last executing test programs: 51.69063158s ago: executing program 1 (id=635): r0 = socket$inet(0x2, 0x2, 0x11) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r1, &(0x7f0000000200), 0x10) read(r1, &(0x7f0000000300), 0x1000) 51.235963628s ago: executing program 1 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x134}}, 0x0) 50.903174637s ago: executing program 1 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x801, 0x0) write(r0, &(0x7f0000000100)='1 1\x00', 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}], {0x14}}, 0x140}}, 0x0) 49.972927704s ago: executing program 0 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x18, 0x32, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x20048844) 49.800563058s ago: executing program 1 (id=644): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000400)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@oldalloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc9, &(0x7f0000000300)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0xffffffffffffffff}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) getdents64(r4, 0x0, 0x0) 42.605614052s ago: executing program 1 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x138}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='lo\x00'}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='lo\x00'}) syz_emit_ethernet(0x2f, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @private=0xa010102}, {0x3030, 0x3030, 0xd, 0x0, @opaque="1234567890"}}}}}, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @private=0xa010101}, {0x3030, 0x3030, 0xd, 0x0, @opaque="1234567890"}}}}}, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000700)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @private=0xa010102}, {0x3030, 0x3030, 0xd, 0x0, @opaque="1234567890"}}}}}, 0x0) 41.397176462s ago: executing program 0 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='N\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000100)='10\x00', 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x134}}, 0x0) 14.429217133s ago: executing program 3 (id=782): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@empty, 0x0, 0x0, 0x4e24, 0xfffc, 0x2, 0x0, 0x0, 0x5c, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x1ffffffffffd}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd3a0010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 14.120745186s ago: executing program 3 (id=785): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpid() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$eJzs3dFvG3cdAPDvOXabtinJgAeYtDHYUDtB7WZhW8TDGBIST5MQ472ExI2iOnEUO1sTTTT9FxASSDzBMxJ/ABKqxAuPCGkSPIM0BELQgQQPsENnn5PUOSfe5sSt8/lI1/v9fue77/eX+s5355/OAZxbz0XE6xHxQZqmL0bEbN5eyqfY607Z695/+M5yNiWRpm/+PYkkb+ttK8nnV/LVpiPi29+M+F5yNG5rZ/fOUqNR38rrtfb6Zq21s3tjbX1ptb5a31hYmH9l8dXFlxdvjqSfVyPitW/8OcvktV99+e0/3frr9e9nlZl8+eF+fEjl4xZ2u165ON23wtZHDPY4yvpT6VUuDbfO/VPMBwCAwbJz/E9GxBci4sWYjanjT2cBAACAJ1D6tZn4bxKRFrswoB0AAAB4gpQ6Y2CTUjUfCzATpVK12h3D++m4XGo0W+0v3W5ub6x0x8rORaV0e61Rv5mPFZ6LSpLV5zvlg/pLffWFiHgqIn44e6lTry43GyvjvvkBAAAA58SVvuv/f812r/8BAACACTM37gQAAACAU+f6HwAAACaf638AAACYaN96441sSnu/f73y1s72neZbN1bqrTvV9e3l6nJza7O62myudp7Zt37S9hrN5uZXYmP7bq1db7VrrZ3dW+vN7Y32rbWYPpMOAQAAAEc89bkHf0giYu+rlzpT5sK4kwLORHm/lOTzgr3/j1Pd+XuPtKZpeu9UcwNO19QQr3nvYnG78wR4spX7Gwbs68DkqYw7AWDskhOWDxy889t8/vnR5gMAAIzetc/2ff9f7t7XP/57gXK2RunMkgROhZ0Yzq++z/l0dlyJAGeu8/3/sAN5nCzARKkMNQIQmGQf+/v/E6Xph0oIAAAYuZnOlJSq+e29mSiVqtWIq52fBagkt9ca9ZsR8YmI+P1s5WJWn++smZx4zQAAAAAAAAAAAAAAAAAAAAAAAAAAdKVpEikAAAAw0SJKf0l+3X2W/7XZF2b67w9cSP7T+UngCxHx9k/e/NHdpXZ7az5r/8d+e/vHeftL47iDAQAAAPTrXad35v8edzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATJr3H76z3JuGePmlUcX929cjYq4ofjmmO/PpqETE5X8mUT60XhIRUyOIv3c/Ij5TFD/J0toPWRR/FH+EE+LHXP5XKIp/ZQTx4Tx7kB1/Xi/a/0rxXGdevP+VIx6pf1SDj3+xf/ybGrD/Xx0yxtPv/qI2MP79iKfLj8Yv98VPBsR/fsj43/3O7u6gZelPI671Pn86R7zDEQ5Ktfb6Zq21s3tjbX1ptb5a31hYmH9l8dXFlxdv1m6vNer5v4UxfvDMLz84rv+XCz//kjybwf1/oWB7RZ9J/3v37sNP9Sp7R+Nff74g/m9+1pndK4hfyuN8MS9ny6/1ynvd8mHP/vx3zx7X/5WD/lcO9/+k///rgzba78iO8sywbx0A4BS0dnbvLDUa9a2JLWRX6Y9BGgqPU+FiRNS3Wvd6LZVRvEnSNE2zfapg0YOIGGY7SYy4p6XifA4KA48A4z4yAQAAo3Zw0j/uTAAAAAAAAAAAAAAAAAAAAOD8OovHrfXHPHgEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzE/wMAAP//lDPSjg==") setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) 9.661847847s ago: executing program 3 (id=800): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 9.409266993s ago: executing program 3 (id=801): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x200, 0x15, "00000000000700000000fffe00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, r4, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 7.399631228s ago: executing program 3 (id=810): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@empty, 0x0, 0x0, 0x4e24, 0xfffc, 0x2, 0x0, 0x0, 0x5c, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x1ffffffffffd}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 7.151543758s ago: executing program 3 (id=813): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpid() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) 5.236160519s ago: executing program 5 (id=820): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc", 0xf}], 0x1}, 0x94) 5.190015813s ago: executing program 2 (id=821): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00)=""/100, 0x64}], 0x1}, 0x0) 4.912531897s ago: executing program 5 (id=823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) 4.524813374s ago: executing program 5 (id=824): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r0) 4.269983531s ago: executing program 5 (id=825): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@empty, 0x0, 0x0, 0x4e24, 0xfffc, 0x2, 0x0, 0x0, 0x5c, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x1ffffffffffd}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.903591229s ago: executing program 2 (id=826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000000000000000000000000000000200"/48}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) 3.520576453s ago: executing program 5 (id=828): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 3.472182428s ago: executing program 2 (id=829): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3.223960026s ago: executing program 5 (id=830): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x200, 0x15, "00000000000700000000fffe00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) close_range(r0, r4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0xffff}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 3.164092165s ago: executing program 2 (id=832): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.657373049s ago: executing program 2 (id=834): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1}, 0x80d1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 2.393205773s ago: executing program 4 (id=835): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc", 0xf}], 0x1}, 0x94) 2.102400463s ago: executing program 4 (id=836): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 1.717597689s ago: executing program 4 (id=837): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='tcp 2049\n\x00', 0x9) close(r0) 1.519054877s ago: executing program 4 (id=838): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2328, @empty}}, 0x24) connect$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00)=""/100, 0x64}], 0x1}, 0x0) 1.175887831s ago: executing program 2 (id=839): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x200, 0x15, "00000000000700000000fffe00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, r4, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.086587333s ago: executing program 0 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='N\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000100)='10\x00', 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x134}}, 0x0) 711.67415ms ago: executing program 0 (id=840): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@empty, 0x0, 0x0, 0x4e24, 0xfffc, 0x2, 0x0, 0x0, 0x5c, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x1ffffffffffd}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 456.734741ms ago: executing program 4 (id=841): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @empty, 0xc0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff00000000c0000001"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123400014073683b00000000ffffffff0000000000000000"], 0x0) 347.362077ms ago: executing program 0 (id=842): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 224.996612ms ago: executing program 1 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x138}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1\n', 0x2) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='lo\x00'}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='lo\x00'}) syz_emit_ethernet(0x2f, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @private=0xa010102}, {0x3030, 0x3030, 0xd, 0x0, @opaque="1234567890"}}}}}, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @private=0xa010101}, {0x3030, 0x3030, 0xd, 0x0, @opaque="1234567890"}}}}}, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000700)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x64, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @private=0xa010102}, {0x3030, 0x3030, 0xd, 0x0, @opaque="1234567890"}}}}}, 0x0) 117.050987ms ago: executing program 4 (id=843): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c000380680000800800034000000002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c000100060006000800000010"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 0 (id=844): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0) kernel console output (not intermixed with test programs): -fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.153151][ T7291] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.501'. [ 214.376210][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.660028][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.511'. [ 215.302998][ T7322] loop4: detected capacity change from 0 to 512 [ 215.447692][ T7322] __quota_error: 2 callbacks suppressed [ 215.447713][ T7322] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 215.463493][ T7322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 215.473441][ T7322] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.514: Failed to acquire dquot type 1 [ 215.484616][ T7322] loop4: lost filesystem error report for type 5 error -117 [ 215.485477][ T7322] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 215.492810][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 215.492838][ C0] EXT4-fs (loop4): last error at time 1785791239: ext4_acquire_dquot:7039 [ 215.525211][ T7322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 215.535239][ T7322] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.514: Failed to acquire dquot type 1 [ 215.546432][ T7322] loop4: lost filesystem error report for type 5 error -117 [ 215.551334][ T7322] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.514: bg 0: block 248: padding at end of block bitmap is not set [ 215.558242][ T7324] loop0: detected capacity change from 0 to 512 [ 215.560169][ T7322] loop4: lost filesystem error report for type 5 error -117 [ 215.583026][ T7322] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 215.600844][ T7322] loop4: lost filesystem error report for type 5 error -117 [ 215.602078][ T7322] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 215.619583][ T7322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 215.629575][ T7322] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.514: Failed to acquire dquot type 1 [ 215.640742][ T7322] loop4: lost filesystem error report for type 5 error -117 [ 215.642735][ T7322] EXT4-fs (loop4): 1 orphan inode deleted [ 215.658131][ T7322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.670796][ T7322] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.725945][ T7324] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.517: iget: bad i_size value: 38620345925642 [ 215.753390][ T7324] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.754518][ T7324] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.517: couldn't read orphan inode 15 (err -117) [ 215.763722][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 215.763753][ C0] EXT4-fs (loop0): initial error at time 1785791239: ext4_orphan_get:1399: inode 15 [ 215.763804][ C0] EXT4-fs (loop0): last error at time 1785791239: ext4_orphan_get:1399: inode 15 [ 215.848667][ T7324] loop0: lost filesystem error report for type 5 error -117 [ 215.912710][ T7334] loop3: detected capacity change from 0 to 512 [ 215.926890][ T7324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.981908][ T7334] EXT4-fs: Ignoring removed oldalloc option [ 215.994409][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.041843][ T7334] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 216.105089][ T7334] EXT4-fs (loop3): 1 truncate cleaned up [ 216.129716][ T7334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.080516][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.445309][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.676465][ T7353] netlink: 48 bytes leftover after parsing attributes in process `syz.3.526'. [ 217.753539][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.527'. [ 218.381339][ T7374] loop2: detected capacity change from 0 to 512 [ 218.429913][ T7374] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.535: iget: bad i_size value: 38620345925642 [ 218.483230][ T7374] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.483678][ T7374] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.535: couldn't read orphan inode 15 (err -117) [ 218.492918][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 218.492946][ C1] EXT4-fs (loop2): initial error at time 1785791242: ext4_orphan_get:1399: inode 15 [ 218.492996][ C1] EXT4-fs (loop2): last error at time 1785791242: ext4_orphan_get:1399: inode 15 [ 218.530490][ T7375] loop0: detected capacity change from 0 to 512 [ 218.554686][ T7374] loop2: lost filesystem error report for type 5 error -117 [ 218.558053][ T7375] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 218.562137][ T7374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.567764][ T7375] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 218.600073][ T7375] EXT4-fs error (device loop0): ext4_acquire_dquot:7039: comm syz.0.533: Failed to acquire dquot type 1 [ 218.611238][ T7375] loop0: lost filesystem error report for type 5 error -117 [ 218.621266][ T7375] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 218.628644][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 218.628672][ C1] EXT4-fs (loop0): last error at time 1785791242: ext4_acquire_dquot:7039 [ 218.656170][ T7375] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 218.668013][ T7375] EXT4-fs error (device loop0): ext4_acquire_dquot:7039: comm syz.0.533: Failed to acquire dquot type 1 [ 218.679185][ T7375] loop0: lost filesystem error report for type 5 error -117 [ 218.681228][ T7346] NFSD: Unable to initialize client recovery tracking! (-110) [ 218.696594][ T7346] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 218.705686][ T7375] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.533: bg 0: block 248: padding at end of block bitmap is not set [ 218.718265][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.718372][ T7346] NFSD: starting 90-second grace period (net f00003cb) [ 218.720311][ T7375] loop0: lost filesystem error report for type 5 error -117 [ 218.740492][ T7375] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 218.757585][ T7375] EXT4-fs error (device loop0): ext4_acquire_dquot:7039: comm syz.0.533: Failed to acquire dquot type 1 [ 218.771101][ T7375] EXT4-fs (loop0): 1 orphan inode deleted [ 218.778973][ T7375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.791531][ T7375] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.125689][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.204141][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz.5.541'. [ 220.552778][ T7411] netlink: 48 bytes leftover after parsing attributes in process `syz.4.547'. [ 220.747124][ T7419] loop2: detected capacity change from 0 to 512 [ 220.778003][ T7419] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.550: iget: bad i_size value: 38620345925642 [ 220.854505][ T7419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.855019][ T7419] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.550: couldn't read orphan inode 15 (err -117) [ 220.864233][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 220.864270][ C1] EXT4-fs (loop2): initial error at time 1785791244: ext4_orphan_get:1399: inode 15 [ 220.864327][ C1] EXT4-fs (loop2): last error at time 1785791244: ext4_orphan_get:1399: inode 15 [ 220.957727][ T7419] fserror_report: 2 callbacks suppressed [ 220.957750][ T7419] loop2: lost filesystem error report for type 5 error -117 [ 220.994260][ T7419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.808638][ T7421] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 223.742614][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.906230][ T7437] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.557'. [ 224.476271][ T7456] loop2: detected capacity change from 0 to 512 [ 224.530030][ T7456] __quota_error: 2 callbacks suppressed [ 224.530051][ T7456] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 224.545922][ T7456] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 224.555885][ T7456] EXT4-fs error (device loop2): ext4_acquire_dquot:7039: comm syz.2.554: Failed to acquire dquot type 1 [ 224.567091][ T7456] loop2: lost filesystem error report for type 5 error -117 [ 224.568321][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 224.582103][ C0] EXT4-fs (loop2): last error at time 1785791248: ext4_acquire_dquot:7039 [ 224.592198][ T7456] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 224.604566][ T7456] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 224.614560][ T7456] EXT4-fs error (device loop2): ext4_acquire_dquot:7039: comm syz.2.554: Failed to acquire dquot type 1 [ 224.625788][ T7456] loop2: lost filesystem error report for type 5 error -117 [ 224.642937][ T7456] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.554: bg 0: block 248: padding at end of block bitmap is not set [ 224.665112][ T7456] loop2: lost filesystem error report for type 5 error -117 [ 224.697559][ T7456] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 224.715638][ T7456] loop2: lost filesystem error report for type 5 error -117 [ 224.806163][ T7456] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 224.828859][ T7456] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 224.839571][ T7456] EXT4-fs error (device loop2): ext4_acquire_dquot:7039: comm syz.2.554: Failed to acquire dquot type 1 [ 224.852597][ T7456] loop2: lost filesystem error report for type 5 error -117 [ 224.950902][ T7456] EXT4-fs (loop2): 1 orphan inode deleted [ 224.982423][ T7456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.995575][ T7456] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.430095][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.472642][ T7468] loop1: detected capacity change from 0 to 512 [ 225.546669][ T7468] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.566: iget: bad i_size value: 38620345925642 [ 225.625380][ T7468] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.628350][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 225.643936][ C0] EXT4-fs (loop1): initial error at time 1785791249: ext4_orphan_get:1399: inode 15 [ 225.653363][ C0] EXT4-fs (loop1): last error at time 1785791249: ext4_orphan_get:1399: inode 15 [ 225.669397][ T7468] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.566: couldn't read orphan inode 15 (err -117) [ 225.763723][ T7468] loop1: lost filesystem error report for type 5 error -117 [ 225.783573][ T7468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.726258][ T7488] netlink: 48 bytes leftover after parsing attributes in process `syz.2.572'. [ 228.807669][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.100112][ T7502] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.577'. [ 229.121630][ T7503] tc_dump_action: action bad kind [ 229.613411][ T7522] loop4: detected capacity change from 0 to 512 [ 229.790141][ T7522] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 229.801763][ T7522] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 229.812166][ T7522] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.581: Failed to acquire dquot type 1 [ 229.823365][ T7522] loop4: lost filesystem error report for type 5 error -117 [ 229.826919][ T7522] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 229.834313][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 229.834345][ C0] EXT4-fs (loop4): last error at time 1785791253: ext4_acquire_dquot:7039 [ 229.859803][ T7522] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 229.869789][ T7522] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.581: Failed to acquire dquot type 1 [ 229.881337][ T7522] loop4: lost filesystem error report for type 5 error -117 [ 229.886799][ T7522] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.581: bg 0: block 248: padding at end of block bitmap is not set [ 229.908601][ T7522] loop4: lost filesystem error report for type 5 error -117 [ 229.917938][ T7522] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 229.935899][ T7522] loop4: lost filesystem error report for type 5 error -117 [ 229.939491][ T7522] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 229.956959][ T7522] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 229.966919][ T7522] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.581: Failed to acquire dquot type 1 [ 229.978086][ T7522] loop4: lost filesystem error report for type 5 error -117 [ 229.978954][ T7522] EXT4-fs (loop4): 1 orphan inode deleted [ 230.006316][ T7522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.019333][ T7522] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.343983][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.504936][ T7546] netlink: 48 bytes leftover after parsing attributes in process `syz.4.590'. [ 233.750648][ T7553] tc_dump_action: action bad kind [ 233.918823][ T7561] netlink: 36 bytes leftover after parsing attributes in process `syz.5.598'. [ 234.036616][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.598'. [ 234.110906][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 234.211938][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 234.290581][ T10] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 234.303172][ T10] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 234.351742][ T10] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 234.407595][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 234.419966][ T7572] ovs-system: entered promiscuous mode [ 234.455299][ T10] usb 2-1: Product: syz [ 234.480674][ T10] usb 2-1: Manufacturer: syz [ 234.619023][ T7585] loop0: detected capacity change from 0 to 512 [ 234.769960][ T7585] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 234.780194][ T7585] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 234.790190][ T7585] EXT4-fs error (device loop0): ext4_acquire_dquot:7039: comm syz.0.603: Failed to acquire dquot type 1 [ 234.801390][ T7585] loop0: lost filesystem error report for type 5 error -117 [ 234.803323][ T7585] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 234.810888][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 234.810918][ C0] EXT4-fs (loop0): last error at time 1785791258: ext4_acquire_dquot:7039 [ 234.836233][ T7585] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 234.848207][ T7585] EXT4-fs error (device loop0): ext4_acquire_dquot:7039: comm syz.0.603: Failed to acquire dquot type 1 [ 234.859535][ T7585] loop0: lost filesystem error report for type 5 error -117 [ 234.874919][ T7585] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.603: bg 0: block 248: padding at end of block bitmap is not set [ 234.896580][ T7585] loop0: lost filesystem error report for type 5 error -117 [ 234.901717][ T7585] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 234.917758][ T7585] loop0: lost filesystem error report for type 5 error -117 [ 234.919038][ T7585] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 234.936486][ T7585] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 234.948551][ T7585] EXT4-fs error (device loop0): ext4_acquire_dquot:7039: comm syz.0.603: Failed to acquire dquot type 1 [ 234.959757][ T7585] loop0: lost filesystem error report for type 5 error -117 [ 234.963488][ T10] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 234.985474][ T7585] EXT4-fs (loop0): 1 orphan inode deleted [ 234.993392][ T7585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.006007][ T7585] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.494800][ T7596] netlink: 48 bytes leftover after parsing attributes in process `syz.2.609'. [ 236.869350][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.233470][ T10] usb 2-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 237.248418][ T10] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 237.362124][ T7616] loop0: detected capacity change from 0 to 512 [ 237.374624][ T7617] tc_dump_action: action bad kind [ 237.441635][ T7616] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.611: iget: bad i_size value: 38620345925642 [ 237.469367][ T7616] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 237.478339][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 237.493918][ C0] EXT4-fs (loop0): initial error at time 1785791261: ext4_orphan_get:1399: inode 15 [ 237.503350][ C0] EXT4-fs (loop0): last error at time 1785791261: ext4_orphan_get:1399: inode 15 [ 237.516080][ T7616] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.611: couldn't read orphan inode 15 (err -117) [ 237.527906][ T7616] loop0: lost filesystem error report for type 5 error -117 [ 237.592500][ T7616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.784299][ T7616] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.611: bg 0: block 5: invalid block bitmap [ 237.836684][ T7616] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 116 with error 28 [ 237.926159][ T7616] EXT4-fs (loop0): This should not happen!! Data will be lost [ 237.926159][ T7616] [ 237.991607][ T7616] EXT4-fs (loop0): Total free blocks count 0 [ 238.018834][ T7616] EXT4-fs (loop0): Free/Dirty block details [ 238.058282][ T7616] EXT4-fs (loop0): free_blocks=0 [ 238.085822][ T7616] EXT4-fs (loop0): dirty_blocks=120 [ 238.131146][ T7616] EXT4-fs (loop0): Block reservation details [ 238.158889][ T7637] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.618'. [ 238.160019][ T7616] EXT4-fs (loop0): i_reserved_data_blocks=120 [ 238.394577][ T5621] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 238.442906][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.759584][ T7655] loop0: detected capacity change from 0 to 512 [ 238.809814][ T7655] EXT4-fs: Ignoring removed oldalloc option [ 238.867236][ T7655] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 238.951361][ T7655] EXT4-fs (loop0): 1 truncate cleaned up [ 238.975219][ T7655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.683714][ T7668] tc_dump_action: action bad kind [ 239.764886][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 240.024706][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.395228][ T7685] netlink: 48 bytes leftover after parsing attributes in process `syz.2.633'. [ 240.440865][ T7687] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.634'. [ 240.672512][ T7693] loop0: detected capacity change from 0 to 512 [ 240.723171][ T7693] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.636: iget: bad i_size value: 38620345925642 [ 240.740003][ T7693] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 240.748342][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 240.763956][ C0] EXT4-fs (loop0): initial error at time 1785791264: ext4_orphan_get:1399: inode 15 [ 240.773413][ C0] EXT4-fs (loop0): last error at time 1785791264: ext4_orphan_get:1399: inode 15 [ 240.784224][ T7693] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.636: couldn't read orphan inode 15 (err -117) [ 240.828445][ T7693] loop0: lost filesystem error report for type 5 error -117 [ 240.831513][ T7693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.079859][ T7693] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.636: bg 0: block 5: invalid block bitmap [ 241.121351][ T7693] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 152 with error 28 [ 241.153600][ T7693] EXT4-fs (loop0): This should not happen!! Data will be lost [ 241.153600][ T7693] [ 241.165871][ T7693] EXT4-fs (loop0): Total free blocks count 0 [ 241.172021][ T7693] EXT4-fs (loop0): Free/Dirty block details [ 241.178145][ T7693] EXT4-fs (loop0): free_blocks=0 [ 241.199897][ T7693] EXT4-fs (loop0): dirty_blocks=156 [ 241.217587][ T7693] EXT4-fs (loop0): Block reservation details [ 241.234896][ T7693] EXT4-fs (loop0): i_reserved_data_blocks=156 [ 242.189273][ T5621] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 242.272654][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.427440][ T7719] FAULT_INJECTION: forcing a failure. [ 242.427440][ T7719] name failslab, interval 1, probability 100, space 0, times 10 [ 242.429436][ T5621] FAULT_INJECTION: forcing a failure. [ 242.429436][ T5621] name failslab, interval 1, probability 100, space 0, times 9 [ 242.440643][ T4985] FAULT_INJECTION: forcing a failure. [ 242.440643][ T4985] name failslab, interval 1, probability 100, space 0, times 9 [ 242.453363][ T7717] FAULT_INJECTION: forcing a failure. [ 242.453363][ T7717] name failslab, interval 1, probability 100, space 0, times 9 [ 242.466852][ T5622] FAULT_INJECTION: forcing a failure. [ 242.466852][ T5622] name failslab, interval 1, probability 100, space 0, times 9 [ 242.482062][ T6457] FAULT_INJECTION: forcing a failure. [ 242.482062][ T6457] name failslab, interval 1, probability 100, space 0, times 9 [ 242.505442][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 242.505483][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.505507][ T6457] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.505559][ T6457] Call Trace: [ 242.505569][ T6457] [ 242.505581][ T6457] dump_stack_lvl+0x100/0x190 [ 242.505622][ T6457] should_fail_ex.cold+0x5/0xa [ 242.505661][ T6457] should_failslab+0xc2/0x120 [ 242.505698][ T6457] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.505762][ T6457] ? __alloc_skb+0x140/0x710 [ 242.505817][ T6457] __alloc_skb+0x140/0x710 [ 242.505860][ T6457] ? __alloc_skb+0x5b7/0x710 [ 242.505905][ T6457] ? __pfx___alloc_skb+0x10/0x10 [ 242.505949][ T6457] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.505998][ T6457] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.506054][ T6457] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.506124][ T6457] process_one_work+0xa23/0x1940 [ 242.506176][ T6457] ? __pfx_process_one_work+0x10/0x10 [ 242.506209][ T6457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.506264][ T6457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.506312][ T6457] worker_thread+0x5ef/0xe50 [ 242.506358][ T6457] ? __pfx_worker_thread+0x10/0x10 [ 242.506394][ T6457] ? kthread+0x13a/0x450 [ 242.506445][ T6457] ? __pfx_worker_thread+0x10/0x10 [ 242.506477][ T6457] kthread+0x370/0x450 [ 242.506529][ T6457] ? __pfx_kthread+0x10/0x10 [ 242.506586][ T6457] ret_from_fork+0x72b/0xd50 [ 242.506634][ T6457] ? __pfx_ret_from_fork+0x10/0x10 [ 242.506682][ T6457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.506724][ T6457] ? __switch_to+0x800/0x10f0 [ 242.506783][ T6457] ? __switch_to_asm+0x39/0x70 [ 242.506831][ T6457] ? __pfx_kthread+0x10/0x10 [ 242.506888][ T6457] ret_from_fork_asm+0x1a/0x30 [ 242.506957][ T6457] [ 242.507386][ T6457] FAULT_INJECTION: forcing a failure. [ 242.507386][ T6457] name failslab, interval 1, probability 100, space 0, times 8 [ 242.508415][ T6138] FAULT_INJECTION: forcing a failure. [ 242.508415][ T6138] name failslab, interval 1, probability 100, space 0, times 8 [ 242.517008][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 242.517049][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.517071][ T6457] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.517118][ T6457] Call Trace: [ 242.517128][ T6457] [ 242.517140][ T6457] dump_stack_lvl+0x100/0x190 [ 242.517179][ T6457] should_fail_ex.cold+0x5/0xa [ 242.517218][ T6457] should_failslab+0xc2/0x120 [ 242.517253][ T6457] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.517311][ T6457] ? __alloc_skb+0x140/0x710 [ 242.517365][ T6457] __alloc_skb+0x140/0x710 [ 242.517408][ T6457] ? __alloc_skb+0x5b7/0x710 [ 242.517451][ T6457] ? __pfx___alloc_skb+0x10/0x10 [ 242.517494][ T6457] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.517541][ T6457] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.517596][ T6457] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.517665][ T6457] process_one_work+0xa23/0x1940 [ 242.517717][ T6457] ? __pfx_process_one_work+0x10/0x10 [ 242.517749][ T6457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.517809][ T6457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.517857][ T6457] worker_thread+0x5ef/0xe50 [ 242.517902][ T6457] ? __pfx_worker_thread+0x10/0x10 [ 242.517937][ T6457] ? kthread+0x13a/0x450 [ 242.517988][ T6457] ? __pfx_worker_thread+0x10/0x10 [ 242.518019][ T6457] kthread+0x370/0x450 [ 242.518070][ T6457] ? __pfx_kthread+0x10/0x10 [ 242.518126][ T6457] ret_from_fork+0x72b/0xd50 [ 242.518172][ T6457] ? __pfx_ret_from_fork+0x10/0x10 [ 242.518219][ T6457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.518259][ T6457] ? __switch_to+0x800/0x10f0 [ 242.518314][ T6457] ? __switch_to_asm+0x39/0x70 [ 242.518361][ T6457] ? __pfx_kthread+0x10/0x10 [ 242.518417][ T6457] ret_from_fork_asm+0x1a/0x30 [ 242.518486][ T6457] [ 242.518538][ T6457] FAULT_INJECTION: forcing a failure. [ 242.518538][ T6457] name failslab, interval 1, probability 100, space 0, times 7 [ 242.527084][ C1] FAULT_INJECTION: forcing a failure. [ 242.527084][ C1] name failslab, interval 1, probability 100, space 0, times 7 [ 242.527124][ C0] FAULT_INJECTION: forcing a failure. [ 242.527124][ C0] name failslab, interval 1, probability 100, space 0, times 7 [ 242.527125][ C1] CPU: 1 UID: 0 PID: 6457 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 242.527166][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.527188][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.527234][ C1] Call Trace: [ 242.527244][ C1] [ 242.527256][ C1] dump_stack_lvl+0x100/0x190 [ 242.527295][ C1] should_fail_ex.cold+0x5/0xa [ 242.527331][ C1] should_failslab+0xc2/0x120 [ 242.527366][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.527423][ C1] ? __alloc_skb+0x140/0x710 [ 242.527475][ C1] __alloc_skb+0x140/0x710 [ 242.527517][ C1] ? __alloc_skb+0x5b7/0x710 [ 242.527561][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 242.527608][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.527649][ C1] ? lock_acquire+0x1b9/0x370 [ 242.527693][ C1] __netdev_alloc_skb+0x7a/0x960 [ 242.527745][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 242.527805][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.527845][ C1] ? __lock_acquire+0x49f/0x1a40 [ 242.527889][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 242.527943][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 242.527999][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.528046][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 242.528103][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.528149][ C1] __iterate_interfaces+0x2e6/0x650 [ 242.528196][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.528250][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.528305][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 242.528363][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 242.528402][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 242.528441][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 242.528506][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 242.528560][ C1] handle_softirqs+0x1ea/0x9b0 [ 242.528608][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 242.528648][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.528689][ C1] ? _raw_spin_unlock+0x28/0x50 [ 242.528726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.528770][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 242.528828][ C1] __irq_exit_rcu+0x162/0x210 [ 242.528869][ C1] irq_exit_rcu+0x9/0x30 [ 242.528908][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 242.528953][ C1] [ 242.528963][ C1] [ 242.528975][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.529013][ C1] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 242.529064][ C1] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 f8 ae 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 86 a9 21 00 48 85 ed 0f 85 27 01 00 00 d8 ae 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 242.529097][ C1] RSP: 0018:ffffc9000ce57890 EFLAGS: 00000293 [ 242.529122][ C1] RAX: 0000000000000000 RBX: 0000000000000060 RCX: ffffffff81e8a33a [ 242.529144][ C1] RDX: ffff88803004dd00 RSI: ffffffff81e8a344 RDI: ffff88803004dd00 [ 242.529166][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 242.529186][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920019caf14 [ 242.529207][ C1] R13: 0000000000000200 R14: ffff88802a9a5d00 R15: ffffc9000ce57958 [ 242.529240][ C1] ? vprintk_emit+0x66a/0x6b0 [ 242.529289][ C1] ? vprintk_emit+0x674/0x6b0 [ 242.529346][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 242.529395][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.529438][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.529478][ C1] ? irqentry_exit+0x24d/0xa00 [ 242.529522][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.529570][ C1] _printk+0xcf/0x110 [ 242.529602][ C1] ? __pfx__printk+0x10/0x10 [ 242.529633][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.529678][ C1] ? dump_stack_lvl+0x16c/0x190 [ 242.529711][ C1] ? dump_stack_lvl+0x176/0x190 [ 242.529745][ C1] ? __pfx____ratelimit+0x10/0x10 [ 242.529801][ C1] should_fail_ex+0x4e4/0x640 [ 242.529859][ C1] should_failslab+0xc2/0x120 [ 242.529894][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.529951][ C1] ? __alloc_skb+0x140/0x710 [ 242.530002][ C1] __alloc_skb+0x140/0x710 [ 242.530045][ C1] ? __alloc_skb+0x5b7/0x710 [ 242.530089][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 242.530132][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.530178][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.530232][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.530300][ C1] process_one_work+0xa23/0x1940 [ 242.530349][ C1] ? __pfx_process_one_work+0x10/0x10 [ 242.530381][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.530435][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.530481][ C1] worker_thread+0x5ef/0xe50 [ 242.530525][ C1] ? __pfx_worker_thread+0x10/0x10 [ 242.530561][ C1] ? kthread+0x13a/0x450 [ 242.530610][ C1] ? __pfx_worker_thread+0x10/0x10 [ 242.530652][ C1] kthread+0x370/0x450 [ 242.530703][ C1] ? __pfx_kthread+0x10/0x10 [ 242.530763][ C1] ret_from_fork+0x72b/0xd50 [ 242.530809][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 242.530856][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.530896][ C1] ? __switch_to+0x800/0x10f0 [ 242.530948][ C1] ? __switch_to_asm+0x39/0x70 [ 242.530995][ C1] ? __pfx_kthread+0x10/0x10 [ 242.531050][ C1] ret_from_fork_asm+0x1a/0x30 [ 242.531117][ C1] [ 242.531132][ C0] CPU: 0 UID: 0 PID: 6138 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 242.531166][ C1] FAULT_INJECTION: forcing a failure. [ 242.531166][ C1] name failslab, interval 1, probability 100, space 0, times 6 [ 242.531174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.531197][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.531243][ C0] Call Trace: [ 242.531253][ C0] [ 242.531270][ C0] dump_stack_lvl+0x100/0x190 [ 242.531307][ C0] should_fail_ex.cold+0x5/0xa [ 242.531345][ C0] should_failslab+0xc2/0x120 [ 242.531380][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.531437][ C0] ? __alloc_skb+0x140/0x710 [ 242.531489][ C0] __alloc_skb+0x140/0x710 [ 242.531532][ C0] ? __alloc_skb+0x5b7/0x710 [ 242.531576][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 242.531623][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.531664][ C0] ? lock_acquire+0x1b9/0x370 [ 242.531709][ C0] __netdev_alloc_skb+0x7a/0x960 [ 242.531762][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 242.531819][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.531860][ C0] ? __lock_acquire+0x49f/0x1a40 [ 242.531905][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 242.531959][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 242.532015][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.532063][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 242.532120][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.532166][ C0] __iterate_interfaces+0x2e6/0x650 [ 242.532213][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.532273][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.532325][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 242.532381][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 242.532421][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 242.532460][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 242.532525][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 242.532579][ C0] handle_softirqs+0x1ea/0x9b0 [ 242.532627][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 242.532669][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.532709][ C0] ? _raw_spin_unlock+0x28/0x50 [ 242.532746][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.532787][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 242.532847][ C0] __irq_exit_rcu+0x162/0x210 [ 242.532888][ C0] irq_exit_rcu+0x9/0x30 [ 242.532928][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 242.532972][ C0] [ 242.532983][ C0] [ 242.532995][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.533034][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 242.533086][ C0] Code: 00 e8 b1 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 9f d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 f1 d5 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 242.533119][ C0] RSP: 0018:ffffc90007077698 EFLAGS: 00000293 [ 242.533144][ C0] RAX: ffffffff8f9afb18 RBX: ffffffff8f9afac0 RCX: ffffffff81e87b01 [ 242.533167][ C0] RDX: ffff88802a9a5d00 RSI: ffffffff81e87b0f RDI: ffff88802a9a5d00 [ 242.533189][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 242.533210][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001586 [ 242.533231][ C0] R13: ffffffff8f9afb18 R14: ffffc90007077718 R15: dffffc0000000000 [ 242.533269][ C0] ? console_flush_one_record+0xab1/0xe50 [ 242.533320][ C0] ? console_flush_one_record+0xabf/0xe50 [ 242.533376][ C0] ? console_flush_one_record+0xabf/0xe50 [ 242.533435][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 242.533487][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 242.533540][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.533591][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.533632][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 242.533694][ C0] console_unlock+0x103/0x260 [ 242.533743][ C0] ? __pfx_console_unlock+0x10/0x10 [ 242.533792][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.533833][ C0] ? lock_acquire+0x101/0x370 [ 242.533878][ C0] ? vprintk_emit+0x66a/0x6b0 [ 242.533933][ C0] vprintk_emit+0x407/0x6b0 [ 242.533985][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 242.534048][ C0] _printk+0xcf/0x110 [ 242.534080][ C0] ? __pfx__printk+0x10/0x10 [ 242.534111][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.534161][ C0] ? __pfx____ratelimit+0x10/0x10 [ 242.534203][ C0] ? wakeup_preempt_fair+0x640/0x1060 [ 242.534260][ C0] should_fail_ex+0x4e4/0x640 [ 242.534317][ C0] should_failslab+0xc2/0x120 [ 242.534352][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.534409][ C0] ? __alloc_skb+0x140/0x710 [ 242.534462][ C0] __alloc_skb+0x140/0x710 [ 242.534504][ C0] ? __alloc_skb+0x5b7/0x710 [ 242.534549][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 242.534593][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.534639][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.534694][ C0] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.534762][ C0] process_one_work+0xa23/0x1940 [ 242.534812][ C0] ? __pfx_process_one_work+0x10/0x10 [ 242.534845][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.534899][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.534947][ C0] worker_thread+0x5ef/0xe50 [ 242.534991][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.535026][ C0] ? kthread+0x13a/0x450 [ 242.535077][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.535108][ C0] kthread+0x370/0x450 [ 242.535160][ C0] ? __pfx_kthread+0x10/0x10 [ 242.535216][ C0] ret_from_fork+0x72b/0xd50 [ 242.535265][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 242.535312][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.535354][ C0] ? __switch_to+0x800/0x10f0 [ 242.535406][ C0] ? __switch_to_asm+0x39/0x70 [ 242.535453][ C0] ? __pfx_kthread+0x10/0x10 [ 242.535509][ C0] ret_from_fork_asm+0x1a/0x30 [ 242.535577][ C0] [ 242.535591][ C1] CPU: 1 UID: 0 PID: 6457 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 242.535600][ C0] FAULT_INJECTION: forcing a failure. [ 242.535600][ C0] name failslab, interval 1, probability 100, space 0, times 5 [ 242.535634][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.535655][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.535700][ C1] Call Trace: [ 242.535710][ C1] [ 242.535722][ C1] dump_stack_lvl+0x100/0x190 [ 242.535764][ C1] should_fail_ex.cold+0x5/0xa [ 242.535800][ C1] should_failslab+0xc2/0x120 [ 242.535835][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.535891][ C1] ? __alloc_skb+0x140/0x710 [ 242.535943][ C1] __alloc_skb+0x140/0x710 [ 242.535985][ C1] ? __alloc_skb+0x5b7/0x710 [ 242.536029][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 242.536074][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.536115][ C1] ? lock_acquire+0x1b9/0x370 [ 242.536159][ C1] __netdev_alloc_skb+0x7a/0x960 [ 242.536211][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 242.536264][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.536305][ C1] ? __lock_acquire+0x49f/0x1a40 [ 242.536348][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 242.536402][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 242.536457][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.536505][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 242.536561][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.536607][ C1] __iterate_interfaces+0x2e6/0x650 [ 242.536653][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.536708][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.536763][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 242.536818][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 242.536858][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 242.536896][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 242.536960][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 242.537014][ C1] handle_softirqs+0x1ea/0x9b0 [ 242.537061][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 242.537102][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.537142][ C1] ? _raw_spin_unlock+0x28/0x50 [ 242.537178][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.537219][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 242.537277][ C1] __irq_exit_rcu+0x162/0x210 [ 242.537317][ C1] irq_exit_rcu+0x9/0x30 [ 242.537356][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 242.537400][ C1] [ 242.537410][ C1] [ 242.537422][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.537460][ C1] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 242.537510][ C1] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 f8 ae 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 86 a9 21 00 48 85 ed 0f 85 27 01 00 00 d8 ae 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 242.537542][ C1] RSP: 0018:ffffc9000ce57890 EFLAGS: 00000293 [ 242.537566][ C1] RAX: 0000000000000000 RBX: 0000000000000060 RCX: ffffffff81e8a33a [ 242.537587][ C1] RDX: ffff88803004dd00 RSI: ffffffff81e8a344 RDI: ffff88803004dd00 [ 242.537610][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 242.537630][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920019caf14 [ 242.537650][ C1] R13: 0000000000000200 R14: ffff88802a9a5d00 R15: ffffc9000ce57958 [ 242.537683][ C1] ? vprintk_emit+0x66a/0x6b0 [ 242.537732][ C1] ? vprintk_emit+0x674/0x6b0 [ 242.537792][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 242.537842][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.537892][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.537943][ C1] ? irqentry_exit+0x24d/0xa00 [ 242.537999][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.538056][ C1] _printk+0xcf/0x110 [ 242.538090][ C1] ? __pfx__printk+0x10/0x10 [ 242.538124][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.538173][ C1] ? dump_stack_lvl+0x16c/0x190 [ 242.538208][ C1] ? dump_stack_lvl+0x176/0x190 [ 242.538244][ C1] ? __pfx____ratelimit+0x10/0x10 [ 242.538305][ C1] should_fail_ex+0x4e4/0x640 [ 242.538368][ C1] should_failslab+0xc2/0x120 [ 242.538406][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.538467][ C1] ? __alloc_skb+0x140/0x710 [ 242.538523][ C1] __alloc_skb+0x140/0x710 [ 242.538569][ C1] ? __alloc_skb+0x5b7/0x710 [ 242.538616][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 242.538663][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.538713][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.538776][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.538849][ C1] process_one_work+0xa23/0x1940 [ 242.538903][ C1] ? __pfx_process_one_work+0x10/0x10 [ 242.538937][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.538995][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.539046][ C1] worker_thread+0x5ef/0xe50 [ 242.539093][ C1] ? __pfx_worker_thread+0x10/0x10 [ 242.539132][ C1] ? kthread+0x13a/0x450 [ 242.539185][ C1] ? __pfx_worker_thread+0x10/0x10 [ 242.539219][ C1] kthread+0x370/0x450 [ 242.539275][ C1] ? __pfx_kthread+0x10/0x10 [ 242.539335][ C1] ret_from_fork+0x72b/0xd50 [ 242.539384][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 242.539435][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.539478][ C1] ? __switch_to+0x800/0x10f0 [ 242.539538][ C1] ? __switch_to_asm+0x39/0x70 [ 242.539597][ C1] ? __pfx_kthread+0x10/0x10 [ 242.539669][ C1] ret_from_fork_asm+0x1a/0x30 [ 242.539750][ C1] [ 242.539770][ C0] CPU: 0 UID: 0 PID: 6138 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 242.539801][ C1] FAULT_INJECTION: forcing a failure. [ 242.539801][ C1] name failslab, interval 1, probability 100, space 0, times 4 [ 242.539813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.539835][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.539881][ C0] Call Trace: [ 242.539891][ C0] [ 242.539902][ C0] dump_stack_lvl+0x100/0x190 [ 242.539940][ C0] should_fail_ex.cold+0x5/0xa [ 242.539977][ C0] should_failslab+0xc2/0x120 [ 242.540012][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.540069][ C0] ? __alloc_skb+0x140/0x710 [ 242.540121][ C0] __alloc_skb+0x140/0x710 [ 242.540164][ C0] ? __alloc_skb+0x5b7/0x710 [ 242.540209][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 242.540260][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.540301][ C0] ? lock_acquire+0x1b9/0x370 [ 242.540346][ C0] __netdev_alloc_skb+0x7a/0x960 [ 242.540399][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 242.540453][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.540494][ C0] ? __lock_acquire+0x49f/0x1a40 [ 242.540538][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 242.540592][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 242.540648][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.540697][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 242.540753][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.540800][ C0] __iterate_interfaces+0x2e6/0x650 [ 242.540847][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.540902][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.540954][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 242.541010][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 242.541050][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 242.541089][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 242.541153][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 242.541207][ C0] handle_softirqs+0x1ea/0x9b0 [ 242.541258][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 242.541300][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.541341][ C0] ? _raw_spin_unlock+0x28/0x50 [ 242.541378][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.541419][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 242.541477][ C0] __irq_exit_rcu+0x162/0x210 [ 242.541519][ C0] irq_exit_rcu+0x9/0x30 [ 242.541558][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 242.541603][ C0] [ 242.541613][ C0] [ 242.541626][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.541663][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 242.541715][ C0] Code: 00 e8 b1 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 9f d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 f1 d5 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 242.541748][ C0] RSP: 0018:ffffc90007077698 EFLAGS: 00000293 [ 242.541773][ C0] RAX: ffffffff8f9afb18 RBX: ffffffff8f9afac0 RCX: ffffffff81e87b01 [ 242.541795][ C0] RDX: ffff88802a9a5d00 RSI: ffffffff81e87b0f RDI: ffff88802a9a5d00 [ 242.541818][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 242.541838][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001586 [ 242.541859][ C0] R13: ffffffff8f9afb18 R14: ffffc90007077718 R15: dffffc0000000000 [ 242.541892][ C0] ? console_flush_one_record+0xab1/0xe50 [ 242.541943][ C0] ? console_flush_one_record+0xabf/0xe50 [ 242.541998][ C0] ? console_flush_one_record+0xabf/0xe50 [ 242.542056][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 242.542108][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 242.542161][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.542211][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.542252][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 242.542319][ C0] console_unlock+0x103/0x260 [ 242.542368][ C0] ? __pfx_console_unlock+0x10/0x10 [ 242.542417][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.542458][ C0] ? lock_acquire+0x101/0x370 [ 242.542503][ C0] ? vprintk_emit+0x66a/0x6b0 [ 242.542558][ C0] vprintk_emit+0x407/0x6b0 [ 242.542610][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 242.542673][ C0] _printk+0xcf/0x110 [ 242.542705][ C0] ? __pfx__printk+0x10/0x10 [ 242.542736][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.542786][ C0] ? __pfx____ratelimit+0x10/0x10 [ 242.542830][ C0] ? wakeup_preempt_fair+0x640/0x1060 [ 242.542881][ C0] should_fail_ex+0x4e4/0x640 [ 242.542939][ C0] should_failslab+0xc2/0x120 [ 242.542974][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.543032][ C0] ? __alloc_skb+0x140/0x710 [ 242.543084][ C0] __alloc_skb+0x140/0x710 [ 242.543128][ C0] ? __alloc_skb+0x5b7/0x710 [ 242.543173][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 242.543217][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.543268][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.543323][ C0] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.543392][ C0] process_one_work+0xa23/0x1940 [ 242.543443][ C0] ? __pfx_process_one_work+0x10/0x10 [ 242.543475][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.543530][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.543578][ C0] worker_thread+0x5ef/0xe50 [ 242.543622][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.543658][ C0] ? kthread+0x13a/0x450 [ 242.543708][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.543740][ C0] kthread+0x370/0x450 [ 242.543792][ C0] ? __pfx_kthread+0x10/0x10 [ 242.543848][ C0] ret_from_fork+0x72b/0xd50 [ 242.543894][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 242.543942][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.543982][ C0] ? __switch_to+0x800/0x10f0 [ 242.544036][ C0] ? __switch_to_asm+0x39/0x70 [ 242.544082][ C0] ? __pfx_kthread+0x10/0x10 [ 242.544139][ C0] ret_from_fork_asm+0x1a/0x30 [ 242.544206][ C0] [ 242.544221][ C1] CPU: 1 UID: 0 PID: 6457 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 242.544229][ C0] FAULT_INJECTION: forcing a failure. [ 242.544229][ C0] name failslab, interval 1, probability 100, space 0, times 3 [ 242.544262][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.544283][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.544328][ C1] Call Trace: [ 242.544338][ C1] [ 242.544349][ C1] dump_stack_lvl+0x100/0x190 [ 242.544386][ C1] should_fail_ex.cold+0x5/0xa [ 242.544423][ C1] should_failslab+0xc2/0x120 [ 242.544457][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.544514][ C1] ? __alloc_skb+0x140/0x710 [ 242.544565][ C1] __alloc_skb+0x140/0x710 [ 242.544609][ C1] ? __alloc_skb+0x5b7/0x710 [ 242.544653][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 242.544699][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.544740][ C1] ? lock_acquire+0x1b9/0x370 [ 242.544788][ C1] __netdev_alloc_skb+0x7a/0x960 [ 242.544841][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 242.544894][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.544934][ C1] ? __lock_acquire+0x49f/0x1a40 [ 242.544978][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 242.545031][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 242.545087][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.545135][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 242.545191][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.545237][ C1] __iterate_interfaces+0x2e6/0x650 [ 242.545284][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.545338][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.545388][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 242.545444][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 242.545484][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 242.545522][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 242.545586][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 242.545640][ C1] handle_softirqs+0x1ea/0x9b0 [ 242.545687][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 242.545728][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.545772][ C1] ? _raw_spin_unlock+0x28/0x50 [ 242.545810][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.545850][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 242.545909][ C1] __irq_exit_rcu+0x162/0x210 [ 242.545951][ C1] irq_exit_rcu+0x9/0x30 [ 242.545990][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 242.546035][ C1] [ 242.546045][ C1] [ 242.546057][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.546095][ C1] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 242.546146][ C1] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 f8 ae 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 86 a9 21 00 48 85 ed 0f 85 27 01 00 00 d8 ae 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 242.546179][ C1] RSP: 0018:ffffc9000ce57890 EFLAGS: 00000293 [ 242.546203][ C1] RAX: 0000000000000000 RBX: 0000000000000060 RCX: ffffffff81e8a33a [ 242.546224][ C1] RDX: ffff88803004dd00 RSI: ffffffff81e8a344 RDI: ffff88803004dd00 [ 242.546247][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 242.546268][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920019caf14 [ 242.546289][ C1] R13: 0000000000000200 R14: ffff88802a9a5d00 R15: ffffc9000ce57958 [ 242.546322][ C1] ? vprintk_emit+0x66a/0x6b0 [ 242.546371][ C1] ? vprintk_emit+0x674/0x6b0 [ 242.546429][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 242.546478][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.546521][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.546562][ C1] ? irqentry_exit+0x24d/0xa00 [ 242.546607][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.546655][ C1] _printk+0xcf/0x110 [ 242.546688][ C1] ? __pfx__printk+0x10/0x10 [ 242.546719][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.546770][ C1] ? dump_stack_lvl+0x16c/0x190 [ 242.546803][ C1] ? dump_stack_lvl+0x176/0x190 [ 242.546838][ C1] ? __pfx____ratelimit+0x10/0x10 [ 242.546889][ C1] should_fail_ex+0x4e4/0x640 [ 242.546947][ C1] should_failslab+0xc2/0x120 [ 242.546982][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.547040][ C1] ? __alloc_skb+0x140/0x710 [ 242.547093][ C1] __alloc_skb+0x140/0x710 [ 242.547136][ C1] ? __alloc_skb+0x5b7/0x710 [ 242.547181][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 242.547225][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.547272][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.547328][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.547396][ C1] process_one_work+0xa23/0x1940 [ 242.547447][ C1] ? __pfx_process_one_work+0x10/0x10 [ 242.547480][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.547534][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.547582][ C1] worker_thread+0x5ef/0xe50 [ 242.547627][ C1] ? __pfx_worker_thread+0x10/0x10 [ 242.547663][ C1] ? kthread+0x13a/0x450 [ 242.547713][ C1] ? __pfx_worker_thread+0x10/0x10 [ 242.547744][ C1] kthread+0x370/0x450 [ 242.547800][ C1] ? __pfx_kthread+0x10/0x10 [ 242.547855][ C1] ret_from_fork+0x72b/0xd50 [ 242.547901][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 242.547947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.547988][ C1] ? __switch_to+0x800/0x10f0 [ 242.548040][ C1] ? __switch_to_asm+0x39/0x70 [ 242.548086][ C1] ? __pfx_kthread+0x10/0x10 [ 242.548141][ C1] ret_from_fork_asm+0x1a/0x30 [ 242.548208][ C1] [ 242.548222][ C0] CPU: 0 UID: 0 PID: 6138 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 242.548230][ C1] FAULT_INJECTION: forcing a failure. [ 242.548230][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 242.548267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.548292][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.548339][ C0] Call Trace: [ 242.548349][ C0] [ 242.548360][ C0] dump_stack_lvl+0x100/0x190 [ 242.548398][ C0] should_fail_ex.cold+0x5/0xa [ 242.548435][ C0] should_failslab+0xc2/0x120 [ 242.548470][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.548527][ C0] ? __alloc_skb+0x140/0x710 [ 242.548580][ C0] __alloc_skb+0x140/0x710 [ 242.548623][ C0] ? __alloc_skb+0x5b7/0x710 [ 242.548668][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 242.548714][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.548755][ C0] ? lock_acquire+0x1b9/0x370 [ 242.548800][ C0] __netdev_alloc_skb+0x7a/0x960 [ 242.548853][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 242.548910][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.548951][ C0] ? __lock_acquire+0x49f/0x1a40 [ 242.548998][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 242.549051][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 242.549108][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.549157][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 242.549212][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.549263][ C0] __iterate_interfaces+0x2e6/0x650 [ 242.549311][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.549366][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.549418][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 242.549475][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 242.549514][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 242.549554][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 242.549618][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 242.549673][ C0] handle_softirqs+0x1ea/0x9b0 [ 242.549720][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 242.549762][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.549803][ C0] ? _raw_spin_unlock+0x28/0x50 [ 242.549839][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.549880][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 242.549939][ C0] __irq_exit_rcu+0x162/0x210 [ 242.549980][ C0] irq_exit_rcu+0x9/0x30 [ 242.550019][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 242.550064][ C0] [ 242.550074][ C0] [ 242.550087][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.550124][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 242.550176][ C0] Code: 00 e8 b1 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 9f d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 f1 d5 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 242.550209][ C0] RSP: 0018:ffffc90007077698 EFLAGS: 00000293 [ 242.550234][ C0] RAX: ffffffff8f9afb18 RBX: ffffffff8f9afac0 RCX: ffffffff81e87b01 [ 242.550261][ C0] RDX: ffff88802a9a5d00 RSI: ffffffff81e87b0f RDI: ffff88802a9a5d00 [ 242.550284][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 242.550304][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001586 [ 242.550325][ C0] R13: ffffffff8f9afb18 R14: ffffc90007077718 R15: dffffc0000000000 [ 242.550358][ C0] ? console_flush_one_record+0xab1/0xe50 [ 242.550408][ C0] ? console_flush_one_record+0xabf/0xe50 [ 242.550464][ C0] ? console_flush_one_record+0xabf/0xe50 [ 242.550523][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 242.550574][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 242.550628][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.550690][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.550731][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 242.550792][ C0] console_unlock+0x103/0x260 [ 242.550842][ C0] ? __pfx_console_unlock+0x10/0x10 [ 242.550891][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.550932][ C0] ? lock_acquire+0x101/0x370 [ 242.550977][ C0] ? vprintk_emit+0x66a/0x6b0 [ 242.551032][ C0] vprintk_emit+0x407/0x6b0 [ 242.551085][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 242.551147][ C0] _printk+0xcf/0x110 [ 242.551179][ C0] ? __pfx__printk+0x10/0x10 [ 242.551210][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.551264][ C0] ? __pfx____ratelimit+0x10/0x10 [ 242.551307][ C0] ? wakeup_preempt_fair+0x640/0x1060 [ 242.551358][ C0] should_fail_ex+0x4e4/0x640 [ 242.551415][ C0] should_failslab+0xc2/0x120 [ 242.551450][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.551508][ C0] ? __alloc_skb+0x140/0x710 [ 242.551560][ C0] __alloc_skb+0x140/0x710 [ 242.551603][ C0] ? __alloc_skb+0x5b7/0x710 [ 242.551648][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 242.551692][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.551739][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.551794][ C0] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.551862][ C0] process_one_work+0xa23/0x1940 [ 242.551912][ C0] ? __pfx_process_one_work+0x10/0x10 [ 242.551944][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.551998][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.552046][ C0] worker_thread+0x5ef/0xe50 [ 242.552089][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.552125][ C0] ? kthread+0x13a/0x450 [ 242.552176][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.552208][ C0] kthread+0x370/0x450 [ 242.552263][ C0] ? __pfx_kthread+0x10/0x10 [ 242.552319][ C0] ret_from_fork+0x72b/0xd50 [ 242.552366][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 242.552413][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.552453][ C0] ? __switch_to+0x800/0x10f0 [ 242.552507][ C0] ? __switch_to_asm+0x39/0x70 [ 242.552554][ C0] ? __pfx_kthread+0x10/0x10 [ 242.552610][ C0] ret_from_fork_asm+0x1a/0x30 [ 242.552678][ C0] [ 242.552692][ C1] CPU: 1 UID: 0 PID: 6457 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 242.552735][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.552729][ C0] FAULT_INJECTION: forcing a failure. [ 242.552729][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 242.552763][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.552808][ C1] Call Trace: [ 242.552818][ C1] [ 242.552829][ C1] dump_stack_lvl+0x100/0x190 [ 242.552866][ C1] should_fail_ex.cold+0x5/0xa [ 242.552903][ C1] should_failslab+0xc2/0x120 [ 242.552937][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.552994][ C1] ? __alloc_skb+0x140/0x710 [ 242.553046][ C1] __alloc_skb+0x140/0x710 [ 242.553088][ C1] ? __alloc_skb+0x5b7/0x710 [ 242.553132][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 242.553178][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.553219][ C1] ? lock_acquire+0x1b9/0x370 [ 242.553263][ C1] __netdev_alloc_skb+0x7a/0x960 [ 242.553316][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 242.553369][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.553409][ C1] ? __lock_acquire+0x49f/0x1a40 [ 242.553453][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 242.553506][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 242.553562][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.553610][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 242.553666][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.553712][ C1] __iterate_interfaces+0x2e6/0x650 [ 242.553763][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.553818][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.553869][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 242.553925][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 242.553965][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 242.554004][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 242.554068][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 242.554123][ C1] handle_softirqs+0x1ea/0x9b0 [ 242.554170][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 242.554211][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.554251][ C1] ? _raw_spin_unlock+0x28/0x50 [ 242.554288][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.554329][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 242.554387][ C1] __irq_exit_rcu+0x162/0x210 [ 242.554428][ C1] irq_exit_rcu+0x9/0x30 [ 242.554467][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 242.554512][ C1] [ 242.554522][ C1] [ 242.554534][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.554573][ C1] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 242.554623][ C1] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 f8 ae 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 86 a9 21 00 48 85 ed 0f 85 27 01 00 00 d8 ae 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 242.554655][ C1] RSP: 0018:ffffc9000ce57890 EFLAGS: 00000293 [ 242.554679][ C1] RAX: 0000000000000000 RBX: 0000000000000060 RCX: ffffffff81e8a33a [ 242.554701][ C1] RDX: ffff88803004dd00 RSI: ffffffff81e8a344 RDI: ffff88803004dd00 [ 242.554723][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 242.554743][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920019caf14 [ 242.554769][ C1] R13: 0000000000000200 R14: ffff88802a9a5d00 R15: ffffc9000ce57958 [ 242.554801][ C1] ? vprintk_emit+0x66a/0x6b0 [ 242.554850][ C1] ? vprintk_emit+0x674/0x6b0 [ 242.554907][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 242.554956][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.554998][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.555038][ C1] ? irqentry_exit+0x24d/0xa00 [ 242.555083][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.555130][ C1] _printk+0xcf/0x110 [ 242.555162][ C1] ? __pfx__printk+0x10/0x10 [ 242.555193][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.555238][ C1] ? dump_stack_lvl+0x16c/0x190 [ 242.555271][ C1] ? dump_stack_lvl+0x176/0x190 [ 242.555305][ C1] ? __pfx____ratelimit+0x10/0x10 [ 242.555356][ C1] should_fail_ex+0x4e4/0x640 [ 242.555413][ C1] should_failslab+0xc2/0x120 [ 242.555447][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.555504][ C1] ? __alloc_skb+0x140/0x710 [ 242.555555][ C1] __alloc_skb+0x140/0x710 [ 242.555598][ C1] ? __alloc_skb+0x5b7/0x710 [ 242.555642][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 242.555685][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.555732][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.555791][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.555858][ C1] process_one_work+0xa23/0x1940 [ 242.555908][ C1] ? __pfx_process_one_work+0x10/0x10 [ 242.555940][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.555993][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.556040][ C1] worker_thread+0x5ef/0xe50 [ 242.556084][ C1] ? __pfx_worker_thread+0x10/0x10 [ 242.556119][ C1] ? kthread+0x13a/0x450 [ 242.556169][ C1] ? __pfx_worker_thread+0x10/0x10 [ 242.556200][ C1] kthread+0x370/0x450 [ 242.556251][ C1] ? __pfx_kthread+0x10/0x10 [ 242.556306][ C1] ret_from_fork+0x72b/0xd50 [ 242.556352][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 242.556399][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.556439][ C1] ? __switch_to+0x800/0x10f0 [ 242.556491][ C1] ? __switch_to_asm+0x39/0x70 [ 242.556538][ C1] ? __pfx_kthread+0x10/0x10 [ 242.556593][ C1] ret_from_fork_asm+0x1a/0x30 [ 242.556660][ C1] [ 242.556674][ C0] CPU: 0 UID: 0 PID: 6138 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 242.556717][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.556740][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.556788][ C0] Call Trace: [ 242.556798][ C0] [ 242.556810][ C0] dump_stack_lvl+0x100/0x190 [ 242.556851][ C0] should_fail_ex.cold+0x5/0xa [ 242.556891][ C0] should_failslab+0xc2/0x120 [ 242.556928][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.556991][ C0] ? __alloc_skb+0x140/0x710 [ 242.557046][ C0] __alloc_skb+0x140/0x710 [ 242.557091][ C0] ? __alloc_skb+0x5b7/0x710 [ 242.557137][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 242.557186][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.557228][ C0] ? lock_acquire+0x1b9/0x370 [ 242.557279][ C0] __netdev_alloc_skb+0x7a/0x960 [ 242.557334][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 242.557391][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.557433][ C0] ? __lock_acquire+0x49f/0x1a40 [ 242.557479][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 242.557535][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 242.557594][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.557645][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 242.557704][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.557752][ C0] __iterate_interfaces+0x2e6/0x650 [ 242.557802][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.557860][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 242.557914][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 242.557973][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 242.558015][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 242.558056][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 242.558125][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 242.558182][ C0] handle_softirqs+0x1ea/0x9b0 [ 242.558233][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 242.558282][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.558326][ C0] ? _raw_spin_unlock+0x28/0x50 [ 242.558365][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.558408][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 242.558470][ C0] __irq_exit_rcu+0x162/0x210 [ 242.558513][ C0] irq_exit_rcu+0x9/0x30 [ 242.558555][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 242.558601][ C0] [ 242.558612][ C0] [ 242.558625][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.558665][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 242.558720][ C0] Code: 00 e8 b1 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 9f d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 f1 d5 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 242.558755][ C0] RSP: 0018:ffffc90007077698 EFLAGS: 00000293 [ 242.558780][ C0] RAX: ffffffff8f9afb18 RBX: ffffffff8f9afac0 RCX: ffffffff81e87b01 [ 242.558805][ C0] RDX: ffff88802a9a5d00 RSI: ffffffff81e87b0f RDI: ffff88802a9a5d00 [ 242.558829][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 242.558851][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001586 [ 242.558873][ C0] R13: ffffffff8f9afb18 R14: ffffc90007077718 R15: dffffc0000000000 [ 242.558909][ C0] ? console_flush_one_record+0xab1/0xe50 [ 242.558962][ C0] ? console_flush_one_record+0xabf/0xe50 [ 242.559021][ C0] ? console_flush_one_record+0xabf/0xe50 [ 242.559083][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 242.559137][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 242.559193][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.559246][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.559294][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 242.559358][ C0] console_unlock+0x103/0x260 [ 242.559409][ C0] ? __pfx_console_unlock+0x10/0x10 [ 242.559461][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.559504][ C0] ? lock_acquire+0x101/0x370 [ 242.559551][ C0] ? vprintk_emit+0x66a/0x6b0 [ 242.559610][ C0] vprintk_emit+0x407/0x6b0 [ 242.559664][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 242.559731][ C0] _printk+0xcf/0x110 [ 242.559766][ C0] ? __pfx__printk+0x10/0x10 [ 242.559798][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.559852][ C0] ? __pfx____ratelimit+0x10/0x10 [ 242.559896][ C0] ? wakeup_preempt_fair+0x640/0x1060 [ 242.559949][ C0] should_fail_ex+0x4e4/0x640 [ 242.560010][ C0] should_failslab+0xc2/0x120 [ 242.560046][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.560106][ C0] ? __alloc_skb+0x140/0x710 [ 242.560161][ C0] __alloc_skb+0x140/0x710 [ 242.560206][ C0] ? __alloc_skb+0x5b7/0x710 [ 242.560252][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 242.560303][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.560352][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.560410][ C0] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.560481][ C0] process_one_work+0xa23/0x1940 [ 242.560535][ C0] ? __pfx_process_one_work+0x10/0x10 [ 242.560569][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.560626][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.560675][ C0] worker_thread+0x5ef/0xe50 [ 242.560721][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.560758][ C0] ? kthread+0x13a/0x450 [ 242.560810][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.560844][ C0] kthread+0x370/0x450 [ 242.560897][ C0] ? __pfx_kthread+0x10/0x10 [ 242.560956][ C0] ret_from_fork+0x72b/0xd50 [ 242.561004][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 242.561052][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.561095][ C0] ? __switch_to+0x800/0x10f0 [ 242.561150][ C0] ? __switch_to_asm+0x39/0x70 [ 242.561198][ C0] ? __pfx_kthread+0x10/0x10 [ 242.561262][ C0] ret_from_fork_asm+0x1a/0x30 [ 242.561332][ C0] [ 242.561710][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 242.561750][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.561772][ T6138] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.561819][ T6138] Call Trace: [ 242.561829][ T6138] [ 242.561842][ T6138] dump_stack_lvl+0x100/0x190 [ 242.561880][ T6138] should_fail_ex.cold+0x5/0xa [ 242.561918][ T6138] should_failslab+0xc2/0x120 [ 242.561953][ T6138] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.562010][ T6138] ? __alloc_skb+0x140/0x710 [ 242.562062][ T6138] __alloc_skb+0x140/0x710 [ 242.562105][ T6138] ? __alloc_skb+0x5b7/0x710 [ 242.562149][ T6138] ? __pfx___alloc_skb+0x10/0x10 [ 242.562192][ T6138] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.562238][ T6138] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.562298][ T6138] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.562369][ T6138] process_one_work+0xa23/0x1940 [ 242.562420][ T6138] ? __pfx_process_one_work+0x10/0x10 [ 242.562452][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.562507][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.562554][ T6138] worker_thread+0x5ef/0xe50 [ 242.562600][ T6138] ? __pfx_worker_thread+0x10/0x10 [ 242.562636][ T6138] ? kthread+0x13a/0x450 [ 242.562685][ T6138] ? __pfx_worker_thread+0x10/0x10 [ 242.562717][ T6138] kthread+0x370/0x450 [ 242.562768][ T6138] ? __pfx_kthread+0x10/0x10 [ 242.562825][ T6138] ret_from_fork+0x72b/0xd50 [ 242.562873][ T6138] ? __pfx_ret_from_fork+0x10/0x10 [ 242.562920][ T6138] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.562962][ T6138] ? __switch_to+0x800/0x10f0 [ 242.563016][ T6138] ? __switch_to_asm+0x39/0x70 [ 242.563063][ T6138] ? __pfx_kthread+0x10/0x10 [ 242.563120][ T6138] ret_from_fork_asm+0x1a/0x30 [ 242.563189][ T6138] [ 242.563778][ T7719] CPU: 0 UID: 0 PID: 7719 Comm: syz.5.643 Not tainted syzkaller #0 PREEMPT(full) [ 242.563821][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.563843][ T7719] Call Trace: [ 242.563854][ T7719] [ 242.563867][ T7719] dump_stack_lvl+0x100/0x190 [ 242.563910][ T7719] should_fail_ex.cold+0x5/0xa [ 242.563943][ T7719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.563998][ T7719] should_failslab+0xc2/0x120 [ 242.564037][ T7719] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.564095][ T7719] ? __alloc_skb+0x5b7/0x710 [ 242.564139][ T7719] ? __alloc_skb+0x140/0x710 [ 242.564194][ T7719] __alloc_skb+0x140/0x710 [ 242.564238][ T7719] ? __alloc_skb+0x5b7/0x710 [ 242.564288][ T7719] ? __pfx___alloc_skb+0x10/0x10 [ 242.564333][ T7719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.564390][ T7719] netlink_alloc_large_skb+0x69/0x150 [ 242.564436][ T7719] netlink_sendmsg+0x680/0xda0 [ 242.564486][ T7719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.564534][ T7719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.564576][ T7719] ? apparmor_socket_sendmsg+0x15b/0x270 [ 242.564622][ T7719] ____sys_sendmsg+0xa4d/0xbe0 [ 242.564657][ T7719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.564702][ T7719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.564749][ T7719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.564792][ T7719] ? plist_check_list+0x1b8/0x280 [ 242.564828][ T7719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.564869][ T7719] ? plist_del+0x308/0x510 [ 242.564910][ T7719] ___sys_sendmsg+0x190/0x1e0 [ 242.564952][ T7719] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.564988][ T7719] ? __lock_acquire+0x49f/0x1a40 [ 242.565027][ T7719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.565069][ T7719] ? futex_wake+0x220/0x5e0 [ 242.565141][ T7719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.565214][ T7719] __sys_sendmsg+0x160/0x210 [ 242.565270][ T7719] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.565337][ T7719] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.565387][ T7719] do_syscall_64+0x115/0x870 [ 242.565440][ T7719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.565476][ T7719] RIP: 0033:0x7fd69239e019 [ 242.565504][ T7719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.565538][ T7719] RSP: 002b:00007fd693240028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.565569][ T7719] RAX: ffffffffffffffda RBX: 00007fd692625fa0 RCX: 00007fd69239e019 [ 242.565593][ T7719] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 242.565615][ T7719] RBP: 00007fd69243500c R08: 0000000000000000 R09: 0000000000000000 [ 242.565637][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.565658][ T7719] R13: 00007fd692626038 R14: 00007fd692625fa0 R15: 00007ffffb86b4e8 [ 242.565704][ T7719] [ 242.565763][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 242.565803][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.565823][ T5621] Call Trace: [ 242.565834][ T5621] [ 242.565846][ T5621] dump_stack_lvl+0x100/0x190 [ 242.565885][ T5621] should_fail_ex.cold+0x5/0xa [ 242.565917][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.565964][ T5621] should_failslab+0xc2/0x120 [ 242.566000][ T5621] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 242.566058][ T5621] ? sock_alloc_inode+0x26/0x2c0 [ 242.566117][ T5621] ? __pfx_sock_alloc_inode+0x10/0x10 [ 242.566176][ T5621] sock_alloc_inode+0x26/0x2c0 [ 242.566231][ T5621] ? __pfx_sock_alloc_inode+0x10/0x10 [ 242.566290][ T5621] alloc_inode+0x68/0x250 [ 242.566330][ T5621] sock_alloc+0x44/0x280 [ 242.566379][ T5621] ? security_socket_create+0x7f/0x250 [ 242.566421][ T5621] __sock_create+0xc2/0x860 [ 242.566466][ T5621] __sys_socket+0x14d/0x260 [ 242.566506][ T5621] ? __pfx___sys_socket+0x10/0x10 [ 242.566559][ T5621] __x64_sys_socket+0x72/0xb0 [ 242.566597][ T5621] ? lockdep_hardirqs_on+0x78/0x100 [ 242.566643][ T5621] do_syscall_64+0x115/0x870 [ 242.566696][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.566731][ T5621] RIP: 0033:0x7f87e059f887 [ 242.566757][ T5621] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.566790][ T5621] RSP: 002b:00007ffcda7382a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 242.566821][ T5621] RAX: ffffffffffffffda RBX: 00007f87e07ec460 RCX: 00007f87e059f887 [ 242.566844][ T5621] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 242.566865][ T5621] RBP: 00007ffcda7389cc R08: 0000000000000000 R09: 0000000000000000 [ 242.566886][ T5621] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000007c [ 242.566908][ T5621] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffcda738a20 [ 242.566953][ T5621] [ 242.566967][ T5621] socket: no more sockets [ 242.567274][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 242.567312][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.567334][ T6457] Workqueue: events_unbound nsim_dev_trap_report_work [ 242.567380][ T6457] Call Trace: [ 242.567390][ T6457] [ 242.567402][ T6457] dump_stack_lvl+0x100/0x190 [ 242.567441][ T6457] should_fail_ex.cold+0x5/0xa [ 242.567479][ T6457] should_failslab+0xc2/0x120 [ 242.567514][ T6457] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.567571][ T6457] ? __alloc_skb+0x140/0x710 [ 242.567625][ T6457] __alloc_skb+0x140/0x710 [ 242.567667][ T6457] ? __alloc_skb+0x5b7/0x710 [ 242.567711][ T6457] ? __pfx___alloc_skb+0x10/0x10 [ 242.567759][ T6457] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.567806][ T6457] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.567861][ T6457] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.567930][ T6457] process_one_work+0xa23/0x1940 [ 242.567982][ T6457] ? __pfx_process_one_work+0x10/0x10 [ 242.568014][ T6457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.568069][ T6457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.568116][ T6457] worker_thread+0x5ef/0xe50 [ 242.568162][ T6457] ? __pfx_worker_thread+0x10/0x10 [ 242.568198][ T6457] ? kthread+0x13a/0x450 [ 242.568247][ T6457] ? __pfx_worker_thread+0x10/0x10 [ 242.568279][ T6457] kthread+0x370/0x450 [ 242.568333][ T6457] ? __pfx_kthread+0x10/0x10 [ 242.568389][ T6457] ret_from_fork+0x72b/0xd50 [ 242.568435][ T6457] ? __pfx_ret_from_fork+0x10/0x10 [ 242.568482][ T6457] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.568523][ T6457] ? __switch_to+0x800/0x10f0 [ 242.568575][ T6457] ? __switch_to_asm+0x39/0x70 [ 242.568622][ T6457] ? __pfx_kthread+0x10/0x10 [ 242.568677][ T6457] ret_from_fork_asm+0x1a/0x30 [ 242.568746][ T6457] [ 242.602486][ T7717] CPU: 1 UID: 0 PID: 7717 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 242.602527][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.602547][ T7717] Call Trace: [ 242.602557][ T7717] [ 242.602569][ T7717] dump_stack_lvl+0x100/0x190 [ 242.602608][ T7717] should_fail_ex.cold+0x5/0xa [ 242.602639][ T7717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.602686][ T7717] should_failslab+0xc2/0x120 [ 242.602721][ T7717] kmem_cache_alloc_noprof+0x91/0x6a0 [ 242.602777][ T7717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.602817][ T7717] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 242.602863][ T7717] ? vm_area_dup+0x27/0x8e0 [ 242.602914][ T7717] vm_area_dup+0x27/0x8e0 [ 242.602961][ T7717] __split_vma+0x18c/0xda0 [ 242.603005][ T7717] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.603051][ T7717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.603095][ T7717] ? __pfx___split_vma+0x10/0x10 [ 242.603139][ T7717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.603195][ T7717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.603243][ T7717] vma_modify+0x12ad/0x25c0 [ 242.603306][ T7717] ? __pfx_vma_modify+0x10/0x10 [ 242.603347][ T7717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.603392][ T7717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.603433][ T7717] ? find_held_lock+0x2b/0x80 [ 242.603482][ T7717] ? page_table_check_set+0x48f/0x930 [ 242.603518][ T7717] ? page_table_check_set+0x48f/0x930 [ 242.603549][ T7717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.603608][ T7717] vma_modify_flags+0x257/0x3d0 [ 242.603657][ T7717] ? __pfx_vma_modify_flags+0x10/0x10 [ 242.603702][ T7717] ? __lock_acquire+0x49f/0x1a40 [ 242.603765][ T7717] ? __pfx_ima_file_mprotect+0x10/0x10 [ 242.603804][ T7717] ? find_held_lock+0x2b/0x80 [ 242.603854][ T7717] ? aa_file_perm+0x7e4/0x14d0 [ 242.603907][ T7717] ? aa_file_perm+0x7e4/0x14d0 [ 242.603966][ T7717] mprotect_fixup+0x27a/0xe30 [ 242.604021][ T7717] ? __pfx_mprotect_fixup+0x10/0x10 [ 242.604108][ T7717] do_mprotect_pkey+0xa4b/0xef0 [ 242.604169][ T7717] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 242.604230][ T7717] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 242.604287][ T7717] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 242.604343][ T7717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.604409][ T7717] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.604458][ T7717] __x64_sys_mprotect+0x78/0xc0 [ 242.604501][ T7717] ? lockdep_hardirqs_on+0x78/0x100 [ 242.604547][ T7717] do_syscall_64+0x115/0x870 [ 242.604600][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.604635][ T7717] RIP: 0033:0x7fea9d19b2c7 [ 242.604660][ T7717] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 242.604693][ T7717] RSP: 002b:00007fff7e17c828 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 242.604724][ T7717] RAX: ffffffffffffffda RBX: 00007fea9ce726b0 RCX: 00007fea9d19b2c7 [ 242.604746][ T7717] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007fea9ce66000 [ 242.604772][ T7717] RBP: 00007fff7e17caf0 R08: 0000000000000000 R09: 00007fea9cf052e0 [ 242.604793][ T7717] R10: 00007fea9ce726b0 R11: 0000000000000206 R12: 0000000000000038 [ 242.604815][ T7717] R13: 0000008e83ae8737 R14: 0000000000000000 R15: 00007fea9d1af310 [ 242.604860][ T7717] [ 242.628458][ T4985] CPU: 1 UID: 0 PID: 4985 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 242.628498][ T4985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.628518][ T4985] Call Trace: [ 242.628528][ T4985] [ 242.628540][ T4985] dump_stack_lvl+0x100/0x190 [ 242.628579][ T4985] should_fail_ex.cold+0x5/0xa [ 242.628609][ T4985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.628655][ T4985] should_failslab+0xc2/0x120 [ 242.628691][ T4985] kmem_cache_alloc_noprof+0x91/0x6a0 [ 242.628743][ T4985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.628791][ T4985] ? flock_lock_inode+0xccd/0x11a0 [ 242.628832][ T4985] flock_lock_inode+0xccd/0x11a0 [ 242.628873][ T4985] ? __pfx_flock_lock_inode+0x10/0x10 [ 242.628907][ T4985] ? __pfx___might_resched+0x10/0x10 [ 242.628945][ T4985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.628994][ T4985] locks_lock_inode_wait+0x119/0x490 [ 242.629030][ T4985] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 242.629075][ T4985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.629115][ T4985] ? apparmor_file_lock+0x161/0x1f0 [ 242.629164][ T4985] __do_sys_flock+0x462/0x4d0 [ 242.629199][ T4985] ? __pfx___do_sys_flock+0x10/0x10 [ 242.629229][ T4985] ? putname+0xb6/0x110 [ 242.629320][ T4985] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.629368][ T4985] do_syscall_64+0x115/0x870 [ 242.629419][ T4985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.629457][ T4985] RIP: 0033:0x7f2b60711aa7 [ 242.629482][ T4985] Code: f3 0f 6f 44 24 58 f3 0f 6f 4c 24 68 48 89 03 48 8b 44 24 08 0f 11 43 10 48 89 43 08 0f 11 4b 20 eb a7 90 b8 49 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 [ 242.629515][ T4985] RSP: 002b:00007ffc88505448 EFLAGS: 00000206 ORIG_RAX: 0000000000000049 [ 242.629545][ T4985] RAX: ffffffffffffffda RBX: 0000558238aa5840 RCX: 00007f2b60711aa7 [ 242.629568][ T4985] RDX: 000000000000000c RSI: 0000000000000006 RDI: 000000000000000c [ 242.629588][ T4985] RBP: 0000558238aaa8a0 R08: 0000000000000000 R09: 0000000000000000 [ 242.629609][ T4985] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 242.629630][ T4985] R13: 00005581fafe1100 R14: 0000000000000000 R15: 00007ffc88505640 [ 242.629675][ T4985] [ 242.633619][ T5622] CPU: 1 UID: 0 PID: 5622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 242.633659][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.633679][ T5622] Call Trace: [ 242.633689][ T5622] [ 242.633701][ T5622] dump_stack_lvl+0x100/0x190 [ 242.633740][ T5622] should_fail_ex.cold+0x5/0xa [ 242.633776][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.633823][ T5622] should_failslab+0xc2/0x120 [ 242.633858][ T5622] kmem_cache_alloc_noprof+0x91/0x6a0 [ 242.633913][ T5622] ? ptlock_alloc+0x1f/0x70 [ 242.633967][ T5622] ptlock_alloc+0x1f/0x70 [ 242.634010][ T5622] pte_alloc_one+0x82/0x3d0 [ 242.634044][ T5622] __pte_alloc+0x6d/0x3e0 [ 242.634076][ T5622] ? __pfx___pte_alloc+0x10/0x10 [ 242.634106][ T5622] ? __pfx___might_resched+0x10/0x10 [ 242.634143][ T5622] ? copy_page_range+0x1c4a/0x5b20 [ 242.634183][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.634234][ T5622] copy_page_range+0x3dd8/0x5b20 [ 242.634324][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.634365][ T5622] ? mas_wr_store_entry+0xa1/0x1e80 [ 242.634423][ T5622] ? __pfx_copy_page_range+0x10/0x10 [ 242.634474][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.634523][ T5622] ? __pfx___might_resched+0x10/0x10 [ 242.634559][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.634608][ T5622] ? dup_mmap+0xcfe/0x21b0 [ 242.634643][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.634684][ T5622] ? down_write+0x146/0x1f0 [ 242.634735][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.634783][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.634823][ T5622] ? up_write+0x2e5/0x5c0 [ 242.634871][ T5622] dup_mmap+0xd44/0x21b0 [ 242.634926][ T5622] ? __pfx_dup_mmap+0x10/0x10 [ 242.634962][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.635002][ T5622] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 242.635053][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.635093][ T5622] ? __lock_acquire+0x49f/0x1a40 [ 242.635132][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.635172][ T5622] ? find_held_lock+0x2b/0x80 [ 242.635222][ T5622] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 242.635282][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.635332][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.635385][ T5622] copy_process+0x4588/0x8030 [ 242.635455][ T5622] ? __pfx_copy_process+0x10/0x10 [ 242.635500][ T5622] ? do_raw_spin_lock+0x128/0x260 [ 242.635553][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.635594][ T5622] ? __lock_acquire+0x49f/0x1a40 [ 242.635639][ T5622] kernel_clone+0x176/0x9d0 [ 242.635687][ T5622] ? __pfx_kernel_clone+0x10/0x10 [ 242.635729][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.635789][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.635830][ T5622] ? find_held_lock+0x2b/0x80 [ 242.635879][ T5622] ? __might_fault+0xc5/0x140 [ 242.635931][ T5622] __do_sys_clone+0xd9/0x120 [ 242.635977][ T5622] ? __pfx___do_sys_clone+0x10/0x10 [ 242.636044][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.636090][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.636139][ T5622] do_syscall_64+0x115/0x870 [ 242.636190][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.636226][ T5622] RIP: 0033:0x7f1b33fc6a92 [ 242.636251][ T5622] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 242.636283][ T5622] RSP: 002b:00007ffea4966b20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 242.636314][ T5622] RAX: ffffffffffffffda RBX: 00007ffea4966b20 RCX: 00007f1b33fc6a92 [ 242.636336][ T5622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 242.636358][ T5622] RBP: 00007ffea4966cac R08: 0000000000000000 R09: 0000000000000001 [ 242.636378][ T5622] R10: 0000555558dba7d0 R11: 0000000000000246 R12: 0000000000000001 [ 242.636399][ T5622] R13: 00000000000927c0 R14: 000000000003b1b6 R15: 00007ffea4966d00 [ 242.636445][ T5622] [ 249.401212][ T7748] ip_tables: iptables: counters copy to user failed while replacing table [ 249.423135][ T7747] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.650'. [ 249.820049][ T7761] netlink: 48 bytes leftover after parsing attributes in process `syz.4.660'. [ 250.065658][ T7766] loop3: detected capacity change from 0 to 512 [ 250.111627][ T7766] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 250.121876][ T7766] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 250.131880][ T7766] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.659: Failed to acquire dquot type 1 [ 250.143058][ T7766] loop3: lost filesystem error report for type 5 error -117 [ 250.145666][ T7766] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 250.153003][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 250.153030][ C0] EXT4-fs (loop3): last error at time 1785791274: ext4_acquire_dquot:7039 [ 250.178525][ T7766] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 250.188544][ T7766] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.659: Failed to acquire dquot type 1 [ 250.199794][ T7766] loop3: lost filesystem error report for type 5 error -117 [ 250.219172][ T7766] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.659: bg 0: block 248: padding at end of block bitmap is not set [ 250.240748][ T7766] loop3: lost filesystem error report for type 5 error -117 [ 250.241604][ T7766] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 250.258038][ T7766] loop3: lost filesystem error report for type 5 error -117 [ 250.261173][ T7766] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 250.278768][ T7766] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 250.288757][ T7766] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.659: Failed to acquire dquot type 1 [ 250.299929][ T7766] loop3: lost filesystem error report for type 5 error -117 [ 250.301401][ T7766] EXT4-fs (loop3): 1 orphan inode deleted [ 250.318275][ T7766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.330954][ T7766] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.137805][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.151568][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.161150][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.171392][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.181848][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.615817][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.634634][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.647673][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.656658][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.666197][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.975490][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.083550][ T6973] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.128445][ T6973] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.288597][ T5632] Bluetooth: hci2: command tx timeout [ 253.415986][ T6973] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.569816][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 253.624898][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'. [ 253.668103][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 253.689681][ T5632] Bluetooth: hci5: command tx timeout [ 253.716156][ T6973] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.104881][ T7829] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.673'. [ 254.426360][ T6973] bridge_slave_1: left allmulticast mode [ 254.472092][ T6973] bridge_slave_1: left promiscuous mode [ 254.481964][ T7841] netlink: 48 bytes leftover after parsing attributes in process `syz.4.676'. [ 254.497273][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.583872][ T6973] bridge_slave_0: left allmulticast mode [ 254.615052][ T6973] bridge_slave_0: left promiscuous mode [ 254.631049][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.064321][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.071725][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.145893][ T7857] ip_tables: iptables: counters copy to user failed while replacing table [ 255.249873][ T6973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.291579][ T6973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.329452][ T6973] bond0 (unregistering): Released all slaves [ 255.368705][ T5632] Bluetooth: hci2: command tx timeout [ 255.768617][ T5632] Bluetooth: hci5: command tx timeout [ 255.979006][ T7885] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.689'. [ 256.325475][ T7895] netlink: 48 bytes leftover after parsing attributes in process `syz.5.691'. [ 256.739513][ T6973] hsr_slave_0: left promiscuous mode [ 256.782441][ T6973] hsr_slave_1: left promiscuous mode [ 256.814228][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.845018][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.884164][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.918192][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.996145][ T7917] ip_tables: iptables: counters copy to user failed while replacing table [ 257.012699][ T6973] veth1_macvtap: left promiscuous mode [ 257.032174][ T6973] veth0_macvtap: left promiscuous mode [ 257.051509][ T6973] veth1_vlan: left promiscuous mode [ 257.072351][ T6973] veth0_vlan: left promiscuous mode [ 257.449138][ T5632] Bluetooth: hci2: command tx timeout [ 257.848444][ T5632] Bluetooth: hci5: command tx timeout [ 258.335521][ T7937] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.703'. [ 259.012537][ T6973] team0 (unregistering): Port device team_slave_1 removed [ 259.528546][ T5632] Bluetooth: hci2: command tx timeout [ 259.928395][ T5632] Bluetooth: hci5: command tx timeout [ 260.926511][ T6973] team0 (unregistering): Port device team_slave_0 removed [ 261.050507][ T7947] netlink: 36 bytes leftover after parsing attributes in process `syz.4.709'. [ 261.062859][ T7947] openvswitch: netlink: Message has 5 unknown bytes. [ 261.129646][ T7949] netlink: 48 bytes leftover after parsing attributes in process `syz.3.705'. [ 261.384180][ T7956] ip_tables: iptables: counters copy to user failed while replacing table [ 261.659316][ T6457] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.506397][ T7996] netlink: 36 bytes leftover after parsing attributes in process `syz.2.723'. [ 263.554872][ T7996] openvswitch: netlink: Message has 5 unknown bytes. [ 263.648158][ T7992] loop4: detected capacity change from 0 to 512 [ 263.714604][ T7992] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 263.726212][ T7992] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 263.736306][ T7992] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.722: Failed to acquire dquot type 1 [ 263.747460][ T7992] loop4: lost filesystem error report for type 5 error -117 [ 263.748056][ T7992] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 263.755406][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 263.755437][ C1] EXT4-fs (loop4): last error at time 1785791287: ext4_acquire_dquot:7039 [ 263.780616][ T7992] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 263.790607][ T7992] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.722: Failed to acquire dquot type 1 [ 263.801798][ T7992] loop4: lost filesystem error report for type 5 error -117 [ 263.808734][ T7992] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.722: bg 0: block 248: padding at end of block bitmap is not set [ 263.831614][ T7992] loop4: lost filesystem error report for type 5 error -117 [ 263.835575][ T7992] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 263.851866][ T7992] loop4: lost filesystem error report for type 5 error -117 [ 263.852640][ T7992] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 263.870081][ T7992] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 263.880038][ T7992] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.722: Failed to acquire dquot type 1 [ 263.891212][ T7992] loop4: lost filesystem error report for type 5 error -117 [ 263.891949][ T7992] EXT4-fs (loop4): 1 orphan inode deleted [ 263.907891][ T7992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.920442][ T7992] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.402089][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.526458][ T8018] ip_tables: iptables: counters copy to user failed while replacing table [ 264.554332][ T8020] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.726'. [ 264.653559][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.699990][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.747411][ T7772] bridge_slave_0: entered allmulticast mode [ 264.783273][ T7772] bridge_slave_0: entered promiscuous mode [ 264.813747][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.840705][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.870066][ T7772] bridge_slave_1: entered allmulticast mode [ 264.893382][ T7772] bridge_slave_1: entered promiscuous mode [ 265.263640][ T7772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.283190][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.304866][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.325725][ T7784] bridge_slave_0: entered allmulticast mode [ 265.350114][ T7784] bridge_slave_0: entered promiscuous mode [ 265.390351][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 265.464964][ T8035] can0: slcan on ptm0. [ 265.475801][ T7772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.343914][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.366327][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.457240][ T7784] bridge_slave_1: entered allmulticast mode [ 266.468915][ T7784] bridge_slave_1: entered promiscuous mode [ 266.659992][ T8034] can0 (unregistered): slcan off ptm0. [ 266.776244][ T6973] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.857503][ T7784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.898240][ T7772] team0: Port device team_slave_0 added [ 266.937632][ T7772] team0: Port device team_slave_1 added [ 267.045328][ T7784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.331111][ T8062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.737'. [ 267.349387][ T6973] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.366151][ T8062] openvswitch: netlink: Message has 5 unknown bytes. [ 267.422803][ T7784] team0: Port device team_slave_0 added [ 267.457565][ T7784] team0: Port device team_slave_1 added [ 267.477371][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.511193][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.588679][ T7772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.610946][ T8066] loop4: detected capacity change from 0 to 512 [ 267.638267][ T8066] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 267.648758][ T8066] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 267.658706][ T8066] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.739: Failed to acquire dquot type 1 [ 267.669868][ T8066] loop4: lost filesystem error report for type 5 error -117 [ 267.673236][ T8066] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 267.680599][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 267.680632][ C1] EXT4-fs (loop4): last error at time 1785791291: ext4_acquire_dquot:7039 [ 267.706152][ T8066] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 267.717510][ T8066] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.739: Failed to acquire dquot type 1 [ 267.728808][ T8066] loop4: lost filesystem error report for type 5 error -117 [ 267.732285][ T8066] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.739: bg 0: block 248: padding at end of block bitmap is not set [ 267.753848][ T8066] loop4: lost filesystem error report for type 5 error -117 [ 267.757271][ T8066] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 267.773327][ T8066] loop4: lost filesystem error report for type 5 error -117 [ 267.774202][ T8066] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.739: Failed to acquire dquot type 1 [ 267.792679][ T8066] loop4: lost filesystem error report for type 5 error -117 [ 267.797274][ T8066] EXT4-fs (loop4): 1 orphan inode deleted [ 267.813421][ T8066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.826681][ T8066] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.834976][ T8068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.740'. [ 267.861568][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.888753][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.944755][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.965089][ T7772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.151095][ T6973] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.191489][ T8076] netlink: 16319 bytes leftover after parsing attributes in process `syz.3.742'. [ 268.217478][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.230177][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 268.256225][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.335121][ T7784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.451716][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.478494][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.562527][ T7784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.618112][ T6973] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.770175][ T7772] hsr_slave_0: entered promiscuous mode [ 268.789328][ T7772] hsr_slave_1: entered promiscuous mode [ 268.803058][ T7772] debugfs: 'hsr0' already exists in 'hsr' [ 268.824248][ T7772] Cannot create hsr debugfs directory [ 269.060527][ T7784] hsr_slave_0: entered promiscuous mode [ 269.082722][ T7784] hsr_slave_1: entered promiscuous mode [ 269.101938][ T7784] debugfs: 'hsr0' already exists in 'hsr' [ 269.116716][ T7784] Cannot create hsr debugfs directory [ 269.397443][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 272.148693][ T6973] bridge_slave_1: left allmulticast mode [ 272.167966][ T6973] bridge_slave_1: left promiscuous mode [ 272.185103][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.223574][ T6973] bridge_slave_0: left allmulticast mode [ 272.229302][ T6973] bridge_slave_0: left promiscuous mode [ 272.235093][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.345601][ T8114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 272.369425][ T8114] openvswitch: netlink: Key type 12410 is out of range max 32 [ 272.661425][ T8120] loop3: detected capacity change from 0 to 512 [ 272.699037][ T8120] __quota_error: 2 callbacks suppressed [ 272.699058][ T8120] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 272.716231][ T8120] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 272.726205][ T8120] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.754: Failed to acquire dquot type 1 [ 272.738546][ T8120] loop3: lost filesystem error report for type 5 error -117 [ 272.743502][ T8120] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 272.750841][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 272.750871][ C1] EXT4-fs (loop3): last error at time 1785791296: ext4_acquire_dquot:7039 [ 272.762728][ T8125] netlink: 16319 bytes leftover after parsing attributes in process `syz.5.755'. [ 272.768078][ T8120] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 272.795571][ T8120] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.754: Failed to acquire dquot type 1 [ 272.806766][ T8120] loop3: lost filesystem error report for type 5 error -117 [ 272.815258][ T8120] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.754: bg 0: block 248: padding at end of block bitmap is not set [ 272.837999][ T8120] loop3: lost filesystem error report for type 5 error -117 [ 272.843621][ T8120] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 272.859794][ T8120] loop3: lost filesystem error report for type 5 error -117 [ 272.862048][ T8120] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 272.880355][ T8120] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 272.890347][ T8120] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.754: Failed to acquire dquot type 1 [ 272.901535][ T8120] loop3: lost filesystem error report for type 5 error -117 [ 272.902084][ T8120] EXT4-fs (loop3): 1 orphan inode deleted [ 272.923287][ T8120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.937090][ T8120] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.978277][ T6973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.014331][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.056920][ T6973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.097283][ T6973] bond0 (unregistering): Released all slaves [ 273.245986][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 273.413714][ T6973] tipc: Disabling bearer [ 273.436271][ T6973] tipc: Left network mode [ 273.455777][ T8143] netlink: 52 bytes leftover after parsing attributes in process `syz.3.762'. [ 273.745452][ T8149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.765'. [ 273.781748][ T8149] openvswitch: netlink: Key type 12410 is out of range max 32 [ 274.183036][ T8160] loop4: detected capacity change from 0 to 512 [ 274.293950][ T8160] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 274.304206][ T8160] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 274.314166][ T8160] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.771: Failed to acquire dquot type 1 [ 274.325356][ T8160] loop4: lost filesystem error report for type 5 error -117 [ 274.326268][ T8160] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 274.334118][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 274.334148][ C1] EXT4-fs (loop4): last error at time 1785791298: ext4_acquire_dquot:7039 [ 274.359419][ T8160] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 274.370516][ T8160] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.771: Failed to acquire dquot type 1 [ 274.381798][ T8160] loop4: lost filesystem error report for type 5 error -117 [ 274.399049][ T8160] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.771: bg 0: block 248: padding at end of block bitmap is not set [ 274.421071][ T8160] loop4: lost filesystem error report for type 5 error -117 [ 274.421556][ T8160] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 274.437591][ T8160] loop4: lost filesystem error report for type 5 error -117 [ 274.439288][ T8160] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.771: Failed to acquire dquot type 1 [ 274.457786][ T8160] loop4: lost filesystem error report for type 5 error -117 [ 274.458382][ T8160] EXT4-fs (loop4): 1 orphan inode deleted [ 274.474265][ T8160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.486824][ T8160] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.551088][ T8167] netlink: 16319 bytes leftover after parsing attributes in process `syz.3.770'. [ 276.746442][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.416133][ T8187] netlink: 52 bytes leftover after parsing attributes in process `syz.5.777'. [ 277.457682][ T6973] hsr_slave_0: left promiscuous mode [ 277.512912][ T6973] hsr_slave_1: left promiscuous mode [ 277.545374][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.587047][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.649481][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.685105][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.767195][ T6973] veth1_macvtap: left promiscuous mode [ 277.792751][ T6973] veth0_macvtap: left promiscuous mode [ 277.809470][ T6973] veth1_vlan: left promiscuous mode [ 277.823201][ T6973] veth0_vlan: left promiscuous mode [ 278.617863][ T8219] loop3: detected capacity change from 0 to 512 [ 278.707797][ T8219] __quota_error: 2 callbacks suppressed [ 278.707820][ T8219] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 278.826700][ T8219] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 278.861618][ T8219] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.785: Failed to acquire dquot type 1 [ 278.885605][ T8219] loop3: lost filesystem error report for type 5 error -117 [ 278.886178][ T8219] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 278.893601][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 278.893633][ C0] EXT4-fs (loop3): last error at time 1785791302: ext4_acquire_dquot:7039 [ 278.960108][ T8219] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 278.986117][ T8219] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.785: Failed to acquire dquot type 1 [ 279.010465][ T8219] loop3: lost filesystem error report for type 5 error -117 [ 279.016783][ T8219] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.785: bg 0: block 248: padding at end of block bitmap is not set [ 279.065592][ T8219] loop3: lost filesystem error report for type 5 error -117 [ 279.066112][ T8219] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 279.106005][ T8219] loop3: lost filesystem error report for type 5 error -117 [ 279.107053][ T8219] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 279.148178][ T8219] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 279.172870][ T8219] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.785: Failed to acquire dquot type 1 [ 279.205194][ T8219] loop3: lost filesystem error report for type 5 error -117 [ 279.210358][ T8219] EXT4-fs (loop3): 1 orphan inode deleted [ 279.242489][ T8219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.272836][ T8219] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.888490][ T6973] team0 (unregistering): Port device team_slave_1 removed [ 280.970385][ T6973] team0 (unregistering): Port device team_slave_0 removed [ 281.296446][ T8231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.789'. [ 282.000703][ T8247] netlink: 16319 bytes leftover after parsing attributes in process `syz.4.795'. [ 282.364461][ T8255] netlink: 48 bytes leftover after parsing attributes in process `syz.2.799'. [ 282.476352][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.896173][ T8293] netlink: 16319 bytes leftover after parsing attributes in process `syz.2.811'. [ 285.155473][ T7784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.224326][ T7784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.253848][ T7784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.303099][ T7784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 285.355298][ T7784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.394441][ T7784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 285.519252][ T8308] loop3: detected capacity change from 0 to 512 [ 285.566716][ T7784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.601276][ T8308] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 285.626582][ T7784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 285.679498][ T8308] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 285.690018][ T8308] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.813: Failed to acquire dquot type 1 [ 285.705491][ T8308] loop3: lost filesystem error report for type 5 error -117 [ 285.706071][ T8308] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 285.713429][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 285.713457][ C1] EXT4-fs (loop3): last error at time 1785791309: ext4_acquire_dquot:7039 [ 285.713809][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.2.815'. [ 285.724283][ T8308] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 285.765943][ T8308] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.813: Failed to acquire dquot type 1 [ 285.804423][ T8308] loop3: lost filesystem error report for type 5 error -117 [ 285.806442][ T8308] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.813: bg 0: block 248: padding at end of block bitmap is not set [ 285.834739][ T8308] loop3: lost filesystem error report for type 5 error -117 [ 285.835145][ T8308] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 285.855767][ T8308] loop3: lost filesystem error report for type 5 error -117 [ 285.856434][ T8308] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 285.874624][ T8308] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 285.889469][ T7772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 285.901669][ T7772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.916422][ T7772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.916816][ T186] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 285.925303][ T8308] EXT4-fs error (device loop3): ext4_acquire_dquot:7039: comm syz.3.813: Failed to acquire dquot type 1 [ 285.932887][ T8304] ceph: No mds server is up or the cluster is laggy [ 285.953133][ T8308] loop3: lost filesystem error report for type 5 error -117 [ 285.968462][ T7772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.005765][ T8308] EXT4-fs (loop3): 1 orphan inode deleted [ 286.040112][ T7772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.061638][ T8308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.104315][ T7772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.130162][ T8308] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.132560][ T7772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.233998][ T7772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 286.617491][ T7784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.730554][ T7784] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.815774][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.822958][ T6457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.876639][ T8342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.819'. [ 286.913212][ T6973] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.920391][ T6973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.984789][ T7772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.121499][ T7772] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.196860][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.204053][ T6457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.328619][ T6973] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.335797][ T6973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.740252][ T8384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.827'. [ 288.777481][ T8384] openvswitch: netlink: Key 3 has unexpected len 12 expected 4 [ 289.490833][ T7784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.674234][ T8410] netlink: 48 bytes leftover after parsing attributes in process `syz.2.834'. [ 289.699589][ T7784] veth0_vlan: entered promiscuous mode [ 289.754345][ T7784] veth1_vlan: entered promiscuous mode [ 289.810062][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.935903][ T7784] veth0_macvtap: entered promiscuous mode [ 289.965675][ T7784] veth1_macvtap: entered promiscuous mode [ 290.071234][ T7772] veth0_vlan: entered promiscuous mode [ 290.096951][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.130486][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.185187][ T7772] veth1_vlan: entered promiscuous mode [ 290.320822][ T6159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.352650][ T6159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.518739][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.574668][ T6457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.587121][ T7772] veth0_macvtap: entered promiscuous mode [ 290.614264][ T6457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.661963][ T7772] veth1_macvtap: entered promiscuous mode [ 290.806099][ T6058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.819460][ T6457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.828570][ T6058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.876483][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.934684][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.023477][ T6159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.057220][ T6159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.152722][ T6973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.176449][ T6973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.441386][ T6058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.480787][ T6058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.625960][ T6058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.662409][ T6058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.197273][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.843'. [ 292.217013][ C0] ------------[ cut here ]------------ [ 292.222518][ C0] (skb->_skb_refdst & ~(1UL)) && !(skb->_skb_refdst & 1UL) [ 292.222543][ C0] WARNING: ./include/linux/skbuff.h:1170 at nf_flow_offload_ip_hook+0xf6c/0x2b60, CPU#0: syz.1.658/8453 [ 292.240963][ C0] Modules linked in: [ 292.244968][ C0] CPU: 0 UID: 0 PID: 8453 Comm: syz.1.658 Not tainted syzkaller #0 PREEMPT(full) [ 292.254241][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 292.264357][ C0] RIP: 0010:nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 292.270769][ C0] Code: 89 ee e8 27 8a 15 f8 48 83 fd 01 76 20 e8 7c 8f 15 f8 83 e5 01 31 ff 48 89 ee e8 0f 8a 15 f8 48 85 ed 75 09 e8 65 8f 15 f8 90 <0f> 0b 90 e8 5c 8f 15 f8 e8 a7 b3 f8 f7 31 ff 89 c5 89 c6 e8 bc 89 [ 292.290440][ C0] RSP: 0018:ffffc90000007798 EFLAGS: 00010246 [ 292.296531][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89f4c191 [ 292.304550][ C0] RDX: ffff88807d1ebe00 RSI: ffffffff89f4c19b RDI: ffff88807d1ebe00 [ 292.312564][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 292.320589][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807c3647d8 [ 292.328603][ C0] R13: ffff888058138900 R14: ffff888052f581c0 R15: ffff888058138900 [ 292.336587][ C0] FS: 00007fb9145dc6c0(0000) GS:ffff888123dd9000(0000) knlGS:0000000000000000 [ 292.345572][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.352197][ C0] CR2: 0000200000d1f030 CR3: 00000000721dd000 CR4: 0000000000350ef0 [ 292.360246][ C0] Call Trace: [ 292.363536][ C0] [ 292.366404][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 292.371702][ C0] ? __pfx_nf_flow_offload_ip_hook+0x10/0x10 [ 292.377742][ C0] ? __lock_acquire+0x49f/0x1a40 [ 292.382771][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 292.388916][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.394584][ C0] ? lock_acquire+0x1b9/0x370 [ 292.399337][ C0] nf_hook_slow+0xbf/0x220 [ 292.403797][ C0] __netif_receive_skb_core.constprop.0+0x1689/0x3530 [ 292.410660][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.416329][ C0] ? find_held_lock+0x2b/0x80 [ 292.421102][ C0] ? __pfx_ip_output+0x10/0x10 [ 292.425901][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.431610][ C0] ? ip_forward_finish+0x1b4/0x320 [ 292.436753][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 292.443936][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.449629][ C0] ? ip_forward+0xfa2/0x2690 [ 292.454270][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.459995][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.465663][ C0] ? __lock_acquire+0x49f/0x1a40 [ 292.470688][ C0] ? process_backlog+0x32a/0x1580 [ 292.475741][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 292.481620][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 292.488069][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.493784][ C0] ? lock_acquire+0x1b9/0x370 [ 292.498519][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.504183][ C0] ? process_backlog+0x32a/0x1580 [ 292.509285][ C0] ? process_backlog+0x32a/0x1580 [ 292.514356][ C0] __netif_receive_skb+0x1f/0x120 [ 292.519455][ C0] process_backlog+0x37a/0x1580 [ 292.524350][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 292.529793][ C0] net_rx_action+0xa40/0xf20 [ 292.534429][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 292.539613][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.545279][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 292.550664][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.556334][ C0] ? sched_clock+0x38/0x60 [ 292.560821][ C0] ? sched_clock_cpu+0x6c/0x570 [ 292.565716][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.571417][ C0] ? rcu_is_watching+0x12/0xc0 [ 292.576223][ C0] handle_softirqs+0x1ea/0x9b0 [ 292.581070][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 292.586385][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.592089][ C0] ? irqtime_account_delta+0x9a/0x110 [ 292.597513][ C0] ? tun_rx_batched.isra.0+0x402/0x750 [ 292.603032][ C0] do_softirq+0xac/0xe0 [ 292.607219][ C0] [ 292.610205][ C0] [ 292.613146][ C0] __local_bh_enable_ip+0xf8/0x120 [ 292.618285][ C0] tun_rx_batched.isra.0+0x407/0x750 [ 292.623648][ C0] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 292.629541][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.635204][ C0] ? tun_get_user+0x1cc8/0x3c20 [ 292.640123][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.645794][ C0] tun_get_user+0x1e31/0x3c20 [ 292.650561][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 292.655624][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.661333][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 292.666825][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.672532][ C0] ? find_held_lock+0x2b/0x80 [ 292.677266][ C0] ? tun_get+0x191/0x370 [ 292.681584][ C0] ? tun_get+0x191/0x370 [ 292.685856][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.691575][ C0] tun_chr_write_iter+0xdc/0x200 [ 292.696547][ C0] vfs_write+0x6ac/0x1050 [ 292.700954][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 292.706536][ C0] ? __pfx_vfs_write+0x10/0x10 [ 292.711371][ C0] ? find_held_lock+0x2b/0x80 [ 292.716133][ C0] ksys_write+0x12a/0x250 [ 292.720552][ C0] ? __pfx_ksys_write+0x10/0x10 [ 292.725439][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.731136][ C0] do_syscall_64+0x115/0x870 [ 292.735766][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.741726][ C0] RIP: 0033:0x7fb91375e84e [ 292.746155][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.765831][ C0] RSP: 002b:00007fb9145dbfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.774309][ C0] RAX: ffffffffffffffda RBX: 00007fb9145dc6c0 RCX: 00007fb91375e84e [ 292.782331][ C0] RDX: 000000000000002f RSI: 0000200000000300 RDI: 00000000000000c8 [ 292.790336][ C0] RBP: 00007fb91383500c R08: 0000000000000000 R09: 0000000000000000 [ 292.798337][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.806312][ C0] R13: 00007fb913a26038 R14: 00007fb913a25fa0 R15: 00007ffc9da4a378 [ 292.814336][ C0] [ 292.817357][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 292.824636][ C0] CPU: 0 UID: 0 PID: 8453 Comm: syz.1.658 Not tainted syzkaller #0 PREEMPT(full) [ 292.833850][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 292.843909][ C0] Call Trace: [ 292.847184][ C0] [ 292.850054][ C0] dump_stack_lvl+0x100/0x190 [ 292.854748][ C0] vpanic+0x552/0x970 [ 292.858741][ C0] ? __pfx_vpanic+0x10/0x10 [ 292.863269][ C0] panic+0xd1/0xe0 [ 292.867001][ C0] ? __pfx_panic+0x10/0x10 [ 292.871440][ C0] ? check_panic_on_warn+0x1f/0x90 [ 292.876588][ C0] check_panic_on_warn.cold+0x19/0x34 [ 292.881977][ C0] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 292.887716][ C0] __warn.cold+0x191/0x318 [ 292.892158][ C0] __report_bug+0x30f/0x440 [ 292.896691][ C0] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 292.902435][ C0] ? __pfx___report_bug+0x10/0x10 [ 292.907491][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 292.912723][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.918381][ C0] ? irqentry_exit+0x24d/0xa00 [ 292.923176][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.928857][ C0] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 292.934600][ C0] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 292.940342][ C0] report_bug+0xb2/0x220 [ 292.944616][ C0] ? nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 292.950356][ C0] handle_bug+0x16a/0x2a0 [ 292.954730][ C0] exc_invalid_op+0x17/0x50 [ 292.959284][ C0] asm_exc_invalid_op+0x1a/0x20 [ 292.964155][ C0] RIP: 0010:nf_flow_offload_ip_hook+0xf6c/0x2b60 [ 292.970511][ C0] Code: 89 ee e8 27 8a 15 f8 48 83 fd 01 76 20 e8 7c 8f 15 f8 83 e5 01 31 ff 48 89 ee e8 0f 8a 15 f8 48 85 ed 75 09 e8 65 8f 15 f8 90 <0f> 0b 90 e8 5c 8f 15 f8 e8 a7 b3 f8 f7 31 ff 89 c5 89 c6 e8 bc 89 [ 292.990134][ C0] RSP: 0018:ffffc90000007798 EFLAGS: 00010246 [ 292.996205][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89f4c191 [ 293.004181][ C0] RDX: ffff88807d1ebe00 RSI: ffffffff89f4c19b RDI: ffff88807d1ebe00 [ 293.012153][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 293.020122][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807c3647d8 [ 293.028093][ C0] R13: ffff888058138900 R14: ffff888052f581c0 R15: ffff888058138900 [ 293.036075][ C0] ? nf_flow_offload_ip_hook+0xf61/0x2b60 [ 293.041802][ C0] ? nf_flow_offload_ip_hook+0xf6b/0x2b60 [ 293.047533][ C0] ? nf_flow_offload_ip_hook+0xf6b/0x2b60 [ 293.053276][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 293.058503][ C0] ? __pfx_nf_flow_offload_ip_hook+0x10/0x10 [ 293.064513][ C0] ? __lock_acquire+0x49f/0x1a40 [ 293.069467][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 293.075561][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.081207][ C0] ? lock_acquire+0x1b9/0x370 [ 293.085907][ C0] nf_hook_slow+0xbf/0x220 [ 293.090339][ C0] __netif_receive_skb_core.constprop.0+0x1689/0x3530 [ 293.097125][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.102773][ C0] ? find_held_lock+0x2b/0x80 [ 293.107478][ C0] ? __pfx_ip_output+0x10/0x10 [ 293.112276][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.117927][ C0] ? ip_forward_finish+0x1b4/0x320 [ 293.123059][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 293.130190][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.135840][ C0] ? ip_forward+0xfa2/0x2690 [ 293.140455][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.146115][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.151763][ C0] ? __lock_acquire+0x49f/0x1a40 [ 293.156718][ C0] ? process_backlog+0x32a/0x1580 [ 293.161752][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 293.167574][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 293.174014][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.179671][ C0] ? lock_acquire+0x1b9/0x370 [ 293.184367][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.190019][ C0] ? process_backlog+0x32a/0x1580 [ 293.195069][ C0] ? process_backlog+0x32a/0x1580 [ 293.200109][ C0] __netif_receive_skb+0x1f/0x120 [ 293.205157][ C0] process_backlog+0x37a/0x1580 [ 293.210044][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 293.215449][ C0] net_rx_action+0xa40/0xf20 [ 293.220075][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 293.225211][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.230870][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 293.236183][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.241841][ C0] ? sched_clock+0x38/0x60 [ 293.246277][ C0] ? sched_clock_cpu+0x6c/0x570 [ 293.251158][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.256809][ C0] ? rcu_is_watching+0x12/0xc0 [ 293.261608][ C0] handle_softirqs+0x1ea/0x9b0 [ 293.266400][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 293.271704][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.277357][ C0] ? irqtime_account_delta+0x9a/0x110 [ 293.282768][ C0] ? tun_rx_batched.isra.0+0x402/0x750 [ 293.288243][ C0] do_softirq+0xac/0xe0 [ 293.292428][ C0] [ 293.295354][ C0] [ 293.298279][ C0] __local_bh_enable_ip+0xf8/0x120 [ 293.303417][ C0] tun_rx_batched.isra.0+0x407/0x750 [ 293.308722][ C0] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 293.314551][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.320208][ C0] ? tun_get_user+0x1cc8/0x3c20 [ 293.325079][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.330744][ C0] tun_get_user+0x1e31/0x3c20 [ 293.335463][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 293.340503][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.346160][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 293.351643][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.357294][ C0] ? find_held_lock+0x2b/0x80 [ 293.362003][ C0] ? tun_get+0x191/0x370 [ 293.366262][ C0] ? tun_get+0x191/0x370 [ 293.370516][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.376183][ C0] tun_chr_write_iter+0xdc/0x200 [ 293.381144][ C0] vfs_write+0x6ac/0x1050 [ 293.385499][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 293.391068][ C0] ? __pfx_vfs_write+0x10/0x10 [ 293.395857][ C0] ? find_held_lock+0x2b/0x80 [ 293.400591][ C0] ksys_write+0x12a/0x250 [ 293.404947][ C0] ? __pfx_ksys_write+0x10/0x10 [ 293.409825][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 293.415487][ C0] do_syscall_64+0x115/0x870 [ 293.420113][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.426019][ C0] RIP: 0033:0x7fb91375e84e [ 293.430438][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 293.450055][ C0] RSP: 002b:00007fb9145dbfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 293.458475][ C0] RAX: ffffffffffffffda RBX: 00007fb9145dc6c0 RCX: 00007fb91375e84e [ 293.466466][ C0] RDX: 000000000000002f RSI: 0000200000000300 RDI: 00000000000000c8 [ 293.474435][ C0] RBP: 00007fb91383500c R08: 0000000000000000 R09: 0000000000000000 [ 293.482405][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.490373][ C0] R13: 00007fb913a26038 R14: 00007fb913a25fa0 R15: 00007ffc9da4a378 [ 293.498364][ C0] [ 293.502081][ C0] Kernel Offset: disabled [ 293.506393][ C0] Rebooting in 86400 seconds..