksys_unshare+0x4f6/0x8e0 [ 107.680874][ T5064] ? __lock_acquire+0x7d40/0x7d40 [ 107.686272][ T5064] ? sighand_ctor+0x40/0x40 [ 107.691513][ T5064] ? lock_chain_count+0x20/0x20 [ 107.697190][ T5064] ? syscall_enter_from_user_mode+0x21/0x70 [ 107.705020][ T5064] __x64_sys_unshare+0x34/0x40 [ 107.710286][ T5064] do_syscall_64+0x4c/0xa0 [ 107.714756][ T5064] ? clear_bhb_loop+0x30/0x80 [ 107.719730][ T5064] ? clear_bhb_loop+0x30/0x80 [ 107.724906][ T5064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.731781][ T5064] RIP: 0033:0x7f3ca627b559 [ 107.737527][ T5064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.759941][ T5064] RSP: 002b:00007f3ca44d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 107.768810][ T5064] RAX: ffffffffffffffda RBX: 00007f3ca6502fa0 RCX: 00007f3ca627b559 [ 107.777219][ T5064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 107.786994][ T5064] RBP: 00007f3ca6312ab8 R08: 0000000000000000 R09: 0000000000000000 [ 107.795708][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.804626][ T5064] R13: 00007f3ca6503038 R14: 00007f3ca6502fa0 R15: 00007ffd4d6716e8 [ 107.813834][ T5064] [ 107.817039][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.024048][ T5076] netlink: 'syz.2.248': attribute type 17 has an invalid length. [ 108.032035][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 108.130500][ T5079] netlink: 44 bytes leftover after parsing attributes in process `syz.3.254'. [ 108.657743][ T5083] FAULT_INJECTION: forcing a failure. [ 108.657743][ T5083] name failslab, interval 1, probability 0, space 0, times 0 [ 108.706293][ T5085] 9pnet: p9_fd_create_unix (5085): problem connecting socket: ./file0: -2 [ 108.733707][ T5083] CPU: 0 PID: 5083 Comm: syz.0.257 Not tainted syzkaller #0 [ 108.741077][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.751497][ T5083] Call Trace: [ 108.754809][ T5083] [ 108.757858][ T5083] dump_stack_lvl+0x188/0x250 [ 108.762625][ T5083] ? show_regs_print_info+0x20/0x20 [ 108.767864][ T5083] ? load_image+0x410/0x410 [ 108.772407][ T5083] ? __might_sleep+0xf0/0xf0 [ 108.777043][ T5083] ? __lock_acquire+0x7d40/0x7d40 [ 108.784047][ T5083] should_fail+0x383/0x4b0 [ 108.788521][ T5083] should_failslab+0x5/0x20 [ 108.793061][ T5083] slab_pre_alloc_hook+0x51/0xc0 [ 108.798049][ T5083] kmem_cache_alloc_trace+0x47/0x290 [ 108.803425][ T5083] ? call_usermodehelper_setup+0x8a/0x260 [ 108.809190][ T5083] call_usermodehelper_setup+0x8a/0x260 [ 108.814823][ T5083] ? __request_module+0x980/0x980 [ 108.820950][ T5083] __request_module+0x3ea/0x980 [ 108.826216][ T5083] ? umd_cleanup+0x110/0x110 [ 108.830950][ T5083] ? crypto_alg_lookup+0x186/0x1d0 [ 108.836291][ T5083] ? __up_read+0x2b4/0x6b0 [ 108.840776][ T5083] ? up_read+0x20/0x20 [ 108.844882][ T5083] ? __crypto_alg_lookup+0x48a/0x4c0 [ 108.850395][ T5083] crypto_alg_mod_lookup+0x96/0x6d0 [ 108.859410][ T5083] crypto_alloc_tfm_node+0x14e/0x360 [ 108.864939][ T5083] cryptd_alloc_skcipher+0x102/0x220 [ 108.870401][ T5083] ? pcrypt_init_padata+0x100/0x100 [ 108.875752][ T5083] simd_skcipher_init+0x63/0x140 [ 108.880851][ T5083] crypto_create_tfm_node+0xfa/0x340 [ 108.886183][ T5083] crypto_alloc_tfm_node+0x177/0x360 [ 108.891640][ T5083] ? hash_check_key+0x1d0/0x1d0 [ 108.896540][ T5083] alg_bind+0x2f1/0x550 [ 108.900754][ T5083] __sys_bind+0x2e9/0x3e0 [ 108.905128][ T5083] ? __ia32_sys_socketpair+0xb0/0xb0 [ 108.910676][ T5083] __x64_sys_bind+0x76/0x80 [ 108.915239][ T5083] do_syscall_64+0x4c/0xa0 [ 108.919782][ T5083] ? clear_bhb_loop+0x30/0x80 [ 108.924498][ T5083] ? clear_bhb_loop+0x30/0x80 [ 108.929505][ T5083] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.935455][ T5083] RIP: 0033:0x7f9cfb2da559 [ 108.940219][ T5083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.960757][ T5083] RSP: 002b:00007f9cf9532028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 108.969252][ T5083] RAX: ffffffffffffffda RBX: 00007f9cfb561fa0 RCX: 00007f9cfb2da559 [ 108.977263][ T5083] RDX: 0000000000000058 RSI: 00002000000003c0 RDI: 0000000000000003 [ 108.985263][ T5083] RBP: 00007f9cfb371ab8 R08: 0000000000000000 R09: 0000000000000000 [ 108.993305][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.001310][ T5083] R13: 00007f9cfb562038 R14: 00007f9cfb561fa0 R15: 00007ffde598ada8 [ 109.009355][ T5083] [ 109.012500][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.035620][ T5088] loop4: detected capacity change from 0 to 512 [ 109.150270][ T5088] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.259: iget: bad i_size value: 38620345925642 [ 109.167506][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 109.185721][ T5088] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.259: couldn't read orphan inode 15 (err -117) [ 109.201823][ T5088] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.242611][ T5097] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 109.300298][ T26] audit: type=1326 audit(1792305801.519:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.3.263" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a73084559 code=0x0 [ 109.471745][ T5115] netlink: 'syz.0.269': attribute type 17 has an invalid length. [ 109.489763][ T5115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 109.550863][ T5114] device syzkaller0 entered promiscuous mode [ 109.845318][ T5123] netlink: 44 bytes leftover after parsing attributes in process `syz.2.270'. [ 110.566304][ T5131] loop4: detected capacity change from 0 to 8 [ 110.616010][ T5137] FAULT_INJECTION: forcing a failure. [ 110.616010][ T5137] name failslab, interval 1, probability 0, space 0, times 0 [ 110.616046][ T5137] CPU: 0 PID: 5137 Comm: syz.1.278 Not tainted syzkaller #0 [ 110.616069][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.616082][ T5137] Call Trace: [ 110.616090][ T5137] [ 110.616099][ T5137] dump_stack_lvl+0x188/0x250 [ 110.616130][ T5137] ? show_regs_print_info+0x20/0x20 [ 110.616154][ T5137] ? load_image+0x410/0x410 [ 110.616179][ T5137] ? __might_sleep+0xf0/0xf0 [ 110.616202][ T5137] ? __lock_acquire+0x7d40/0x7d40 [ 110.616233][ T5137] should_fail+0x383/0x4b0 [ 110.616271][ T5137] should_failslab+0x5/0x20 [ 110.616293][ T5137] slab_pre_alloc_hook+0x51/0xc0 [ 110.616315][ T5137] ? ipmr_mfc_add+0x8df/0x2bd0 [ 110.616341][ T5137] kmem_cache_alloc+0x3d/0x280 [ 110.616378][ T5137] ipmr_mfc_add+0x8df/0x2bd0 [ 110.616415][ T5137] ? __might_fault+0xb7/0x110 [ 110.616439][ T5137] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 110.616463][ T5137] ? __lock_acquire+0x7d40/0x7d40 [ 110.616509][ T5137] ip_mroute_setsockopt+0xecd/0x1230 [ 110.616544][ T5137] ? ipmr_rule_default+0x70/0x70 [ 110.616584][ T5137] ? __might_sleep+0xf0/0xf0 [ 110.616610][ T5137] ip_setsockopt+0x568/0x31e0 [ 110.616643][ T5137] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 110.616666][ T5137] ? aa_sk_perm+0x7dc/0x910 [ 110.616696][ T5137] ? aa_af_perm+0x340/0x340 [ 110.616718][ T5137] ? __fget_files+0x402/0x470 [ 110.616744][ T5137] ? aa_sock_opt_perm+0x74/0x100 [ 110.616768][ T5137] ? sock_common_setsockopt+0x32/0xb0 [ 110.616791][ T5137] ? raw_setsockopt+0xc2/0x170 [ 110.616814][ T5137] ? sock_common_recvmsg+0x1c0/0x1c0 [ 110.616839][ T5137] __sys_setsockopt+0x2bf/0x3d0 [ 110.616868][ T5137] __x64_sys_setsockopt+0xb1/0xc0 [ 110.616895][ T5137] do_syscall_64+0x4c/0xa0 [ 110.616916][ T5137] ? clear_bhb_loop+0x30/0x80 [ 110.616939][ T5137] ? clear_bhb_loop+0x30/0x80 [ 110.616965][ T5137] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.616989][ T5137] RIP: 0033:0x7f3ca627b559 [ 110.617010][ T5137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.617028][ T5137] RSP: 002b:00007f3ca44d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.617053][ T5137] RAX: ffffffffffffffda RBX: 00007f3ca6502fa0 RCX: 00007f3ca627b559 [ 110.617069][ T5137] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003 [ 110.617082][ T5137] RBP: 00007f3ca6312ab8 R08: 000000000000003c R09: 0000000000000000 [ 110.617096][ T5137] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 110.617110][ T5137] R13: 00007f3ca6503038 R14: 00007f3ca6502fa0 R15: 00007ffd4d6716e8 [ 110.617141][ T5137] [ 110.726877][ T5131] squashfs image failed sanity check [ 110.757375][ T5143] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.970053][ T5150] netlink: 'syz.4.281': attribute type 17 has an invalid length. [ 110.970075][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 111.449138][ T5163] device syzkaller0 entered promiscuous mode [ 111.758508][ T5169] FAULT_INJECTION: forcing a failure. [ 111.758508][ T5169] name failslab, interval 1, probability 0, space 0, times 0 [ 112.371944][ T5169] CPU: 1 PID: 5169 Comm: syz.2.290 Not tainted syzkaller #0 [ 112.381414][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.392515][ T5169] Call Trace: [ 112.395913][ T5169] [ 112.399375][ T5169] dump_stack_lvl+0x188/0x250 [ 112.404800][ T5169] ? show_regs_print_info+0x20/0x20 [ 112.412200][ T5169] ? load_image+0x410/0x410 [ 112.417035][ T5169] ? __might_sleep+0xf0/0xf0 [ 112.422041][ T5169] ? __lock_acquire+0x7d40/0x7d40 [ 112.427504][ T5169] should_fail+0x383/0x4b0 [ 112.432510][ T5169] should_failslab+0x5/0x20 [ 112.438135][ T5169] slab_pre_alloc_hook+0x51/0xc0 [ 112.444324][ T5169] ? ipmr_mfc_add+0x8df/0x2bd0 [ 112.449224][ T5169] kmem_cache_alloc+0x3d/0x280 [ 112.455708][ T5169] ipmr_mfc_add+0x8df/0x2bd0 [ 112.461012][ T5169] ? __might_fault+0xb7/0x110 [ 112.466922][ T5169] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 112.472750][ T5169] ? __lock_acquire+0x7d40/0x7d40 [ 112.478294][ T5169] ip_mroute_setsockopt+0xecd/0x1230 [ 112.483900][ T5169] ? ipmr_rule_default+0x70/0x70 [ 112.490237][ T5169] ? __might_sleep+0xf0/0xf0 [ 112.494880][ T5169] ip_setsockopt+0x568/0x31e0 [ 112.500679][ T5169] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 112.506520][ T5169] ? aa_sk_perm+0x7dc/0x910 [ 112.511749][ T5169] ? aa_af_perm+0x340/0x340 [ 112.516392][ T5169] ? __fget_files+0x402/0x470 [ 112.521447][ T5169] ? aa_sock_opt_perm+0x74/0x100 [ 112.526445][ T5169] ? sock_common_setsockopt+0x32/0xb0 [ 112.532033][ T5169] ? raw_setsockopt+0xc2/0x170 [ 112.537237][ T5169] ? sock_common_recvmsg+0x1c0/0x1c0 [ 112.544358][ T5169] __sys_setsockopt+0x2bf/0x3d0 [ 112.550321][ T5169] __x64_sys_setsockopt+0xb1/0xc0 [ 112.557563][ T5169] do_syscall_64+0x4c/0xa0 [ 112.562560][ T5169] ? clear_bhb_loop+0x30/0x80 [ 112.568123][ T5169] ? clear_bhb_loop+0x30/0x80 [ 112.574003][ T5169] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.580196][ T5169] RIP: 0033:0x7f8c8088b559 [ 112.585393][ T5169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.606724][ T5169] RSP: 002b:00007f8c7eae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.618153][ T5169] RAX: ffffffffffffffda RBX: 00007f8c80b12fa0 RCX: 00007f8c8088b559 [ 112.627194][ T5169] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003 [ 112.635817][ T5169] RBP: 00007f8c80922ab8 R08: 000000000000003c R09: 0000000000000000 [ 112.644999][ T5169] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 112.653902][ T5169] R13: 00007f8c80b13038 R14: 00007f8c80b12fa0 R15: 00007fffbf5e1c38 [ 112.662851][ T5169] [ 112.827936][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 112.933710][ T5197] tmpfs: Bad value for 'nr_inodes' [ 113.064513][ T5204] device syzkaller0 entered promiscuous mode [ 113.217339][ T5207] device syzkaller0 entered promiscuous mode [ 113.346777][ T5211] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.861027][ T5223] FAULT_INJECTION: forcing a failure. [ 113.861027][ T5223] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.889086][ T5223] CPU: 1 PID: 5223 Comm: syz.4.306 Not tainted syzkaller #0 [ 113.897363][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.907635][ T5223] Call Trace: [ 113.911004][ T5223] [ 113.914014][ T5223] dump_stack_lvl+0x188/0x250 [ 113.918860][ T5223] ? show_regs_print_info+0x20/0x20 [ 113.924126][ T5223] ? load_image+0x410/0x410 [ 113.928698][ T5223] ? __lock_acquire+0x7d40/0x7d40 [ 113.933780][ T5223] should_fail+0x383/0x4b0 [ 113.938428][ T5223] _copy_from_user+0x2e/0x170 [ 113.943157][ T5223] ip_mroute_setsockopt+0x7bc/0x1230 [ 113.948620][ T5223] ? ipmr_rule_default+0x70/0x70 [ 113.953790][ T5223] ? __might_sleep+0xf0/0xf0 [ 113.958532][ T5223] ip_setsockopt+0x568/0x31e0 [ 113.964020][ T5223] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 113.969442][ T5223] ? aa_sk_perm+0x7dc/0x910 [ 113.974009][ T5223] ? aa_af_perm+0x340/0x340 [ 113.978578][ T5223] ? __fget_files+0x402/0x470 [ 113.983321][ T5223] ? aa_sock_opt_perm+0x74/0x100 [ 113.989095][ T5223] ? sock_common_setsockopt+0x32/0xb0 [ 113.994523][ T5223] ? raw_setsockopt+0xc2/0x170 [ 113.999600][ T5223] ? sock_common_recvmsg+0x1c0/0x1c0 [ 114.005026][ T5223] __sys_setsockopt+0x2bf/0x3d0 [ 114.010041][ T5223] __x64_sys_setsockopt+0xb1/0xc0 [ 114.015471][ T5223] do_syscall_64+0x4c/0xa0 [ 114.020039][ T5223] ? clear_bhb_loop+0x30/0x80 [ 114.025144][ T5223] ? clear_bhb_loop+0x30/0x80 [ 114.029876][ T5223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.035804][ T5223] RIP: 0033:0x7f473200d559 [ 114.041025][ T5223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.061895][ T5223] RSP: 002b:00007f4730265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.070401][ T5223] RAX: ffffffffffffffda RBX: 00007f4732294fa0 RCX: 00007f473200d559 [ 114.078417][ T5223] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003 [ 114.086427][ T5223] RBP: 00007f47320a4ab8 R08: 000000000000003c R09: 0000000000000000 [ 114.094745][ T5223] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 114.102786][ T5223] R13: 00007f4732295038 R14: 00007f4732294fa0 R15: 00007ffd7ae58648 [ 114.111043][ T5223] [ 114.260487][ T5232] rxe_eth0 speed is unknown, defaulting to 1000 [ 115.209827][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 115.222256][ T5245] tmpfs: Bad value for 'nr_inodes' [ 115.321660][ T5247] device syzkaller0 entered promiscuous mode [ 115.495507][ T5256] FAULT_INJECTION: forcing a failure. [ 115.495507][ T5256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.514726][ T5256] CPU: 1 PID: 5256 Comm: syz.3.320 Not tainted syzkaller #0 [ 115.522094][ T5256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.532219][ T5256] Call Trace: [ 115.535793][ T5256] [ 115.538777][ T5256] dump_stack_lvl+0x188/0x250 [ 115.543541][ T5256] ? show_regs_print_info+0x20/0x20 [ 115.549407][ T5256] ? load_image+0x410/0x410 [ 115.553970][ T5256] ? __lock_acquire+0x7d40/0x7d40 [ 115.559750][ T5256] should_fail+0x383/0x4b0 [ 115.565802][ T5256] _copy_from_user+0x2e/0x170 [ 115.570675][ T5256] ip_mroute_setsockopt+0x7bc/0x1230 [ 115.576187][ T5256] ? ipmr_rule_default+0x70/0x70 [ 115.582385][ T5256] ? __might_sleep+0xf0/0xf0 [ 115.587086][ T5256] ip_setsockopt+0x568/0x31e0 [ 115.591921][ T5256] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 115.597854][ T5256] ? aa_sk_perm+0x7dc/0x910 [ 115.602781][ T5256] ? aa_af_perm+0x340/0x340 [ 115.607334][ T5256] ? __fget_files+0x402/0x470 [ 115.612065][ T5256] ? aa_sock_opt_perm+0x74/0x100 [ 115.617056][ T5256] ? sock_common_setsockopt+0x32/0xb0 [ 115.622481][ T5256] ? raw_setsockopt+0xc2/0x170 [ 115.628174][ T5256] ? sock_common_recvmsg+0x1c0/0x1c0 [ 115.633521][ T5256] __sys_setsockopt+0x2bf/0x3d0 [ 115.638597][ T5256] __x64_sys_setsockopt+0xb1/0xc0 [ 115.643678][ T5256] do_syscall_64+0x4c/0xa0 [ 115.648265][ T5256] ? clear_bhb_loop+0x30/0x80 [ 115.653462][ T5256] ? clear_bhb_loop+0x30/0x80 [ 115.658236][ T5256] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.664293][ T5256] RIP: 0033:0x7f4a73084559 [ 115.668751][ T5256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.688759][ T5256] RSP: 002b:00007f4a712dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.697311][ T5256] RAX: ffffffffffffffda RBX: 00007f4a7330bfa0 RCX: 00007f4a73084559 [ 115.706385][ T5256] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003 [ 115.714482][ T5256] RBP: 00007f4a7311bab8 R08: 000000000000003c R09: 0000000000000000 [ 115.722925][ T5256] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 115.731184][ T5256] R13: 00007f4a7330c038 R14: 00007f4a7330bfa0 R15: 00007ffcfbbba238 [ 115.739232][ T5256] [ 115.745981][ T5261] process 'syz.4.322' launched './file0' with NULL argv: empty string added [ 116.233278][ T5273] netlink: 44 bytes leftover after parsing attributes in process `syz.1.324'. [ 116.619765][ T5276] nbd: socks must be embedded in a SOCK_ITEM attr [ 116.842997][ T5278] tmpfs: Bad value for 'nr_inodes' [ 116.896424][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 117.190378][ T5290] device syzkaller0 entered promiscuous mode [ 118.506177][ T5308] FAULT_INJECTION: forcing a failure. [ 118.506177][ T5308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.195545][ T5308] CPU: 1 PID: 5308 Comm: syz.0.337 Not tainted syzkaller #0 [ 119.206137][ T5308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.217088][ T5308] Call Trace: [ 119.222422][ T5308] [ 119.225402][ T5308] dump_stack_lvl+0x188/0x250 [ 119.230666][ T5308] ? show_regs_print_info+0x20/0x20 [ 119.235926][ T5308] ? load_image+0x410/0x410 [ 119.241122][ T5308] ? __lock_acquire+0x7d40/0x7d40 [ 119.246287][ T5308] should_fail+0x383/0x4b0 [ 119.250992][ T5308] _copy_from_user+0x2e/0x170 [ 119.255836][ T5308] ip_mroute_setsockopt+0x7bc/0x1230 [ 119.261938][ T5308] ? ipmr_rule_default+0x70/0x70 [ 119.267246][ T5308] ? __might_sleep+0xf0/0xf0 [ 119.272080][ T5308] ip_setsockopt+0x568/0x31e0 [ 119.276824][ T5308] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 119.282238][ T5308] ? aa_sk_perm+0x7dc/0x910 [ 119.286790][ T5308] ? aa_af_perm+0x340/0x340 [ 119.291328][ T5308] ? __fget_files+0x402/0x470 [ 119.296059][ T5308] ? aa_sock_opt_perm+0x74/0x100 [ 119.301069][ T5308] ? sock_common_setsockopt+0x32/0xb0 [ 119.306983][ T5308] ? raw_setsockopt+0xc2/0x170 [ 119.311806][ T5308] ? sock_common_recvmsg+0x1c0/0x1c0 [ 119.317165][ T5308] __sys_setsockopt+0x2bf/0x3d0 [ 119.322069][ T5308] __x64_sys_setsockopt+0xb1/0xc0 [ 119.327393][ T5308] do_syscall_64+0x4c/0xa0 [ 119.332096][ T5308] ? clear_bhb_loop+0x30/0x80 [ 119.336928][ T5308] ? clear_bhb_loop+0x30/0x80 [ 119.342131][ T5308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.348183][ T5308] RIP: 0033:0x7f9cfb2da559 [ 119.352935][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.379374][ T5308] RSP: 002b:00007f9cf9532028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.388718][ T5308] RAX: ffffffffffffffda RBX: 00007f9cfb561fa0 RCX: 00007f9cfb2da559 [ 119.399781][ T5308] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003 [ 119.408509][ T5308] RBP: 00007f9cfb371ab8 R08: 000000000000003c R09: 0000000000000000 [ 119.417674][ T5308] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 119.426673][ T5308] R13: 00007f9cfb562038 R14: 00007f9cfb561fa0 R15: 00007ffde598ada8 [ 119.435182][ T5308] [ 120.482362][ T5328] FAULT_INJECTION: forcing a failure. [ 120.482362][ T5328] name fail_futex, interval 1, probability 0, space 0, times 1 [ 120.582612][ T5328] CPU: 0 PID: 5328 Comm: syz.1.343 Not tainted syzkaller #0 [ 120.591063][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.603498][ T5328] Call Trace: [ 120.608588][ T5328] [ 120.611717][ T5328] dump_stack_lvl+0x188/0x250 [ 120.617355][ T5328] ? show_regs_print_info+0x20/0x20 [ 120.624392][ T5328] ? load_image+0x410/0x410 [ 120.631201][ T5328] ? mark_lock+0x94/0x320 [ 120.636349][ T5328] should_fail+0x383/0x4b0 [ 120.641381][ T5328] get_futex_key+0x1a1/0x12d0 [ 120.646867][ T5328] ? __lock_acquire+0x13b3/0x7d40 [ 120.652209][ T5328] ? futex_wait_restart+0x250/0x250 [ 120.657990][ T5328] futex_wake+0x101/0x540 [ 120.662566][ T5328] ? futex_wait+0x680/0x680 [ 120.667201][ T5328] ? verify_lock_unused+0x140/0x140 [ 120.672462][ T5328] ? verify_lock_unused+0x140/0x140 [ 120.679316][ T5328] do_futex+0xd83/0x12b0 [ 120.683635][ T5328] ? futex_exit_release+0x1c0/0x1c0 [ 120.688876][ T5328] ? __context_tracking_exit+0x4c/0x80 [ 120.694375][ T5328] __se_sys_futex+0x389/0x420 [ 120.699118][ T5328] ? __x64_sys_futex+0xf0/0xf0 [ 120.706267][ T5328] ? __x64_sys_futex+0x1d/0xf0 [ 120.712983][ T5328] do_syscall_64+0x4c/0xa0 [ 120.717715][ T5328] ? clear_bhb_loop+0x30/0x80 [ 120.722442][ T5328] ? clear_bhb_loop+0x30/0x80 [ 120.727615][ T5328] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.733565][ T5328] RIP: 0033:0x7f3ca627b559 [ 120.738148][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.758203][ T5328] RSP: 002b:00007f3ca44d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.767486][ T5328] RAX: ffffffffffffffda RBX: 00007f3ca6502fa8 RCX: 00007f3ca627b559 [ 120.777206][ T5328] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3ca6502fac [ 120.786535][ T5328] RBP: 00007f3ca6502fa0 R08: 0018c84f388953e2 R09: 0000000000000000 [ 120.795399][ T5328] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 120.804320][ T5328] R13: 00007f3ca6503038 R14: 00007ffd4d671600 R15: 00007ffd4d6716e8 [ 120.812912][ T5328] [ 120.961449][ T5332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 121.700346][ T5339] FAULT_INJECTION: forcing a failure. [ 121.700346][ T5339] name failslab, interval 1, probability 0, space 0, times 0 [ 121.714519][ T5339] CPU: 1 PID: 5339 Comm: syz.1.346 Not tainted syzkaller #0 [ 121.723192][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.735695][ T5339] Call Trace: [ 121.739353][ T5339] [ 121.742575][ T5339] dump_stack_lvl+0x188/0x250 [ 121.747396][ T5339] ? show_regs_print_info+0x20/0x20 [ 121.753388][ T5339] ? load_image+0x410/0x410 [ 121.759605][ T5339] ? __might_sleep+0xf0/0xf0 [ 121.766670][ T5339] ? __lock_acquire+0x7d40/0x7d40 [ 121.772301][ T5339] ? mpol_shared_policy_init+0x19c/0x4b0 [ 121.779811][ T5339] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 121.786077][ T5339] should_fail+0x383/0x4b0 [ 121.790810][ T5339] should_failslab+0x5/0x20 [ 121.796502][ T5339] slab_pre_alloc_hook+0x51/0xc0 [ 121.802496][ T5339] ? __d_alloc+0x27/0x6d0 [ 121.806880][ T5339] kmem_cache_alloc+0x3d/0x280 [ 121.812337][ T5339] __d_alloc+0x27/0x6d0 [ 121.817440][ T5339] ? d_alloc_pseudo+0xe/0x70 [ 121.822266][ T5339] d_alloc_pseudo+0x19/0x70 [ 121.827011][ T5339] alloc_file_pseudo+0xe0/0x200 [ 121.832113][ T5339] ? alloc_empty_file_noaccount+0x80/0x80 [ 121.838093][ T5339] ? shmem_get_inode+0x87b/0xa40 [ 121.843297][ T5339] __shmem_file_setup+0x1cf/0x290 [ 121.848568][ T5339] ? shmem_file_setup+0x13/0x30 [ 121.853927][ T5339] __se_sys_memfd_create+0x290/0x450 [ 121.859270][ T5339] ? __x64_sys_memfd_create+0x60/0x60 [ 121.864689][ T5339] ? lockdep_hardirqs_on+0x94/0x140 [ 121.870028][ T5339] do_syscall_64+0x4c/0xa0 [ 121.875373][ T5339] ? clear_bhb_loop+0x30/0x80 [ 121.881185][ T5339] ? clear_bhb_loop+0x30/0x80 [ 121.886704][ T5339] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.893124][ T5339] RIP: 0033:0x7f3ca627b559 [ 121.898115][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.921872][ T5339] RSP: 002b:00007f3ca44d2e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 121.932072][ T5339] RAX: ffffffffffffffda RBX: 000000000000025e RCX: 00007f3ca627b559 [ 121.941293][ T5339] RDX: 00007f3ca44d2ee0 RSI: 0000000000000000 RDI: 00007f3ca6312c98 [ 121.952549][ T5339] RBP: 0000200000000e80 R08: 00000000ffffffff R09: 0000000000000000 [ 121.960827][ T5339] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000180 [ 121.969774][ T5339] R13: 00007f3ca44d2ee0 R14: 00007f3ca44d2ea0 R15: 0000200000000280 [ 121.978004][ T5339] [ 122.762262][ T5347] device syzkaller0 entered promiscuous mode [ 123.580412][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 123.789077][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 123.972737][ T26] audit: type=1326 audit(1792305816.199:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca627b559 code=0x7ffc0000 [ 124.100329][ T26] audit: type=1326 audit(1792305816.259:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3ca627b559 code=0x7ffc0000 [ 124.196907][ T26] audit: type=1326 audit(1792305816.259:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca627b559 code=0x7ffc0000 [ 124.287398][ T26] audit: type=1326 audit(1792305816.259:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca627b559 code=0x7ffc0000 [ 124.408879][ T26] audit: type=1326 audit(1792305816.259:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ca627b559 code=0x7ffc0000 [ 124.531633][ T5395] device syzkaller0 entered promiscuous mode [ 124.553785][ T26] audit: type=1326 audit(1792305816.259:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca627b559 code=0x7ffc0000 [ 124.579881][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 124.633273][ T26] audit: type=1326 audit(1792305816.259:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.1.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca627b559 code=0x7ffc0000 [ 124.768228][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 126.159291][ T5436] device syzkaller0 entered promiscuous mode [ 126.190053][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 126.926201][ T5471] tipc: Started in network mode [ 126.957818][ T5471] tipc: Node identity 929a545f5328, cluster identity 4711 [ 127.000373][ T5471] tipc: Enabled bearer , priority 0 [ 127.058027][ T5475] device syzkaller0 entered promiscuous mode [ 127.134364][ T5471] tipc: Resetting bearer [ 127.168044][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 127.192304][ T5469] tipc: Resetting bearer [ 127.248138][ T5469] tipc: Disabling bearer [ 127.516427][ T5498] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.617039][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 128.634844][ T5517] loop2: detected capacity change from 0 to 512 [ 129.344083][ T5517] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 129.400117][ T5517] EXT4-fs (loop2): invalid journal inode [ 129.498273][ T5517] EXT4-fs (loop2): can't get journal size [ 129.570722][ T5517] EXT4-fs (loop2): 1 truncate cleaned up [ 129.591553][ T5517] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 129.661887][ T5542] device syzkaller0 entered promiscuous mode [ 129.760442][ T5549] loop4: detected capacity change from 0 to 1024 [ 129.850863][ T5549] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.886979][ T5551] 9pnet: Insufficient options for proto=fd [ 129.966439][ T5549] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,abort,noinit_itable,,errors=continue. Quota mode: none. [ 130.875224][ T5549] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 130.893204][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 130.931004][ T5549] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 131.032171][ T5578] loop2: detected capacity change from 0 to 256 [ 131.086957][ T5549] syz.4.432 (5549) used greatest stack depth: 20832 bytes left [ 131.149246][ T5582] device syzkaller0 entered promiscuous mode [ 131.477491][ T5594] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.308129][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 132.876135][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883514][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.076858][ T5612] overlayfs: failed to clone upperpath [ 133.107381][ T5611] loop3: detected capacity change from 0 to 1024 [ 133.251368][ T5611] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.289736][ T5617] loop4: detected capacity change from 0 to 1024 [ 133.386933][ T5611] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,abort,noinit_itable,,errors=continue. Quota mode: none. [ 133.475548][ T5617] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,noauto_da_alloc,resuid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 133.537122][ T5617] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.557804][ T5611] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 133.931681][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 133.993967][ T5646] loop2: detected capacity change from 0 to 128 [ 134.572001][ T5649] mmap: syz.3.467 (5649) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 134.705094][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 134.723940][ T5651] FAULT_INJECTION: forcing a failure. [ 134.723940][ T5651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.752909][ T5651] CPU: 1 PID: 5651 Comm: syz.4.469 Not tainted syzkaller #0 [ 134.760731][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.772776][ T5651] Call Trace: [ 134.776811][ T5651] [ 134.780453][ T5651] dump_stack_lvl+0x188/0x250 [ 134.786344][ T5651] ? show_regs_print_info+0x20/0x20 [ 134.794520][ T5651] ? load_image+0x410/0x410 [ 134.800690][ T5651] ? __lock_acquire+0x7d40/0x7d40 [ 134.805946][ T5651] ? mark_lock+0x94/0x320 [ 134.812190][ T5651] should_fail+0x383/0x4b0 [ 134.816909][ T5651] prepare_alloc_pages+0x1e3/0x5b0 [ 134.823106][ T5651] __alloc_pages+0x11b/0x480 [ 134.830489][ T5651] ? zone_statistics+0x170/0x170 [ 134.838649][ T5651] alloc_pages_vma+0x2bc/0x790 [ 134.847850][ T5651] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 134.855771][ T5651] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 134.863019][ T5651] ? shmem_swapin_page+0x22f0/0x22f0 [ 134.868651][ T5651] ? __lock_acquire+0x7d40/0x7d40 [ 134.874083][ T5651] ? xas_descend+0x210/0x3b0 [ 134.880809][ T5651] ? xas_load+0x127/0x140 [ 134.885921][ T5651] ? pagecache_get_page+0xc32/0xf20 [ 134.893153][ T5651] ? page_cache_prev_miss+0x380/0x380 [ 134.900819][ T5651] ? mark_lock+0x94/0x320 [ 134.906229][ T5651] ? verify_lock_unused+0x140/0x140 [ 134.912203][ T5651] ? __lock_acquire+0x13b3/0x7d40 [ 134.919172][ T5651] shmem_getpage_gfp+0x14be/0x2c10 [ 134.925140][ T5651] shmem_fault+0x1ac/0x550 [ 134.929886][ T5651] ? shmem_fallocate+0xec0/0xec0 [ 134.935231][ T5651] ? filemap_read_page+0x4b0/0x4b0 [ 134.941031][ T5651] ? count_memcg_event_mm+0x324/0x370 [ 134.946740][ T5651] __do_fault+0x141/0x330 [ 134.951758][ T5651] handle_mm_fault+0x2982/0x4440 [ 134.957994][ T5651] ? get_page+0xe0/0xe0 [ 134.962631][ T5651] ? follow_page_mask+0xa51/0x12b0 [ 134.967947][ T5651] __get_user_pages+0x952/0x11e0 [ 134.973131][ T5651] ? populate_vma_page_range+0x290/0x290 [ 134.980686][ T5651] ? read_lock_is_recursive+0x10/0x10 [ 134.987120][ T5651] populate_vma_page_range+0x213/0x290 [ 134.994325][ T5651] __mm_populate+0x275/0x3b0 [ 135.000625][ T5651] ? check_vma_flags+0x470/0x470 [ 135.007123][ T5651] ? up_write+0x1b6/0x410 [ 135.012482][ T5651] vm_mmap_pgoff+0x212/0x2d0 [ 135.017163][ T5651] ? account_locked_vm+0xe0/0xe0 [ 135.025036][ T5651] ? __context_tracking_exit+0x4c/0x80 [ 135.030786][ T5651] ? __lock_acquire+0x7d40/0x7d40 [ 135.036035][ T5651] ksys_mmap_pgoff+0x140/0x790 [ 135.040945][ T5651] ? mmap_region+0x1730/0x1730 [ 135.045885][ T5651] ? lockdep_hardirqs_on+0x94/0x140 [ 135.051988][ T5651] do_syscall_64+0x4c/0xa0 [ 135.057807][ T5651] ? clear_bhb_loop+0x30/0x80 [ 135.062536][ T5651] ? clear_bhb_loop+0x30/0x80 [ 135.067523][ T5651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.073468][ T5651] RIP: 0033:0x7f473200d559 [ 135.077937][ T5651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.100498][ T5651] RSP: 002b:00007f4730265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 135.109583][ T5651] RAX: ffffffffffffffda RBX: 00007f4732294fa0 RCX: 00007f473200d559 [ 135.118907][ T5651] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 135.127018][ T5651] RBP: 00007f47320a4ab8 R08: ffffffffffffffff R09: 000000009a5eb000 [ 135.136276][ T5651] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 135.144298][ T5651] R13: 00007f4732295038 R14: 00007f4732294fa0 R15: 00007ffd7ae58648 [ 135.152601][ T5651] [ 135.155788][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.566647][ T5670] device syzkaller0 entered promiscuous mode [ 136.901612][ T5688] loop2: detected capacity change from 0 to 512 [ 137.033445][ T5688] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 137.091702][ T5688] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.508277][ T5688] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.481: bad orphan inode 131083 [ 137.689030][ T5688] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,nomblk_io_submit,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 137.858964][ T5695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 138.009705][ T26] audit: type=1800 audit(1792305830.229:19): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.481" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 138.275473][ T4201] [ 138.278492][ T4201] ====================================================== [ 138.286421][ T4201] WARNING: possible circular locking dependency detected [ 138.293496][ T4201] syzkaller #0 Not tainted [ 138.298866][ T4201] ------------------------------------------------------ [ 138.307085][ T4201] kworker/u5:7/4201 is trying to acquire lock: [ 138.313388][ T4201] ffffffff8e3b4048 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 138.322747][ T4201] [ 138.322747][ T4201] but task is already holding lock: [ 138.331331][ T4201] ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 138.341575][ T4201] [ 138.341575][ T4201] which lock already depends on the new lock. [ 138.341575][ T4201] [ 138.354183][ T4201] [ 138.354183][ T4201] the existing dependency chain (in reverse order) is: [ 138.364672][ T4201] [ 138.364672][ T4201] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 138.374187][ T4201] __mutex_lock_common+0x1e5/0x2400 [ 138.381440][ T4201] mutex_lock_nested+0x17/0x20 [ 138.387027][ T4201] hci_remote_features_evt+0x5d9/0xa10 [ 138.393755][ T4201] hci_event_packet+0x600/0x1310 [ 138.399431][ T4201] hci_rx_work+0x255/0xa10 [ 138.404620][ T4201] process_one_work+0x867/0xff0 [ 138.410031][ T4201] worker_thread+0xad7/0x12a0 [ 138.415387][ T4201] kthread+0x42e/0x520 [ 138.420116][ T4201] ret_from_fork+0x1f/0x30 [ 138.425084][ T4201] [ 138.425084][ T4201] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 138.432944][ T4201] __mutex_lock_common+0x1e5/0x2400 [ 138.438900][ T4201] mutex_lock_nested+0x17/0x20 [ 138.444222][ T4201] l2cap_chan_connect+0xfb/0xe20 [ 138.449824][ T4201] l2cap_sock_connect+0x5a3/0x770 [ 138.456156][ T4201] kernel_connect+0x11c/0x180 [ 138.461549][ T4201] rfcomm_dlc_open+0x600/0x10c0 [ 138.467300][ T4201] rfcomm_sock_connect+0x2e9/0x600 [ 138.472989][ T4201] __sys_connect+0x3cb/0x450 [ 138.478478][ T4201] __x64_sys_connect+0x76/0x80 [ 138.484147][ T4201] do_syscall_64+0x4c/0xa0 [ 138.489117][ T4201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.496052][ T4201] [ 138.496052][ T4201] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 138.503712][ T4201] __lock_acquire+0x38f7/0x7d40 [ 138.509219][ T4201] lock_acquire+0x19f/0x400 [ 138.514376][ T4201] __mutex_lock_common+0x1e5/0x2400 [ 138.520371][ T4201] mutex_lock_nested+0x17/0x20 [ 138.526045][ T4201] rfcomm_security_cfm+0x95/0x780 [ 138.532566][ T4201] hci_encrypt_cfm+0x363/0x4d0 [ 138.538300][ T4201] hci_encrypt_change_evt+0x62d/0xdd0 [ 138.544647][ T4201] hci_event_packet+0x67e/0x1310 [ 138.550247][ T4201] hci_rx_work+0x255/0xa10 [ 138.555355][ T4201] process_one_work+0x867/0xff0 [ 138.560768][ T4201] worker_thread+0xad7/0x12a0 [ 138.566269][ T4201] kthread+0x42e/0x520 [ 138.571191][ T4201] ret_from_fork+0x1f/0x30 [ 138.576163][ T4201] [ 138.576163][ T4201] other info that might help us debug this: [ 138.576163][ T4201] [ 138.589032][ T4201] Chain exists of: [ 138.589032][ T4201] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 138.589032][ T4201] [ 138.604333][ T4201] Possible unsafe locking scenario: [ 138.604333][ T4201] [ 138.614419][ T4201] CPU0 CPU1 [ 138.620178][ T4201] ---- ---- [ 138.625834][ T4201] lock(hci_cb_list_lock); [ 138.634077][ T4201] lock(&hdev->lock); [ 138.641386][ T4201] lock(hci_cb_list_lock); [ 138.650358][ T4201] lock(rfcomm_mutex); [ 138.656092][ T4201] [ 138.656092][ T4201] *** DEADLOCK *** [ 138.656092][ T4201] [ 138.665389][ T4201] 4 locks held by kworker/u5:7/4201: [ 138.671085][ T4201] #0: ffff88807b26e938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 138.682294][ T4201] #1: ffffc9000302fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 138.693815][ T4201] #2: ffff888023984478 (&hdev->lock){+.+.}-{3:3}, at: hci_encrypt_change_evt+0xd9/0xdd0 [ 138.703779][ T4201] #3: ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 138.714354][ T4201] [ 138.714354][ T4201] stack backtrace: [ 138.720259][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 138.727816][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.738411][ T4201] Workqueue: hci2 hci_rx_work [ 138.743212][ T4201] Call Trace: [ 138.746951][ T4201] [ 138.749909][ T4201] dump_stack_lvl+0x188/0x250 [ 138.755446][ T4201] ? load_image+0x410/0x410 [ 138.760536][ T4201] ? show_regs_print_info+0x20/0x20 [ 138.766028][ T4201] ? print_circular_bug+0x12b/0x1a0 [ 138.772085][ T4201] check_noncircular+0x2f8/0x400 [ 138.777135][ T4201] ? print_deadlock_bug+0x5d0/0x5d0 [ 138.782449][ T4201] ? lockdep_lock+0xf1/0x1f0 [ 138.787087][ T4201] ? mark_lock+0x94/0x320 [ 138.791430][ T4201] ? _find_first_zero_bit+0xd1/0xf0 [ 138.796991][ T4201] __lock_acquire+0x38f7/0x7d40 [ 138.801894][ T4201] ? verify_lock_unused+0x140/0x140 [ 138.807540][ T4201] lock_acquire+0x19f/0x400 [ 138.812101][ T4201] ? rfcomm_security_cfm+0x95/0x780 [ 138.817772][ T4201] ? __might_sleep+0xf0/0xf0 [ 138.822488][ T4201] ? read_lock_is_recursive+0x10/0x10 [ 138.828254][ T4201] __mutex_lock_common+0x1e5/0x2400 [ 138.833487][ T4201] ? rfcomm_security_cfm+0x95/0x780 [ 138.838705][ T4201] ? rcu_lock_release+0x20/0x20 [ 138.843928][ T4201] ? __mutex_trylock_common+0x15c/0x260 [ 138.849848][ T4201] ? rfcomm_security_cfm+0x95/0x780 [ 138.855447][ T4201] ? mutex_lock_io_nested+0x60/0x60 [ 138.860663][ T4201] ? l2cap_security_cfm+0x12b4/0x1340 [ 138.866061][ T4201] ? __mutex_lock_common+0x435/0x2400 [ 138.871449][ T4201] ? l2cap_disconn_cfm+0xc0/0xc0 [ 138.878016][ T4201] mutex_lock_nested+0x17/0x20 [ 138.884456][ T4201] rfcomm_security_cfm+0x95/0x780 [ 138.890386][ T4201] ? __lock_acquire+0x7d40/0x7d40 [ 138.896786][ T4201] ? rfcomm_send_msc+0x340/0x340 [ 138.901936][ T4201] ? hci_event_packet+0x363/0x1310 [ 138.907693][ T4201] ? rfcomm_send_msc+0x340/0x340 [ 138.913159][ T4201] hci_encrypt_cfm+0x363/0x4d0 [ 138.919128][ T4201] hci_encrypt_change_evt+0x62d/0xdd0 [ 138.924549][ T4201] ? hci_remote_name_evt+0x5b0/0x5b0 [ 138.929867][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 138.936239][ T4201] ? mark_lock+0x94/0x320 [ 138.941664][ T4201] ? mutex_unlock+0x10/0x10 [ 138.946380][ T4201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.952667][ T4201] ? lock_chain_count+0x20/0x20 [ 138.957724][ T4201] ? __rwlock_init+0x140/0x140 [ 138.962645][ T4201] hci_event_packet+0x67e/0x1310 [ 138.968098][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 138.973058][ T4201] ? rcu_lock_release+0x20/0x20 [ 138.978062][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 138.983297][ T4201] hci_rx_work+0x255/0xa10 [ 138.987754][ T4201] process_one_work+0x867/0xff0 [ 138.993160][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 138.998999][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 139.004412][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 139.012265][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 139.017867][ T4201] ? wq_worker_running+0x97/0x170 [ 139.022917][ T4201] worker_thread+0xad7/0x12a0 [ 139.027619][ T4201] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 139.033530][ T4201] kthread+0x42e/0x520 [ 139.037632][ T4201] ? rcu_lock_release+0x20/0x20 [ 139.042493][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 139.047099][ T4201] ret_from_fork+0x1f/0x30 [ 139.051564][ T4201] [ 140.322585][ T13] Bluetooth: hci2: command 0x2016 tx timeout [ 142.392774][ T4272] Bluetooth: hci2: command 0x0406 tx timeout