last executing test programs: 7m17.809127804s ago: executing program 1 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10000840}, 0x48014) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 7m15.284503466s ago: executing program 1 (id=415): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0x2020) 7m15.004704718s ago: executing program 1 (id=417): madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x63, 0x0, 0x0, 0x8}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xee, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x8}, 0x50) syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000003c0)='\x00!E\x00', 0x4}], 0x1, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000480), &(0x7f0000000280)=@udp=r6, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0x11, 0x148, 0x0, 0x0, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0xff000000, 'tunl0\x00', 'team0\x00', {0xff}, {}, 0x6, 0x1, 0x18}, 0x0, 0x2f0, 0x338, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e23, 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e21, 0x2, 0x4e20, 0x4e21, 0x4e23], [0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x7fffffffffffffff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 7m13.689821658s ago: executing program 1 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sysinfo(&(0x7f00000002c0)=""/112) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = dup(r3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) 7m11.263375206s ago: executing program 1 (id=423): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x613}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE'], 0x8c) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x606}, 0x50) 7m9.819301541s ago: executing program 1 (id=428): memfd_create(&(0x7f0000000080)='%\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x0, 0x0, 0x2, 0xfffffff9, 0x2, 0x1, 0x400]}}, 0x5c) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(0x0, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/schedstat\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read$FUSE(r5, &(0x7f0000008e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x156e) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r8, @ANYRESOCT=r6, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r8, @ANYRESHEX=r7], 0x1, 0x14f3, &(0x7f0000005940)="$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") r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x4c}, 0x20) 6m54.454802388s ago: executing program 32 (id=428): memfd_create(&(0x7f0000000080)='%\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x0, 0x0, 0x2, 0xfffffff9, 0x2, 0x1, 0x400]}}, 0x5c) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(0x0, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/schedstat\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read$FUSE(r5, &(0x7f0000008e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x156e) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r8, @ANYRESOCT=r6, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r8, @ANYRESHEX=r7], 0x1, 0x14f3, &(0x7f0000005940)="$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") r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x4c}, 0x20) 6m23.619489977s ago: executing program 0 (id=510): syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x14, &(0x7f0000000140)={0x5, 0xf, 0x14, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x40, 0xf000, 0xd}, @ptm_cap={0x3}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd602e"], 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file2\x00', 0x180c8, &(0x7f0000002780)=ANY=[], 0x1, 0x242, &(0x7f00000028c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) 6m20.538001275s ago: executing program 0 (id=515): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000840}, 0x48014) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6m17.908882833s ago: executing program 0 (id=523): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183341, 0x141) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x1}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x78bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xffffffffffffff15, 0x1, {0x1, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffef, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000001}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 6m14.434122278s ago: executing program 0 (id=532): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000840}, 0x48014) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6m12.803927601s ago: executing program 0 (id=538): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000800), 0x3b77, 0x109202) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r7, 0x4f}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b061276363", 0x0) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, 0x0) 6m6.667705406s ago: executing program 0 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sysinfo(&(0x7f00000002c0)=""/112) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = dup(r3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) 5m51.408886009s ago: executing program 33 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sysinfo(&(0x7f00000002c0)=""/112) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = dup(r3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0xd6e}}) 19.413201575s ago: executing program 5 (id=1555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init() r4 = getgid() setregid(0x0, r4) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x150003b0) syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/time\x00') r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) sched_setparam(r6, &(0x7f00000006c0)=0x4) write$cgroup_pid(r5, &(0x7f0000000240)=r6, 0x12) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000001}, 0x240448c8) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a063fbc45ff6205000000000700580003480400945f640094272d7061d328b92d0900000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) syz_clone(0x80000080, &(0x7f0000000380)="331d75d37601d53a8c9f88ed9aea1b3254139aa0912a12a7e66e28d8237234b3ad330889d2f706ca3f623d2ef336e2d1221792939549917e61b613d9000f601037285aef7b1ebd72e4de2e2390165f796e01c36ff50e66f3fd26119bb712a3764e8319f7610a2774896194253b9d3ec42097883c68c31dee49e45c830a869c87186aa7636c77c3c6e295c5fa057330246794a03f9c15959bf83b293ff40cc214af", 0xa1, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="17e160cccb24d2877d79a97f90342a5555b101451ecc135ff9e321c83f3f048cd914ecea2582fa0028628b0f69c2633f534935a34c564f4550dc53beb6f466514bafbde86bf180cfed0f520ec7b0e772c8582213d84a4a966d848e6530580c9443d60e9846c423791594c632327030f0b49f3653d0412dce026b3b0ac28b669288ef05b7be25ad40ad66283bccc023f41d7d121bc7aef6fdc5d4d189e1f1301e60cf28922a18c5996561") 16.144330733s ago: executing program 5 (id=1563): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 12.514499447s ago: executing program 4 (id=1573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init() r4 = getgid() setregid(0x0, r4) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x150003b0) syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/time\x00') r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) sched_setparam(r6, &(0x7f00000006c0)=0x4) write$cgroup_pid(r5, &(0x7f0000000240)=r6, 0x12) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000001}, 0x240448c8) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a063fbc45ff6205000000000700580003480400945f640094272d7061d328b92d0900000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) syz_clone(0x80000080, &(0x7f0000000380)="331d75d37601d53a8c9f88ed9aea1b3254139aa0912a12a7e66e28d8237234b3ad330889d2f706ca3f623d2ef336e2d1221792939549917e61b613d9000f601037285aef7b1ebd72e4de2e2390165f796e01c36ff50e66f3fd26119bb712a3764e8319f7610a2774896194253b9d3ec42097883c68c31dee49e45c830a869c87186aa7636c77c3c6e295c5fa057330246794a03f9c15959bf83b293ff40cc214af", 0xa1, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="17e160cccb24d2877d79a97f90342a5555b101451ecc135ff9e321c83f3f048cd914ecea2582fa0028628b0f69c2633f534935a34c564f4550dc53beb6f466514bafbde86bf180cfed0f520ec7b0e772c8582213d84a4a966d848e6530580c9443d60e9846c423791594c632327030f0b49f3653d0412dce026b3b0ac28b669288ef05b7be25ad40ad66283bccc023f41d7d121bc7aef6fdc5d4d189e1f1301e60cf28922a18c5996561") 11.540452385s ago: executing program 4 (id=1575): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) socket(0x40000000015, 0x5, 0x0) 10.914525265s ago: executing program 4 (id=1576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000854}, 0x4018040) 10.332593023s ago: executing program 4 (id=1580): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 9.224861286s ago: executing program 3 (id=1581): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init() getgid() inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x150003b0) syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/time\x00') r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) sched_setparam(r5, &(0x7f00000006c0)=0x4) write$cgroup_pid(r4, &(0x7f0000000240)=r5, 0x12) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000001}, 0x240448c8) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a063fbc45ff6205000000000700580003480400945f640094272d7061d328b92d0900000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x40) syz_clone(0x80000080, &(0x7f0000000380)="331d75d37601d53a8c9f88ed9aea1b3254139aa0912a12a7e66e28d8237234b3ad330889d2f706ca3f623d2ef336e2d1221792939549917e61b613d9000f601037285aef7b1ebd72e4de2e2390165f796e01c36ff50e66f3fd26119bb712a3764e8319f7610a2774896194253b9d3ec42097883c68c31dee49e45c830a869c87186aa7636c77c3c6e295c5fa057330246794a03f9c15959bf83b293ff40cc214af9e76625645d56560ca0f", 0xab, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="17e160cccb24d2877d79a97f90342a5555b101451ecc135ff9e321c83f3f048cd914ecea2582fa0028628b0f69c2633f534935a34c564f4550dc53beb6f466514bafbde86bf180cfed0f520ec7b0e772c8582213d84a4a966d848e6530580c9443d60e9846c423791594c632327030f0b49f3653d0412dce026b3b0ac28b669288ef05b7be25ad40ad66283bccc023f41d7d121bc7aef6fdc5d4d189e1f1301e60cf28922a18c5996561") 9.184839058s ago: executing program 6 (id=1582): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) 9.039041655s ago: executing program 5 (id=1584): socket$inet6(0xa, 0x3, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 8.915131681s ago: executing program 4 (id=1585): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init() r4 = getgid() setregid(0x0, r4) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x150003b0) syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/time\x00') r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) sched_setparam(r6, &(0x7f00000006c0)=0x4) write$cgroup_pid(r5, &(0x7f0000000240)=r6, 0x12) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000001}, 0x240448c8) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a063fbc45ff6205000000000700580003480400945f640094272d7061d328b92d0900000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) syz_clone(0x80000080, &(0x7f0000000380)="331d75d37601d53a8c9f88ed9aea1b3254139aa0912a12a7e66e28d8237234b3ad330889d2f706ca3f623d2ef336e2d1221792939549917e61b613d9000f601037285aef7b1ebd72e4de2e2390165f796e01c36ff50e66f3fd26119bb712a3764e8319f7610a2774896194253b9d3ec42097883c68c31dee49e45c830a869c87186aa7636c77c3c6e295c5fa057330246794a03f9c15959bf83b293ff40cc214af9e76625645", 0xa6, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="17e160cccb24d2877d79a97f90342a5555b101451ecc135ff9e321c83f3f048cd914ecea2582fa0028628b0f69c2633f534935a34c564f4550dc53beb6f466514bafbde86bf180cfed0f520ec7b0e772c8582213d84a4a966d848e6530580c9443d60e9846c423791594c632327030f0b49f3653d0412dce026b3b0ac28b669288ef05b7be25ad40ad66283bccc023f41d7d121bc7aef6fdc5d4d189e1f1301e60cf28922a18c5996561") 7.431631322s ago: executing program 3 (id=1586): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1700", 0x2c}], 0x1}, 0x0) 6.952945975s ago: executing program 6 (id=1588): r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) socket$nl_route(0x10, 0x3, 0x0) read(r0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x418200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r9) setuid(0xee01) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000580)=ANY=[@ANYBLOB="300301b10df2b90cf8ed4427c2220000", @ANYRES16=r10, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x1}, 0x17f9ea4ecffcbba3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000380)) 6.952466795s ago: executing program 5 (id=1589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 6.950867716s ago: executing program 3 (id=1590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x26044028}, 0x4000800) 5.083698145s ago: executing program 4 (id=1592): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001042022eb"], 0x76) 5.031444598s ago: executing program 2 (id=1593): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000800), 0x3b77, 0x109202) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b061276363", 0x0) r7 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, 0x0) 3.761195989s ago: executing program 5 (id=1594): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.612524007s ago: executing program 6 (id=1595): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 3.551679219s ago: executing program 2 (id=1596): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) 3.416932716s ago: executing program 3 (id=1597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init() getgid() inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x150003b0) syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/time\x00') r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) sched_setparam(r5, &(0x7f00000006c0)=0x4) write$cgroup_pid(r4, &(0x7f0000000240)=r5, 0x12) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000001}, 0x240448c8) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a063fbc45ff6205000000000700580003480400945f640094272d7061d328b92d0900000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x40) syz_clone(0x80000080, &(0x7f0000000380)="331d75d37601d53a8c9f88ed9aea1b3254139aa0912a12a7e66e28d8237234b3ad330889d2f706ca3f623d2ef336e2d1221792939549917e61b613d9000f601037285aef7b1ebd72e4de2e2390165f796e01c36ff50e66f3fd26119bb712a3764e8319f7610a2774896194253b9d3ec42097883c68c31dee49e45c830a869c87186aa7636c77c3c6e295c5fa057330246794a03f9c15959bf83b293ff40cc214af9e76625645d56560ca0f", 0xab, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="17e160cccb24d2877d79a97f90342a5555b101451ecc135ff9e321c83f3f048cd914ecea2582fa0028628b0f69c2633f534935a34c564f4550dc53beb6f466514bafbde86bf180cfed0f520ec7b0e772c8582213d84a4a966d848e6530580c9443d60e9846c423791594c632327030f0b49f3653d0412dce026b3b0ac28b669288ef05b7be25ad40ad66283bccc023f41d7d121bc7aef6fdc5d4d189e1f1301e60cf28922a18c5996561") 3.394152067s ago: executing program 6 (id=1598): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183341, 0x141) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x1}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x78bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xffffffffffffff15, 0x1, {0x1, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffef, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000001}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 3.32906982s ago: executing program 2 (id=1599): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) 3.194130577s ago: executing program 2 (id=1600): socket$inet6(0xa, 0x3, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 1.66077221s ago: executing program 3 (id=1601): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1700", 0x2c}], 0x1}, 0x0) 1.160600865s ago: executing program 6 (id=1602): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = inotify_init() r4 = getgid() setregid(0x0, r4) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x150003b0) syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/time\x00') r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) sched_setparam(r6, &(0x7f00000006c0)=0x4) write$cgroup_pid(r5, &(0x7f0000000240)=r6, 0x12) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000001}, 0x240448c8) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a063fbc45ff6205000000000700580003480400945f640094272d7061d328b92d0900000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) syz_clone(0x80000080, &(0x7f0000000380)="331d75d37601d53a8c9f88ed9aea1b3254139aa0912a12a7e66e28d8237234b3ad330889d2f706ca3f623d2ef336e2d1221792939549917e61b613d9000f601037285aef7b1ebd72e4de2e2390165f796e01c36ff50e66f3fd26119bb712a3764e8319f7610a2774896194253b9d3ec42097883c68c31dee49e45c830a869c87186aa7636c77c3c6e295c5fa057330246794a03f9c15959bf83b293ff40cc214af9e76625645", 0xa6, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="17e160cccb24d2877d79a97f90342a5555b101451ecc135ff9e321c83f3f048cd914ecea2582fa0028628b0f69c2633f534935a34c564f4550dc53beb6f466514bafbde86bf180cfed0f520ec7b0e772c8582213d84a4a966d848e6530580c9443d60e9846c423791594c632327030f0b49f3653d0412dce026b3b0ac28b669288ef05b7be25ad40ad66283bccc023f41d7d121bc7aef6fdc5d4d189e1f1301e60cf28922a18c5996561") 1.160359174s ago: executing program 2 (id=1603): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) socket(0x40000000015, 0x5, 0x0) 1.160111755s ago: executing program 5 (id=1604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.115580647s ago: executing program 3 (id=1605): r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) socket$nl_route(0x10, 0x3, 0x0) read(r0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x418200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r9) setuid(0xee01) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000580)=ANY=[@ANYBLOB="300301b10df2b90cf8ed4427c2220000", @ANYRES16=r10, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x1}, 0x17f9ea4ecffcbba3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000380)) 371.801492ms ago: executing program 2 (id=1606): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000800), 0x3b77, 0x109202) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r7}, 0x0, 0x0, 0x0) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, 0x0) 0s ago: executing program 6 (id=1607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x26044028}, 0x4000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. [ 74.549301][ T4258] cgroup: Unknown subsys name 'net' [ 74.654891][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.139636][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.706243][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.714453][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.727148][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.734841][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.743758][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.752217][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.761254][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.768815][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.776706][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.784355][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.792814][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.797363][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.800760][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.808849][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.820781][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.821234][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.831311][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.839584][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.849533][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.849577][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.859128][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.865798][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.872957][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.885304][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.892450][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.901197][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.909219][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.916963][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.980807][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.989048][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.392306][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 78.430748][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 78.548586][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 78.591370][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 78.612025][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 78.644166][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.654789][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.663679][ T4278] device bridge_slave_0 entered promiscuous mode [ 78.695182][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.703879][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.714151][ T4280] device bridge_slave_0 entered promiscuous mode [ 78.737806][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.744944][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.753884][ T4278] device bridge_slave_1 entered promiscuous mode [ 78.769101][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.776247][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.785091][ T4280] device bridge_slave_1 entered promiscuous mode [ 78.850716][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.864904][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.880640][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.921107][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.957381][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.964549][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.973250][ T4272] device bridge_slave_0 entered promiscuous mode [ 78.990049][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.998998][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.007442][ T4279] device bridge_slave_0 entered promiscuous mode [ 79.015127][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.023007][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.031351][ T4271] device bridge_slave_0 entered promiscuous mode [ 79.042443][ T4278] team0: Port device team_slave_0 added [ 79.048716][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.055914][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.064793][ T4272] device bridge_slave_1 entered promiscuous mode [ 79.078943][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.086092][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.094847][ T4279] device bridge_slave_1 entered promiscuous mode [ 79.102180][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.113132][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.121421][ T4271] device bridge_slave_1 entered promiscuous mode [ 79.130073][ T4278] team0: Port device team_slave_1 added [ 79.153590][ T4280] team0: Port device team_slave_0 added [ 79.188871][ T4280] team0: Port device team_slave_1 added [ 79.216910][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.224020][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.252584][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.266493][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.276053][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.284195][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.310864][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.331828][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.343897][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.355972][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.377737][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.384837][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.411206][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.424803][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.435954][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.464625][ T4272] team0: Port device team_slave_0 added [ 79.471413][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.481533][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.507833][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.551041][ T4279] team0: Port device team_slave_0 added [ 79.558294][ T4272] team0: Port device team_slave_1 added [ 79.565184][ T4279] team0: Port device team_slave_1 added [ 79.605629][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.613002][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.639270][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.653161][ T4271] team0: Port device team_slave_0 added [ 79.691275][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.698545][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.724537][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.737374][ T4271] team0: Port device team_slave_1 added [ 79.759233][ T4280] device hsr_slave_0 entered promiscuous mode [ 79.769991][ T4280] device hsr_slave_1 entered promiscuous mode [ 79.778146][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.785138][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.811680][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.824653][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.833325][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.863220][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.879349][ T4278] device hsr_slave_0 entered promiscuous mode [ 79.886444][ T4278] device hsr_slave_1 entered promiscuous mode [ 79.893322][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.901379][ T4278] Cannot create hsr debugfs directory [ 79.977253][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.984243][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.010943][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.022802][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 80.022818][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 80.029313][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 80.037620][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 80.082295][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.089476][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.116625][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 80.124980][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.144031][ T4279] device hsr_slave_0 entered promiscuous mode [ 80.154135][ T4279] device hsr_slave_1 entered promiscuous mode [ 80.161379][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.169321][ T4279] Cannot create hsr debugfs directory [ 80.184278][ T4272] device hsr_slave_0 entered promiscuous mode [ 80.192802][ T4272] device hsr_slave_1 entered promiscuous mode [ 80.199737][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.210166][ T4272] Cannot create hsr debugfs directory [ 80.308669][ T4271] device hsr_slave_0 entered promiscuous mode [ 80.315661][ T4271] device hsr_slave_1 entered promiscuous mode [ 80.323214][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.330958][ T4271] Cannot create hsr debugfs directory [ 80.629099][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.642749][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.653794][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.665722][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.752298][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.773521][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.799820][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.812088][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.824350][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.840557][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.850315][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.873411][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.994331][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.008813][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.037448][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.068187][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.077912][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.105254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.115768][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.148679][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.172706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.183950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.193618][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.201368][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.212099][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.223062][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.235866][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.245060][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.253898][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.261110][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.280197][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.297800][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.310792][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.333962][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.342982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.352929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.362720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.372723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.382506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.401310][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.411271][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.421012][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.437892][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.445904][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.465740][ T4280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.480361][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.500169][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.511462][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.521393][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.532327][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.541526][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.551080][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.590507][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.600945][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.609898][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.621267][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.634559][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.641772][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.652293][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.661697][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.671241][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.678453][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.693536][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.719776][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.728706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.803303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.814808][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.829947][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.837205][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.854435][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.864742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.873836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.883565][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.890771][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.899797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.908701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.923285][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.959173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.973486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.982180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.992893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.004915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.014408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.025082][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.035417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.054013][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.084064][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.093621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.103878][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 82.111875][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 82.111895][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 82.118238][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 82.134992][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.143246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.151589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.160426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.169764][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.178351][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 82.185537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.194676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.203913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.223151][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.237439][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.246141][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.253343][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.264756][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.278944][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.292738][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.322432][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.347324][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.364125][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.376185][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.388208][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.402764][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.412926][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.430390][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.437621][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.472875][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.509107][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.528741][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.547630][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.569697][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.583398][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.593818][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.608896][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.621260][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.657215][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.668670][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.681380][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.691475][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.705416][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.714600][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.729263][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.744027][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.761797][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.773325][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.788192][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.795362][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.811608][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.823391][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.850102][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.871176][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.880431][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.887641][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.942945][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.958912][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.978897][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.008438][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.049664][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.059078][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.069680][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.080920][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.090811][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.132375][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.148463][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.156034][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.172659][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.184784][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.201968][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.212633][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.225339][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.257210][ T4280] device veth0_vlan entered promiscuous mode [ 83.268740][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.279627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.298899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.334562][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.355187][ T4280] device veth1_vlan entered promiscuous mode [ 83.366088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.380613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.388556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.400402][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.453286][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.465749][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.497660][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.589223][ T4280] device veth0_macvtap entered promiscuous mode [ 83.608318][ T4278] device veth0_vlan entered promiscuous mode [ 83.616937][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.626140][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.660240][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.687441][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.699224][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.707792][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.715911][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.746126][ T4280] device veth1_macvtap entered promiscuous mode [ 83.772486][ T4278] device veth1_vlan entered promiscuous mode [ 83.823585][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.834178][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.846009][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.855980][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.865518][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.874004][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.887807][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.904868][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.927985][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.947480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.967261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.997238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.015895][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.035559][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.057204][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.066002][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.157190][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.204577][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 84.210810][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 84.216959][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 84.223021][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 84.237657][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.257380][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 84.308650][ T4278] device veth0_macvtap entered promiscuous mode [ 84.341229][ T4278] device veth1_macvtap entered promiscuous mode [ 84.372302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.392429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.410064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.422005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.431653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.439640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.479495][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.491764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.508480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.519106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.527385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.555034][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.576343][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.594221][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.603635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.612783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.641288][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.652483][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.665405][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.674080][ T4279] device veth0_vlan entered promiscuous mode [ 84.697095][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.705222][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.713659][ T4279] device veth1_vlan entered promiscuous mode [ 84.723603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.733539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.747572][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.758736][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.767899][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.776820][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.819244][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.827541][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.841770][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.850920][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.858435][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.893884][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.908613][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.922200][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.954633][ T4272] device veth0_vlan entered promiscuous mode [ 84.975524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.993781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.011958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.020433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.043687][ T4272] device veth1_vlan entered promiscuous mode [ 85.075283][ T4279] device veth0_macvtap entered promiscuous mode [ 85.094550][ T4279] device veth1_macvtap entered promiscuous mode [ 85.103525][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.122201][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.158764][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.174385][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.183308][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.211805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.230890][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.247700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.255809][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.276824][ T4271] device veth0_vlan entered promiscuous mode [ 85.315497][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.319039][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.335148][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.340740][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.353197][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.364106][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.399332][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.426481][ T4272] device veth0_macvtap entered promiscuous mode [ 85.445804][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.465457][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.480067][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.492841][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.506208][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.520020][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.532259][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.544451][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.555945][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.567607][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.580172][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.593738][ T4271] device veth1_vlan entered promiscuous mode [ 85.609472][ T4272] device veth1_macvtap entered promiscuous mode [ 85.628537][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.638715][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.648210][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.657192][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.665926][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.678849][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.689765][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.698844][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.707759][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.732980][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.751253][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.795506][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.822228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.854192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.882826][ T4271] device veth0_macvtap entered promiscuous mode [ 85.894256][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.905930][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.917712][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.928647][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.939411][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.950940][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.963741][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.984142][ T4271] device veth1_macvtap entered promiscuous mode [ 85.995766][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.004930][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.028340][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.051821][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.094541][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.114346][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.124593][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.135265][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.145532][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.160048][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.171929][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.217485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.237349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.256625][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 86.262788][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 86.270312][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 86.270336][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 86.307555][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.337288][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 86.365693][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.396125][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.405813][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.424884][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.462208][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.489436][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.516397][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.548768][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.569983][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.582002][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.594673][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.610454][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.622823][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.634936][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.648888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.663067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.675678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.715018][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.733351][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.744999][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.755839][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.770681][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.781715][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.792028][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.802816][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.858908][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.932622][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.958707][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.988253][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.004209][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.023434][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.032941][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.175854][ T4380] loop0: detected capacity change from 0 to 512 [ 87.227814][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.256358][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.231809][ T4380] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.265725][ T4380] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 88.936302][ C0] sched: RT throttling activated [ 88.956674][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.115535][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.144334][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.198470][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.342756][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.370903][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.410584][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.424258][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.471109][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.487766][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.557695][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.565636][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.596514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.115792][ T4401] loop2: detected capacity change from 0 to 4096 [ 90.158517][ T4401] EXT4-fs: Ignoring removed bh option [ 90.255905][ T4409] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.316440][ T4401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.955839][ T3535] cfg80211: failed to load regulatory.db [ 92.868276][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 93.066591][ T1200] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.249062][ T4432] loop0: detected capacity change from 0 to 2048 [ 93.276943][ T1200] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 93.291123][ T4432] EXT4-fs (loop0): bad geometry: block count 3096224743817728 exceeds size of device (512 blocks) [ 93.313781][ T1200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.353149][ T1200] usb 4-1: Product: syz [ 93.378392][ T1200] usb 4-1: Manufacturer: syz [ 93.383121][ T1200] usb 4-1: SerialNumber: syz [ 93.700141][ T1200] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 93.732449][ T1200] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 93.754915][ T1200] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 93.772954][ T1200] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 93.784448][ T1200] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 93.805112][ T1200] lan78xx: probe of 4-1:1.0 failed with error -71 [ 93.833035][ T4443] loop1: detected capacity change from 0 to 512 [ 93.849212][ T4441] loop2: detected capacity change from 0 to 8192 [ 93.870578][ T1200] usb 4-1: USB disconnect, device number 2 [ 94.048073][ T4441] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.114330][ T4443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.135726][ T4443] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.002921][ T4455] loop3: detected capacity change from 0 to 512 [ 95.013163][ T4455] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.287811][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 96.628484][ T4471] netlink: 64 bytes leftover after parsing attributes in process `syz.1.40'. [ 99.262648][ T4493] loop4: detected capacity change from 0 to 512 [ 99.270118][ T4493] ======================================================= [ 99.270118][ T4493] WARNING: The mand mount option has been deprecated and [ 99.270118][ T4493] and is ignored by this kernel. Remove the mand [ 99.270118][ T4493] option from the mount to silence this warning. [ 99.270118][ T4493] ======================================================= [ 99.730217][ T4493] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 100.284080][ T4475] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 100.443205][ T4503] loop0: detected capacity change from 0 to 512 [ 100.455342][ T4499] loop2: detected capacity change from 0 to 8192 [ 101.148934][ T4503] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.159855][ T4499] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.236445][ T4503] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.601937][ T4516] netlink: 64 bytes leftover after parsing attributes in process `syz.2.52'. [ 103.633154][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 104.262965][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 104.494919][ T4528] ALSA: mixer_oss: invalid OSS volume 'W' [ 106.215404][ T4537] device syzkaller0 entered promiscuous mode [ 106.241948][ T4539] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 106.546935][ T4549] loop1: detected capacity change from 0 to 8192 [ 106.588443][ T4549] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.175357][ T4560] Zero length message leads to an empty skb [ 109.153097][ T4570] ALSA: mixer_oss: invalid OSS volume 'W' [ 109.162504][ T4570] Cannot find add_set index 0 as target [ 109.653240][ T4571] netlink: 284 bytes leftover after parsing attributes in process `syz.1.67'. [ 110.720019][ T4584] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 112.455659][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 112.910775][ T4593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.74'. [ 113.725090][ T4593] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 114.872823][ T4616] loop1: detected capacity change from 0 to 128 [ 115.015047][ T4620] netlink: 'syz.2.83': attribute type 3 has an invalid length. [ 115.015102][ T4620] netlink: 136 bytes leftover after parsing attributes in process `syz.2.83'. [ 115.703556][ T4629] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 118.188097][ T4652] bond0: unable to remove nonexistent ARP target 192.168.1.1 [ 118.228473][ T4652] bond0: option arp_ip_target: invalid value (-192.168.1.1}÷¢º1Þ3 1 [ 258.381578][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.397907][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.405825][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.414949][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 258.423016][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.514920][ T5910] SET target dimension over the limit! [ 259.721074][ T5921] netlink: 64 bytes leftover after parsing attributes in process `syz.2.464'. [ 261.107923][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 262.881942][ T4544] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.012738][ T5928] netlink: 64 bytes leftover after parsing attributes in process `syz.4.466'. [ 263.136655][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 263.169048][ T4544] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.670502][ T4544] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.722462][ T5906] chnl_net:caif_netlink_parms(): no params data found [ 263.845657][ T4544] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.286371][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.293560][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.387638][ T5906] device bridge_slave_0 entered promiscuous mode [ 264.477986][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.511736][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.521755][ T5906] device bridge_slave_1 entered promiscuous mode [ 264.625777][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.711156][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.858989][ T5906] team0: Port device team_slave_0 added [ 264.894806][ T5906] team0: Port device team_slave_1 added [ 265.216828][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 265.428713][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 265.589216][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.605788][ T5961] Cannot find add_set index 0 as target [ 265.627576][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.093126][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.509089][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.527470][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.623564][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.306923][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 267.542372][ T5906] device hsr_slave_0 entered promiscuous mode [ 267.568725][ T5906] device hsr_slave_1 entered promiscuous mode [ 267.607937][ T5906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.637469][ T5906] Cannot create hsr debugfs directory [ 268.587263][ T5988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.477'. [ 269.369590][ T6003] loop2: detected capacity change from 0 to 128 [ 269.609951][ T5906] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.645698][ T6003] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 269.666687][ T6003] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.443575][ T5906] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.501816][ T5906] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.559190][ T6008] netlink: 64 bytes leftover after parsing attributes in process `syz.3.479'. [ 271.603825][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 272.426877][ T5906] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 272.490832][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 272.782347][ T6029] Cannot find add_set index 0 as target [ 273.528727][ T6034] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 273.871531][ T6033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.485'. [ 275.847087][ T4544] device hsr_slave_0 left promiscuous mode [ 275.875343][ T4544] device hsr_slave_1 left promiscuous mode [ 275.912162][ T4544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.930137][ T4544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.958034][ T4544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.974137][ T4544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.021045][ T4544] device bridge_slave_1 left promiscuous mode [ 276.038871][ T4544] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.152297][ T4544] device bridge_slave_0 left promiscuous mode [ 276.173647][ T4544] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.281459][ T4544] device veth1_macvtap left promiscuous mode [ 276.306646][ T4544] device veth0_macvtap left promiscuous mode [ 276.313574][ T4544] device veth1_vlan left promiscuous mode [ 276.328665][ T4544] device veth0_vlan left promiscuous mode [ 279.011642][ T4544] team0 (unregistering): Port device team_slave_1 removed [ 279.098169][ T4544] team0 (unregistering): Port device team_slave_0 removed [ 279.209800][ T4544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.322411][ T4544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.244536][ T4544] bond0 (unregistering): Released all slaves [ 280.382715][ T6046] netlink: 64 bytes leftover after parsing attributes in process `syz.2.488'. [ 280.659102][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.721311][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.737262][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.778856][ T5906] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.860476][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.078110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.265965][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.273261][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.554507][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.624073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.664722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.700509][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.708011][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.726632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.749062][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.781729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.818945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.848451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.879758][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.894404][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.921739][ T6081] loop3: detected capacity change from 0 to 512 [ 281.930555][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.988083][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.022302][ T5906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.081629][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.131234][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.157394][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.483070][ T6091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.498'. [ 282.614745][ T6094] device syzkaller0 entered promiscuous mode [ 282.687846][ T6094] tipc: Started in network mode [ 282.714340][ T6092] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 282.731896][ T6094] tipc: Node identity fede1d33ef3, cluster identity 4711 [ 282.764696][ T6094] tipc: Enabled bearer , priority 0 [ 282.845147][ T6094] tipc: Resetting bearer [ 282.946580][ T6093] tipc: Resetting bearer [ 283.083388][ T6093] tipc: Disabling bearer [ 283.101251][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 283.257591][ T6108] SET target dimension over the limit! [ 283.936759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.944350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.018761][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.269785][ T6118] netlink: 64 bytes leftover after parsing attributes in process `syz.4.504'. [ 286.548118][ T6126] syz.0.503 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 286.559948][ T6126] CPU: 1 PID: 6126 Comm: syz.0.503 Not tainted syzkaller #0 [ 286.567314][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.577445][ T6126] Call Trace: [ 286.580777][ T6126] [ 286.583750][ T6126] dump_stack_lvl+0x188/0x24e [ 286.588515][ T6126] ? ___ratelimit+0x14e/0x610 [ 286.593256][ T6126] ? show_regs_print_info+0x12/0x12 [ 286.598522][ T6126] ? load_image+0x410/0x410 [ 286.603079][ T6126] ? ___ratelimit+0x474/0x610 [ 286.607820][ T6126] ? radix_tree_cpu_dead+0x160/0x160 [ 286.613171][ T6126] dump_header+0xd8/0x820 [ 286.617586][ T6126] oom_kill_process+0x361/0x550 [ 286.622498][ T6126] out_of_memory+0xe25/0x1220 [ 286.627254][ T6126] ? mutex_lock_nested+0x10/0x10 [ 286.632256][ T6126] ? unregister_oom_notifier+0x20/0x20 [ 286.637757][ T6126] mem_cgroup_out_of_memory+0x2c0/0x390 [ 286.643342][ T6126] ? mem_cgroup_oom_trylock+0x210/0x210 [ 286.648946][ T6126] ? do_raw_spin_unlock+0x11d/0x230 [ 286.654208][ T6126] try_charge_memcg+0xc9d/0x17c0 [ 286.659211][ T6126] ? percpu_ref_put+0x180/0x180 [ 286.664122][ T6126] ? get_mem_cgroup_from_mm+0x34/0x290 [ 286.669619][ T6126] charge_memcg+0x117/0x3b0 [ 286.674161][ T6126] ? __mem_cgroup_charge+0x80/0x80 [ 286.679304][ T6126] ? get_mem_cgroup_from_mm+0x34/0x290 [ 286.684799][ T6126] ? get_mem_cgroup_from_mm+0x34/0x290 [ 286.690296][ T6126] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 286.695874][ T6126] __mem_cgroup_charge+0x21/0x80 [ 286.700845][ T6126] shmem_add_to_page_cache+0x8d7/0x1c90 [ 286.706424][ T6126] ? __filemap_get_folio+0x10f/0xde0 [ 286.711744][ T6126] ? __filemap_get_folio+0x10f/0xde0 [ 286.717065][ T6126] ? put_page+0x270/0x270 [ 286.721441][ T6126] shmem_get_folio_gfp+0x1663/0x35e0 [ 286.726763][ T6126] ? __lock_acquire+0x7c40/0x7c40 [ 286.731862][ T6126] shmem_fault+0x1b6/0x790 [ 286.736320][ T6126] ? shmem_fallocate+0xfc0/0xfc0 [ 286.741294][ T6126] ? filemap_map_pages+0x1ae/0x11e0 [ 286.746524][ T6126] ? filemap_read_folio+0x7a0/0x7a0 [ 286.751754][ T6126] ? count_memcg_event_mm+0x8a/0x3c0 [ 286.757073][ T6126] __do_fault+0x13b/0x4e0 [ 286.761431][ T6126] ? handle_mm_fault+0x2600/0x3d40 [ 286.766576][ T6126] handle_mm_fault+0x2610/0x3d40 [ 286.771555][ T6126] ? numa_migrate_prep+0x250/0x250 [ 286.776713][ T6126] __get_user_pages+0x40d/0xec0 [ 286.781606][ T6126] ? populate_vma_page_range+0x2b0/0x2b0 [ 286.787286][ T6126] populate_vma_page_range+0x214/0x2b0 [ 286.792780][ T6126] __mm_populate+0x25c/0x380 [ 286.797414][ T6126] ? check_vma_flags+0x4c0/0x4c0 [ 286.802384][ T6126] ? up_write+0x1b6/0x410 [ 286.806744][ T6126] vm_mmap_pgoff+0x212/0x2d0 [ 286.811379][ T6126] ? account_locked_vm+0xe0/0xe0 [ 286.816353][ T6126] ? ksys_mmap_pgoff+0xef/0x720 [ 286.821238][ T6126] ? syscall_user_dispatch+0x45/0x90 [ 286.826565][ T6126] do_syscall_64+0x4c/0xa0 [ 286.831021][ T6126] ? clear_bhb_loop+0x60/0xb0 [ 286.835743][ T6126] ? clear_bhb_loop+0x60/0xb0 [ 286.840453][ T6126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.846392][ T6126] RIP: 0033:0x7f0de0d9e159 [ 286.850839][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.870479][ T6126] RSP: 002b:00007f0de1c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 286.878956][ T6126] RAX: ffffffffffffffda RBX: 00007f0de1025fa0 RCX: 00007f0de0d9e159 [ 286.886952][ T6126] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 286.894950][ T6126] RBP: 00007f0de0e3503b R08: ffffffffffffffff R09: 00000000a7ae6000 [ 286.902946][ T6126] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 286.910945][ T6126] R13: 00007f0de1026038 R14: 00007f0de1025fa0 R15: 00007ffd213ae6c8 [ 286.918963][ T6126] [ 286.922275][ T6126] memory: usage 307200kB, limit 307200kB, failcnt 22740 [ 286.929373][ T6126] memory+swap: usage 432128kB, limit 9007199254740988kB, failcnt 0 [ 286.937353][ T6126] kmem: usage 2664kB, limit 9007199254740988kB, failcnt 0 [ 286.944503][ T6126] Memory cgroup stats for /syz0: [ 286.945216][ T6126] anon 249856 [ 286.945216][ T6126] file 311500800 [ 286.945216][ T6126] kernel 2727936 [ 286.945216][ T6126] kernel_stack 98304 [ 286.945216][ T6126] pagetables 606208 [ 286.945216][ T6126] sec_pagetables 0 [ 286.945216][ T6126] percpu 3552 [ 286.945216][ T6126] sock 0 [ 286.945216][ T6126] vmalloc 90112 [ 286.945216][ T6126] shmem 311488512 [ 286.945216][ T6126] zswap 0 [ 286.945216][ T6126] zswapped 0 [ 286.945216][ T6126] file_mapped 218583040 [ 286.945216][ T6126] file_dirty 12288 [ 286.945216][ T6126] file_writeback 0 [ 286.945216][ T6126] swapcached 127926272 [ 286.945216][ T6126] anon_thp 0 [ 286.945216][ T6126] file_thp 0 [ 286.945216][ T6126] shmem_thp 0 [ 286.945216][ T6126] inactive_anon 241688576 [ 286.945216][ T6126] active_anon 70017024 [ 286.945216][ T6126] inactive_file 12288 [ 286.945216][ T6126] active_file 0 [ 286.945216][ T6126] unevictable 32768 [ 286.945216][ T6126] slab_reclaimable 1475216 [ 286.945216][ T6126] slab_unreclaimable 380040 [ 287.041490][ T6126] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.370,pid=5601,uid=0 [ 287.057922][ T6126] Memory cgroup out of memory: Killed process 5601 (syz.0.370) total-vm:151416kB, anon-rss:4kB, file-rss:0kB, shmem-rss:105120kB, UID:0 pgtables:232kB oom_score_adj:1000 [ 287.222032][ T6126] syz.0.503 (6126) used greatest stack depth: 20656 bytes left [ 288.326028][ T6150] netlink: 64 bytes leftover after parsing attributes in process `syz.3.509'. [ 289.411227][ T29] oom_reaper: reaped process 5601 (syz.0.370), now anon-rss:0kB, file-rss:0kB, shmem-rss:64064kB [ 289.905623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.944370][ T6153] loop0: detected capacity change from 0 to 512 [ 289.948745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.498253][ T5906] device veth0_vlan entered promiscuous mode [ 290.565922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.600909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.627522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.665504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.677405][ T6163] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 290.729084][ T6162] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 290.780784][ T5906] device veth1_vlan entered promiscuous mode [ 290.936666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.956891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 291.059081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 291.068692][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.118682][ T5906] device veth0_macvtap entered promiscuous mode [ 291.141326][ T5906] device veth1_macvtap entered promiscuous mode [ 291.197347][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 291.252777][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.317422][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.343282][ T6173] Cannot find add_set index 0 as target [ 291.489171][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.653582][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.791899][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.930357][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.043223][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.064119][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.087545][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.104913][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 292.133160][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 292.212514][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.263117][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.282677][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.347631][ T6178] loop2: detected capacity change from 0 to 512 [ 292.355016][ T6178] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.373265][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.399235][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.440767][ T6178] ext4: Unknown parameter 'fscontext' [ 292.447059][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.482981][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.554588][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.611007][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.644550][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.656576][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.670109][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.698416][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.811023][ T5906] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.954940][ T5906] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.338970][ T5906] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.398799][ T5906] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.666011][ T6192] loop2: detected capacity change from 0 to 1024 [ 293.755604][ T6192] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 293.907869][ T6192] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 293.994861][ T6192] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 294.125928][ T6192] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 294.255223][ T6205] loop3: detected capacity change from 0 to 512 [ 294.389925][ T6192] syz.2.522 (6192) used greatest stack depth: 20032 bytes left [ 294.433191][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 294.754385][ T6208] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 296.262301][ T6207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.523'. [ 296.341111][ T6222] Cannot find add_set index 0 as target [ 296.374913][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 296.609998][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.640397][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.664448][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.797876][ T6227] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 297.240118][ T4495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.256453][ T4495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.316558][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.938524][ T6263] loop2: detected capacity change from 0 to 512 [ 300.165356][ T6284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.541'. [ 300.323494][ T6284] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 302.909879][ T6317] netlink: 64 bytes leftover after parsing attributes in process `syz.5.550'. [ 304.581241][ T6322] loop2: detected capacity change from 0 to 512 [ 304.856108][ T6324] autofs4:pid:6324:autofs_fill_super: called with bogus options [ 304.902685][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 308.514543][ T6366] netlink: 64 bytes leftover after parsing attributes in process `syz.2.562'. [ 309.784625][ T6393] loop5: detected capacity change from 0 to 512 [ 311.403520][ T6410] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 313.368698][ T6446] syz.3.578 uses obsolete (PF_INET,SOCK_PACKET) [ 313.850080][ T6454] loop2: detected capacity change from 0 to 512 [ 313.991469][ T6456] loop5: detected capacity change from 0 to 128 [ 314.145610][ T6456] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 314.236645][ T6456] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.366309][ T6474] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 315.654163][ T5906] EXT4-fs (loop5): unmounting filesystem. [ 316.113809][ T6487] netlink: 36 bytes leftover after parsing attributes in process `syz.5.587'. [ 316.621548][ T6487] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 317.133851][ T5601] syz.0.370 (5601) used greatest stack depth: 17664 bytes left [ 317.220884][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.227325][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.074844][ T6521] loop4: detected capacity change from 0 to 128 [ 318.327432][ T6521] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 318.368121][ T6521] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.460416][ T6528] tipc: Started in network mode [ 318.506332][ T6528] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 318.514512][ T6528] tipc: Enabled bearer , priority 2 [ 319.240509][ T6536] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 319.701695][ T27] tipc: Node number set to 10398378 [ 319.881155][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 319.989118][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 319.999126][ T6530] netlink: 64 bytes leftover after parsing attributes in process `syz.2.598'. [ 320.816227][ T6552] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 321.293454][ T6547] netlink: 36 bytes leftover after parsing attributes in process `syz.5.603'. [ 322.106994][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.117300][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.125869][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.135288][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.143336][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 322.150821][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.001950][ T6566] chnl_net:caif_netlink_parms(): no params data found [ 323.395086][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.432708][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.473515][ T6566] device bridge_slave_0 entered promiscuous mode [ 323.532435][ T6588] loop5: detected capacity change from 0 to 128 [ 323.649909][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.732338][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.763120][ T6566] device bridge_slave_1 entered promiscuous mode [ 323.797306][ T6588] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 323.841160][ T6589] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 323.929095][ T6588] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.162682][ T6566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.177561][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 324.263579][ T6566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.530670][ T5906] EXT4-fs (loop5): unmounting filesystem. [ 324.558066][ T6566] team0: Port device team_slave_0 added [ 324.597455][ T6566] team0: Port device team_slave_1 added [ 324.725432][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.780033][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.932876][ T6566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.486889][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.493988][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.836215][ T6566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.107620][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.614'. [ 326.653482][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 327.334539][ T6566] device hsr_slave_0 entered promiscuous mode [ 327.455186][ T6566] device hsr_slave_1 entered promiscuous mode [ 327.498527][ T6566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.516338][ T6566] Cannot create hsr debugfs directory [ 327.529320][ T6620] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 327.615562][ T6619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.616'. [ 328.249977][ T6566] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.347824][ T6566] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.399725][ T6566] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.539650][ T6566] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.736845][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 328.833786][ T6566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.930187][ T6566] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.966674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.975358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.048507][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.070468][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.119671][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.126914][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.159137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.195444][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.272109][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.279341][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.331027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.370353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.401935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.487815][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.518731][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.563139][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.582647][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.609892][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.659910][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.667128][ T6647] loop4: detected capacity change from 0 to 2048 [ 329.847334][ T6647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 329.974658][ T26] audit: type=1800 audit(1789153901.873:6): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.622" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 330.826818][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 331.080508][ T6665] loop5: detected capacity change from 0 to 256 [ 331.104563][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 331.667494][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.676834][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.407841][ T6677] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 333.640119][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.840252][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.338170][ T6648] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.347214][ T6648] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.356126][ T6648] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.365125][ T6648] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.752961][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.777794][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.860442][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.041636][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 336.304451][ T6673] team0: Port device team_slave_0 removed [ 336.362917][ T6675] netlink: 36 bytes leftover after parsing attributes in process `syz.5.627'. [ 336.448229][ T6566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.594053][ T4531] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.101838][ T4531] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.174775][ T26] audit: type=1800 audit(1789153910.073:7): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.635" name=FFFFFFFF5002 dev="sda1" ino=2053 res=0 errno=0 [ 338.184122][ T6718] loop4: detected capacity change from 0 to 128 [ 338.504900][ T6722] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 338.996977][ T6723] loop5: detected capacity change from 0 to 1764 [ 339.480398][ T4531] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.577536][ T6738] netlink: 36 bytes leftover after parsing attributes in process `syz.3.641'. [ 339.663157][ T6738] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 339.855182][ T4531] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.027513][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.122355][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.996773][ T6566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.349566][ T6756] loop3: detected capacity change from 0 to 1024 [ 341.658311][ T6756] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.644: lblock 2 mapped to illegal pblock 2 (length 1) [ 341.674379][ T6756] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 341.683796][ T6756] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.644: lblock 0 mapped to illegal pblock 48 (length 1) [ 341.701885][ T6756] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 341.710837][ T6756] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.644: Failed to acquire dquot type 0 [ 341.724967][ T6756] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 341.745917][ T6756] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.644: mark_inode_dirty error [ 341.758591][ T6756] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 341.769211][ T6756] EXT4-fs (loop3): 1 orphan inode deleted [ 341.775084][ T6756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 341.988277][ T46] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 342.013228][ T46] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 342.022315][ T46] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 342.964609][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 343.007983][ T4278] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 343.104341][ T4278] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 343.184409][ T4278] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 343.310592][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.650'. [ 343.379965][ T6780] netlink: 32 bytes leftover after parsing attributes in process `syz.5.650'. [ 343.517127][ T6785] loop2: detected capacity change from 0 to 512 [ 343.928589][ T6792] netlink: 36 bytes leftover after parsing attributes in process `syz.5.653'. [ 344.023268][ T6795] loop3: detected capacity change from 0 to 512 [ 344.052342][ T6792] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 344.178091][ T6795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 344.209304][ T6795] ext4 filesystem being mounted at /152/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.288045][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.305625][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.473111][ T6566] device veth0_vlan entered promiscuous mode [ 344.482582][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 344.527652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.538000][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.611452][ T6566] device veth1_vlan entered promiscuous mode [ 344.622336][ T6802] loop4: detected capacity change from 0 to 1024 [ 344.643763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.667756][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.687503][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 344.732053][ T6809] loop2: detected capacity change from 0 to 512 [ 344.819450][ T6809] EXT4-fs (loop2): 1 truncate cleaned up [ 344.825200][ T6809] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 344.915870][ T6802] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #3: block 5: comm syz.4.655: lblock 5 mapped to illegal pblock 5 (length 1) [ 344.946088][ T26] audit: type=1800 audit(1789153916.843:8): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.659" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 344.977266][ T6802] Quota error (device loop4): write_blk: dquota write failed [ 345.007005][ T6802] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 345.022170][ T6802] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 345.057541][ T6802] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.655: Failed to acquire dquot type 0 [ 345.154281][ T6802] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 5: comm syz.4.655: lblock 5 mapped to illegal pblock 5 (length 1) [ 345.211238][ T6802] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 345.223114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.240480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.260100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.317241][ T6802] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 345.332841][ T6566] device veth0_macvtap entered promiscuous mode [ 345.402689][ T6802] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.655: Failed to acquire dquot type 0 [ 345.443371][ T6802] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.655: Freeing blocks not in datazone - block = 0, count = 4096 [ 345.534666][ T6802] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 5: comm syz.4.655: lblock 5 mapped to illegal pblock 5 (length 1) [ 345.640026][ T6802] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 345.655433][ T6566] device veth1_macvtap entered promiscuous mode [ 345.666477][ T6802] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 345.713647][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.960595][ T6802] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.655: Failed to acquire dquot type 0 [ 346.013073][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.205506][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.386237][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.407240][ T6802] EXT4-fs (loop4): 1 orphan inode deleted [ 346.413065][ T6802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 346.436335][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.476322][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.516246][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.561109][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.609195][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 346.631730][ T6566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.671117][ T6802] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 5: comm syz.4.655: lblock 5 mapped to illegal pblock 5 (length 1) [ 346.825174][ T6802] Quota error (device loop4): do_insert_tree: Can't read tree quota block 5 [ 346.834469][ T6802] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 346.855514][ T6802] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.655: Failed to acquire dquot type 0 [ 347.175668][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 347.196517][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.213206][ T6840] loop3: detected capacity change from 0 to 512 [ 347.226844][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.238093][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.250587][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.275098][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.294043][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.314892][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.332598][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.360104][ T6566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.396259][ T6566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.436708][ T6566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.512022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.542233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.579563][ T6566] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.606324][ T6566] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.635640][ T6566] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.655127][ T6566] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.803155][ T6846] loop4: detected capacity change from 0 to 1024 [ 347.863377][ T6846] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 348.004147][ T6846] EXT4-fs (loop4): barriers disabled [ 348.076537][ T6846] JBD2: no valid journal superblock found [ 348.082381][ T6846] EXT4-fs (loop4): error loading journal [ 348.121827][ T4531] device hsr_slave_0 left promiscuous mode [ 348.136992][ T4531] device hsr_slave_1 left promiscuous mode [ 348.173673][ T4531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.209421][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.255430][ T4531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.283008][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.317134][ T4531] device bridge_slave_1 left promiscuous mode [ 348.346718][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.363538][ T4531] device bridge_slave_0 left promiscuous mode [ 348.426025][ T4531] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.467752][ T6859] netlink: 'syz.2.670': attribute type 21 has an invalid length. [ 348.524025][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 349.058677][ T4531] device veth1_macvtap left promiscuous mode [ 349.065632][ T4531] device veth0_macvtap left promiscuous mode [ 349.239918][ T4531] device veth1_vlan left promiscuous mode [ 349.246078][ T4531] device veth0_vlan left promiscuous mode [ 349.988266][ T6876] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 351.821326][ T4531] team0 (unregistering): Port device team_slave_1 removed [ 351.963327][ T4531] team0 (unregistering): Port device team_slave_0 removed [ 352.057553][ T4531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.147236][ T4531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.819558][ T4531] bond0 (unregistering): Released all slaves [ 353.091798][ T6872] netlink: 36 bytes leftover after parsing attributes in process `syz.3.673'. [ 353.208160][ T6893] loop2: detected capacity change from 0 to 512 [ 353.276368][ T4473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.284271][ T4473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.336361][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.418310][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.459359][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.503050][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 354.392301][ T6923] loop2: detected capacity change from 0 to 512 [ 354.623995][ T6923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 354.655373][ T6923] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.806128][ T6923] capability: warning: `syz.2.685' uses 32-bit capabilities (legacy support in use) [ 355.674077][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 355.902870][ T6943] netlink: 36 bytes leftover after parsing attributes in process `syz.4.689'. [ 356.003166][ T6952] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 356.051883][ T6954] loop6: detected capacity change from 0 to 512 [ 356.073878][ T6943] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 356.885469][ T6972] loop6: detected capacity change from 0 to 512 [ 356.904314][ T6974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.695'. [ 356.973604][ T6972] EXT4-fs warning (device loop6): dx_probe:869: inode #2: comm syz.6.697: Unimplemented hash flags: 0x0001 [ 357.026440][ T6972] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.697: Corrupt directory, running e2fsck is recommended [ 357.042468][ T6972] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 357.052846][ T6972] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.697: corrupted in-inode xattr [ 357.074102][ T6972] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.697: couldn't read orphan inode 15 (err -117) [ 357.096809][ T6972] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 357.131910][ T6972] EXT4-fs warning (device loop6): dx_probe:869: inode #2: comm syz.6.697: Unimplemented hash flags: 0x0001 [ 357.181999][ T6972] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.697: Corrupt directory, running e2fsck is recommended [ 357.248690][ T6972] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.697: path /4/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 357.325151][ T6972] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 2: comm syz.6.697: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0 [ 357.376755][ T6974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.695'. [ 357.416045][ T6972] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 8: comm syz.6.697: path /4/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 357.620464][ T6566] EXT4-fs (loop6): unmounting filesystem. [ 358.092003][ T6997] loop6: detected capacity change from 0 to 1024 [ 358.800588][ T6997] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #3: block 5: comm syz.6.700: lblock 5 mapped to illegal pblock 5 (length 1) [ 358.928116][ T6997] Quota error (device loop6): write_blk: dquota write failed [ 358.935676][ T6997] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 358.956751][ T6997] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 359.006522][ T6997] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.700: Failed to acquire dquot type 0 [ 359.108647][ T6997] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 5: comm syz.6.700: lblock 5 mapped to illegal pblock 5 (length 1) [ 359.164652][ T6997] Quota error (device loop6): do_insert_tree: Can't read tree quota block 5 [ 359.196524][ T6997] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 359.235342][ T6997] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.700: Failed to acquire dquot type 0 [ 359.276610][ T6997] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.700: Freeing blocks not in datazone - block = 0, count = 4096 [ 359.335284][ T7014] loop4: detected capacity change from 0 to 512 [ 359.346651][ T6997] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 5: comm syz.6.700: lblock 5 mapped to illegal pblock 5 (length 1) [ 359.429321][ T6997] Quota error (device loop6): do_insert_tree: Can't read tree quota block 5 [ 359.486900][ T6997] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 359.516412][ T6997] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.700: Failed to acquire dquot type 0 [ 359.547197][ T6997] EXT4-fs (loop6): 1 orphan inode deleted [ 359.553030][ T6997] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 359.814616][ T6566] EXT4-fs (loop6): unmounting filesystem. [ 359.967395][ T7031] loop5: detected capacity change from 0 to 128 [ 360.026649][ T7031] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 360.139974][ T7031] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 360.214859][ T7031] ext2 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.468407][ T5906] EXT4-fs (loop5): unmounting filesystem. [ 361.596511][ T7061] loop5: detected capacity change from 0 to 256 [ 362.158264][ T7069] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 363.094171][ T7073] loop5: detected capacity change from 0 to 1024 [ 363.130172][ T7073] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #3: block 5: comm syz.5.722: lblock 5 mapped to illegal pblock 5 (length 1) [ 363.159770][ T7073] Quota error (device loop5): write_blk: dquota write failed [ 363.177041][ T7073] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 363.186427][ T7073] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 363.202271][ T7073] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.722: Failed to acquire dquot type 0 [ 363.236633][ T7073] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 5: comm syz.5.722: lblock 5 mapped to illegal pblock 5 (length 1) [ 363.294948][ T7073] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.722: Failed to acquire dquot type 0 [ 363.327169][ T7082] loop2: detected capacity change from 0 to 512 [ 363.396860][ T7073] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.722: Freeing blocks not in datazone - block = 0, count = 4096 [ 363.454224][ T7073] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 5: comm syz.5.722: lblock 5 mapped to illegal pblock 5 (length 1) [ 363.545885][ T7073] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.722: Failed to acquire dquot type 0 [ 363.606546][ T7073] EXT4-fs (loop5): 1 orphan inode deleted [ 363.612464][ T7073] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 363.875859][ T5906] EXT4-fs (loop5): unmounting filesystem. [ 364.231595][ T7102] FAULT_INJECTION: forcing a failure. [ 364.231595][ T7102] name failslab, interval 1, probability 0, space 0, times 0 [ 364.246689][ T7100] sd 0:0:1:0: PR command failed: 1026 [ 364.252276][ T7100] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 364.284232][ T7100] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 364.316100][ T7102] CPU: 0 PID: 7102 Comm: syz.6.730 Not tainted syzkaller #0 [ 364.323477][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.333604][ T7102] Call Trace: [ 364.336943][ T7102] [ 364.339956][ T7102] dump_stack_lvl+0x188/0x24e [ 364.344709][ T7102] ? show_regs_print_info+0x12/0x12 [ 364.349987][ T7102] ? load_image+0x410/0x410 [ 364.354551][ T7102] ? __might_sleep+0xd0/0xd0 [ 364.359195][ T7102] ? __lock_acquire+0x7c40/0x7c40 [ 364.364262][ T7102] should_fail_ex+0x390/0x4c0 [ 364.368975][ T7102] should_failslab+0x5/0x20 [ 364.373590][ T7102] slab_pre_alloc_hook+0x59/0x300 [ 364.378678][ T7102] kmem_cache_alloc_lru+0x49/0x2e0 [ 364.383829][ T7102] ? __d_alloc+0x2e/0x6e0 [ 364.388187][ T7102] __d_alloc+0x2e/0x6e0 [ 364.392367][ T7102] ? d_alloc_pseudo+0xe/0x70 [ 364.396988][ T7102] d_alloc_pseudo+0x19/0x70 [ 364.401513][ T7102] alloc_file_pseudo+0xe0/0x200 [ 364.406395][ T7102] ? alloc_empty_file_noaccount+0x80/0x80 [ 364.412152][ T7102] ? alloc_fd+0x590/0x640 [ 364.416519][ T7102] sock_alloc_file+0xb3/0x240 [ 364.421246][ T7102] __sys_socket+0x12d/0x190 [ 364.425784][ T7102] __x64_sys_socket+0x76/0x80 [ 364.430496][ T7102] do_syscall_64+0x4c/0xa0 [ 364.434974][ T7102] ? clear_bhb_loop+0x60/0xb0 [ 364.439714][ T7102] ? clear_bhb_loop+0x60/0xb0 [ 364.444464][ T7102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.450396][ T7102] RIP: 0033:0x7f4a0679e159 [ 364.454836][ T7102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.474476][ T7102] RSP: 002b:00007f4a076c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 364.482913][ T7102] RAX: ffffffffffffffda RBX: 00007f4a06a25fa0 RCX: 00007f4a0679e159 [ 364.490993][ T7102] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 364.498984][ T7102] RBP: 00007f4a0683503b R08: 0000000000000000 R09: 0000000000000000 [ 364.507006][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.515008][ T7102] R13: 00007f4a06a26038 R14: 00007f4a06a25fa0 R15: 00007fff8964e478 [ 364.523021][ T7102] [ 364.821383][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 365.013949][ T7112] team0: Port device team_slave_0 removed [ 365.099509][ T7113] loop4: detected capacity change from 0 to 8192 [ 365.763112][ T7127] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 367.062086][ T7141] loop2: detected capacity change from 0 to 512 [ 367.289091][ T7150] capability: warning: `syz.5.744' uses deprecated v2 capabilities in a way that may be insecure [ 368.740122][ T7175] sctp: failed to load transform for md5: -4 [ 369.039859][ T7173] sctp: failed to load transform for md5: -4 [ 369.356909][ T7171] sctp: failed to load transform for md5: -4 [ 369.390896][ T7168] sctp: failed to load transform for md5: -4 [ 369.467506][ T7164] sctp: failed to load transform for md5: -4 [ 369.531303][ T7193] EXT4-fs warning (device sda1): __ext4_ioctl:1253: Setting inode version is not supported with metadata_csum enabled. [ 369.930078][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 369.930095][ T26] audit: type=1326 audit(1789153941.833:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 370.056477][ T26] audit: type=1326 audit(1789153941.833:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 370.222794][ T26] audit: type=1326 audit(1789153942.053:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 370.355829][ T7215] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 370.946259][ T26] audit: type=1326 audit(1789153942.113:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 371.242626][ T26] audit: type=1326 audit(1789153942.113:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 371.376730][ T26] audit: type=1326 audit(1789153942.113:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 371.473248][ T7228] loop5: detected capacity change from 0 to 512 [ 371.486509][ T26] audit: type=1326 audit(1789153942.113:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 371.514284][ T7228] EXT4-fs: Ignoring removed nobh option [ 371.603630][ T7228] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 371.641505][ T7228] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 371.650948][ T26] audit: type=1326 audit(1789153942.113:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 371.696703][ T7228] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.761: inode has both inline data and extents flags [ 371.746542][ T26] audit: type=1326 audit(1789153942.373:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 371.771581][ T7228] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.761: couldn't read orphan inode 13 (err -117) [ 371.815020][ T7228] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 371.876354][ T26] audit: type=1326 audit(1789153942.373:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.5.754" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 371.902448][ T7228] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 372.034732][ T5906] EXT4-fs (loop5): unmounting filesystem. [ 372.184440][ T7243] FAULT_INJECTION: forcing a failure. [ 372.184440][ T7243] name fail_futex, interval 1, probability 0, space 0, times 1 [ 372.246460][ T7243] CPU: 1 PID: 7243 Comm: syz.2.766 Not tainted syzkaller #0 [ 372.253833][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.263945][ T7243] Call Trace: [ 372.267277][ T7243] [ 372.270252][ T7243] dump_stack_lvl+0x188/0x24e [ 372.275010][ T7243] ? show_regs_print_info+0x12/0x12 [ 372.280272][ T7243] ? load_image+0x410/0x410 [ 372.284843][ T7243] ? cgroup_rstat_updated+0xce/0x350 [ 372.290193][ T7243] ? rcu_read_lock_sched_held+0x86/0x110 [ 372.295888][ T7243] should_fail_ex+0x390/0x4c0 [ 372.300637][ T7243] get_futex_key+0x1b1/0x1000 [ 372.305385][ T7243] ? futex_setup_timer+0xc0/0xc0 [ 372.310388][ T7243] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 372.316429][ T7243] ? __lock_acquire+0x7c40/0x7c40 [ 372.321501][ T7243] ? lock_chain_count+0x20/0x20 [ 372.326386][ T7243] futex_wait_setup+0xb8/0x270 [ 372.331183][ T7243] ? futex_wait_multiple+0x920/0x920 [ 372.336497][ T7243] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 372.342420][ T7243] ? _raw_spin_unlock+0x40/0x40 [ 372.347311][ T7243] futex_wait+0x1b8/0x5c0 [ 372.351678][ T7243] ? futex_wait_setup+0x270/0x270 [ 372.356761][ T7243] ? percpu_counter_add_batch+0x135/0x150 [ 372.362541][ T7243] do_futex+0x310/0x320 [ 372.366737][ T7243] ? __ia32_sys_get_robust_list+0x100/0x100 [ 372.372658][ T7243] ? __lock_acquire+0x7c40/0x7c40 [ 372.377719][ T7243] __se_sys_futex+0x381/0x410 [ 372.382425][ T7243] ? __x64_sys_futex+0xf0/0xf0 [ 372.387235][ T7243] ? __x64_sys_futex+0x1d/0xf0 [ 372.392025][ T7243] do_syscall_64+0x4c/0xa0 [ 372.396481][ T7243] ? clear_bhb_loop+0x60/0xb0 [ 372.401196][ T7243] ? clear_bhb_loop+0x60/0xb0 [ 372.405913][ T7243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.411853][ T7243] RIP: 0033:0x7f599a99e159 [ 372.416300][ T7243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.435934][ T7243] RSP: 002b:00007f599b7880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 372.444382][ T7243] RAX: ffffffffffffffda RBX: 00007f599ac25fa8 RCX: 00007f599a99e159 [ 372.452379][ T7243] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f599ac25fa8 [ 372.460377][ T7243] RBP: 00007f599ac25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 372.468373][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.476373][ T7243] R13: 00007f599ac26038 R14: 00007ffd4c6ae2d0 R15: 00007ffd4c6ae3b8 [ 372.484391][ T7243] [ 372.760722][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.768'. [ 373.433703][ T7261] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 375.662986][ T7301] loop2: detected capacity change from 0 to 512 [ 375.791313][ T7301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 375.926353][ T7301] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.200318][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.784'. [ 376.241248][ T7314] device veth1_to_team entered promiscuous mode [ 376.260134][ T7314] device gretap0 entered promiscuous mode [ 376.268601][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 376.298802][ T7314] device hsr1 entered promiscuous mode [ 376.873680][ T7321] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 377.675930][ T7322] loop4: detected capacity change from 0 to 8192 [ 378.661661][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.668147][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.694765][ T7352] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 378.927256][ T7366] netlink: 160 bytes leftover after parsing attributes in process `syz.5.799'. [ 379.173684][ T7373] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.800'. [ 379.232319][ T7373] netlink: zone id is out of range [ 379.275567][ T7373] netlink: zone id is out of range [ 379.381529][ T7373] netlink: del zone limit has 4 unknown bytes [ 379.566056][ T7377] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 380.736342][ T4284] Bluetooth: hci5: command 0x0406 tx timeout [ 381.288736][ T7383] 9pnet: Could not find request transport: f„ [ 384.341779][ T7432] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 385.124802][ T7435] device syzkaller0 entered promiscuous mode [ 385.430612][ T7444] 9pnet_virtio: no channels available for device [ 387.176868][ T7480] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 388.764523][ T7506] loop6: detected capacity change from 0 to 512 [ 388.825553][ T7506] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.900055][ T7506] ext4: Unknown parameter 'fscontext' [ 388.935555][ T7500] device veth0 entered promiscuous mode [ 390.524903][ T7499] device veth0 left promiscuous mode [ 391.405748][ T7548] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 393.100540][ T7567] loop5: detected capacity change from 0 to 128 [ 393.158231][ T7567] FAT-fs (loop5): bogus sectors per cluster 7 [ 393.164400][ T7567] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 393.242964][ T7572] loop3: detected capacity change from 0 to 7 [ 393.255930][ C1] blk_print_req_error: 11 callbacks suppressed [ 393.255949][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.271528][ C1] buffer_io_error: 10 callbacks suppressed [ 393.271543][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 393.299568][ T7567] FAT-fs (loop5): Can't find a valid FAT filesystem [ 393.346948][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.356237][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 393.413499][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.422773][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 393.459661][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.468950][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 393.482695][ T7567] loop5: detected capacity change from 0 to 512 [ 393.518563][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.527852][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 393.551931][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.561217][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 393.620376][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.629689][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 393.643397][ T6678] ldm_validate_partition_table(): Disk read failed. [ 393.676453][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.685751][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 393.726037][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.735360][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 393.801378][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.810723][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 393.866528][ T6678] Dev loop3: unable to read RDB block 0 [ 393.882393][ T6678] loop3: unable to read partition table [ 393.904287][ T6678] loop3: partition table beyond EOD, truncated [ 393.944066][ T7572] ldm_validate_partition_table(): Disk read failed. [ 393.970813][ T7572] Dev loop3: unable to read RDB block 0 [ 393.998244][ T7572] loop3: unable to read partition table [ 394.046444][ T7572] loop3: partition table beyond EOD, truncated [ 394.067203][ T7572] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 394.086855][ T7567] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 394.408673][ T7577] loop6: detected capacity change from 0 to 8192 [ 394.807463][ T7577] FAULT_INJECTION: forcing a failure. [ 394.807463][ T7577] name failslab, interval 1, probability 0, space 0, times 0 [ 394.974857][ T7600] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 395.761014][ T5906] EXT4-fs (loop5): unmounting filesystem. [ 395.773693][ T7577] CPU: 0 PID: 7577 Comm: syz.6.854 Not tainted syzkaller #0 [ 395.781274][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.791389][ T7577] Call Trace: [ 395.794731][ T7577] [ 395.797716][ T7577] dump_stack_lvl+0x188/0x24e [ 395.802505][ T7577] ? show_regs_print_info+0x12/0x12 [ 395.807774][ T7577] ? load_image+0x410/0x410 [ 395.812339][ T7577] ? __might_sleep+0xd0/0xd0 [ 395.816993][ T7577] ? __lock_acquire+0x7c40/0x7c40 [ 395.822093][ T7577] should_fail_ex+0x390/0x4c0 [ 395.826845][ T7577] should_failslab+0x5/0x20 [ 395.831407][ T7577] slab_pre_alloc_hook+0x59/0x300 [ 395.836500][ T7577] kmem_cache_alloc_node+0x5a/0x310 [ 395.841745][ T7577] ? __alloc_skb+0xf9/0x7d0 [ 395.846303][ T7577] __alloc_skb+0xf9/0x7d0 [ 395.850681][ T7577] tcp_stream_alloc_skb+0x3e/0x330 [ 395.855832][ T7577] tcp_connect+0x15e9/0x4a50 [ 395.860456][ T7577] ? tcp_fastopen_defer_connect+0xde/0x360 [ 395.866350][ T7577] tcp_v6_connect+0x119c/0x18f0 [ 395.871271][ T7577] ? tcp_v6_pre_connect+0xf0/0xf0 [ 395.876347][ T7577] ? do_syscall_64+0x4c/0xa0 [ 395.880984][ T7577] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.887100][ T7577] __inet_stream_connect+0x242/0xe10 [ 395.892433][ T7577] ? inet_dgram_connect+0x340/0x340 [ 395.897677][ T7577] tcp_sendmsg_fastopen+0x38f/0x600 [ 395.902921][ T7577] tcp_sendmsg_locked+0x356b/0x39e0 [ 395.908197][ T7577] ? __might_sleep+0xd0/0xd0 [ 395.912824][ T7577] ? __might_sleep+0xd0/0xd0 [ 395.917456][ T7577] ? mark_lock+0x94/0x320 [ 395.921837][ T7577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.927857][ T7577] ? lock_chain_count+0x20/0x20 [ 395.932748][ T7577] ? tcp_sendmsg+0x1d/0x40 [ 395.937205][ T7577] ? tcp_set_state+0x520/0x520 [ 395.942014][ T7577] tcp_sendmsg+0x2b/0x40 [ 395.946298][ T7577] __sys_sendto+0x497/0x650 [ 395.950847][ T7577] ? __ia32_sys_getpeername+0x80/0x80 [ 395.956283][ T7577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.962326][ T7577] ? lock_chain_count+0x20/0x20 [ 395.967243][ T7577] __x64_sys_sendto+0xda/0xf0 [ 395.971968][ T7577] do_syscall_64+0x4c/0xa0 [ 395.976457][ T7577] ? clear_bhb_loop+0x60/0xb0 [ 395.981193][ T7577] ? clear_bhb_loop+0x60/0xb0 [ 395.985911][ T7577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.991870][ T7577] RIP: 0033:0x7f4a0679e159 [ 395.996330][ T7577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.015980][ T7577] RSP: 002b:00007f4a076c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 396.024462][ T7577] RAX: ffffffffffffffda RBX: 00007f4a06a25fa0 RCX: 00007f4a0679e159 [ 396.032510][ T7577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 396.040516][ T7577] RBP: 00007f4a0683503b R08: 00002000000001c0 R09: 000000000000001c [ 396.048521][ T7577] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000000 [ 396.056525][ T7577] R13: 00007f4a06a26038 R14: 00007f4a06a25fa0 R15: 00007fff8964e478 [ 396.064539][ T7577] [ 398.167651][ T7629] tipc: Enabled bearer , priority 0 [ 398.187064][ T6566] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 398.195542][ T6566] FAT-fs (loop6): Filesystem has been set read-only [ 398.234473][ T7632] loop2: detected capacity change from 0 to 1024 [ 398.327401][ T7632] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 398.338100][ T7629] device syzkaller0 entered promiscuous mode [ 398.377804][ T7629] tipc: Resetting bearer [ 398.405523][ T7632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 398.602650][ T7628] tipc: Resetting bearer [ 398.698257][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 398.920558][ T7643] loop5: detected capacity change from 0 to 512 [ 399.403629][ T7652] loop6: detected capacity change from 0 to 2048 [ 399.574972][ T7652] loop6: p1 < > p4 [ 399.619138][ T7652] loop6: p4 size 8388608 extends beyond EOD, truncated [ 400.912535][ T6678] udevd[6678]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 400.927961][ T6726] udevd[6726]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 404.195855][ T7680] loop5: detected capacity change from 0 to 1024 [ 404.326557][ T7680] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 404.402035][ T7680] EXT4-fs (loop5): barriers disabled [ 404.413427][ T7680] JBD2: no valid journal superblock found [ 404.466301][ T7680] EXT4-fs (loop5): error loading journal [ 407.425098][ T7532] syz.6.841 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 407.466789][ T7532] CPU: 0 PID: 7532 Comm: syz.6.841 Not tainted syzkaller #0 [ 407.474179][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.484286][ T7532] Call Trace: [ 407.487617][ T7532] [ 407.490600][ T7532] dump_stack_lvl+0x188/0x24e [ 407.495341][ T7532] ? ___ratelimit+0x14e/0x610 [ 407.500109][ T7532] ? show_regs_print_info+0x12/0x12 [ 407.505364][ T7532] ? load_image+0x410/0x410 [ 407.509970][ T7532] ? ___ratelimit+0x474/0x610 [ 407.514704][ T7532] ? radix_tree_cpu_dead+0x160/0x160 [ 407.520053][ T7532] dump_header+0xd8/0x820 [ 407.524448][ T7532] oom_kill_process+0x361/0x550 [ 407.529361][ T7532] out_of_memory+0xe25/0x1220 [ 407.534090][ T7532] ? mutex_lock_nested+0x10/0x10 [ 407.539064][ T7532] ? unregister_oom_notifier+0x20/0x20 [ 407.544606][ T7532] mem_cgroup_out_of_memory+0x2c0/0x390 [ 407.550219][ T7532] ? mem_cgroup_oom_trylock+0x210/0x210 [ 407.555815][ T7532] ? do_raw_spin_unlock+0x11d/0x230 [ 407.561057][ T7532] try_charge_memcg+0xc9d/0x17c0 [ 407.566050][ T7532] ? percpu_ref_put+0x180/0x180 [ 407.570952][ T7532] ? get_mem_cgroup_from_mm+0x34/0x290 [ 407.576458][ T7532] charge_memcg+0x117/0x3b0 [ 407.581002][ T7532] ? __mem_cgroup_charge+0x80/0x80 [ 407.586152][ T7532] ? get_mem_cgroup_from_mm+0x34/0x290 [ 407.591658][ T7532] ? get_mem_cgroup_from_mm+0x34/0x290 [ 407.597169][ T7532] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 407.602775][ T7532] __mem_cgroup_charge+0x21/0x80 [ 407.607790][ T7532] shmem_add_to_page_cache+0x8d7/0x1c90 [ 407.613428][ T7532] ? __filemap_get_folio+0x10f/0xde0 [ 407.618766][ T7532] ? __filemap_get_folio+0x10f/0xde0 [ 407.624098][ T7532] ? put_page+0x270/0x270 [ 407.628510][ T7532] ? mark_lock+0x94/0x320 [ 407.632890][ T7532] shmem_get_folio_gfp+0x1663/0x35e0 [ 407.638265][ T7532] shmem_write_begin+0xee/0x3f0 [ 407.643206][ T7532] generic_perform_write+0x2fa/0x5c0 [ 407.648561][ T7532] ? generic_file_direct_write+0x330/0x330 [ 407.654447][ T7532] ? __file_remove_privs+0x5f0/0x5f0 [ 407.659775][ T7532] ? rwsem_write_trylock+0x135/0x1c0 [ 407.665120][ T7532] ? clear_nonspinnable+0x60/0x60 [ 407.670233][ T7532] ? generic_write_checks_count+0x363/0x440 [ 407.676173][ T7532] __generic_file_write_iter+0x148/0x2a0 [ 407.681863][ T7532] generic_file_write_iter+0xab/0x2e0 [ 407.687279][ T7532] __kernel_write_iter+0x298/0x690 [ 407.692431][ T7532] ? vfs_read+0x960/0x960 [ 407.696807][ T7532] ? dump_user_range+0x481/0x840 [ 407.701785][ T7532] ? kasan_check_range+0x3d/0x290 [ 407.706874][ T7532] ? iov_iter_bvec+0x4a/0x1f0 [ 407.711603][ T7532] dump_user_range+0x40a/0x840 [ 407.716414][ T7532] ? dump_skip+0x40/0x40 [ 407.720695][ T7532] ? dump_emit+0x74/0xe0 [ 407.724989][ T7532] ? dump_emit+0xa2/0xe0 [ 407.729272][ T7532] ? elf_core_dump+0x2aa9/0x3630 [ 407.734242][ T7532] elf_core_dump+0x30ca/0x3630 [ 407.739052][ T7532] ? load_elf_binary+0x2820/0x2820 [ 407.744202][ T7532] ? dump_vma_snapshot+0xaea/0xe40 [ 407.749382][ T7532] ? verify_lock_unused+0x140/0x140 [ 407.754619][ T7532] ? __lock_acquire+0x7c40/0x7c40 [ 407.759681][ T7532] ? mas_next_entry+0xe03/0xe90 [ 407.764602][ T7532] ? rcu_read_lock_any_held+0xb0/0x130 [ 407.770097][ T7532] ? 0xffffffffff600000 [ 407.774285][ T7532] ? getname_kernel+0x142/0x2f0 [ 407.779172][ T7532] do_coredump+0x16c1/0x2480 [ 407.783818][ T7532] ? nfs_stat_to_errno+0x170/0x170 [ 407.788990][ T7532] ? lock_chain_count+0x20/0x20 [ 407.793883][ T7532] ? _raw_spin_unlock_irq+0x1f/0x40 [ 407.799123][ T7532] ? lockdep_hardirqs_on+0x94/0x140 [ 407.804367][ T7532] get_signal+0x1093/0x1340 [ 407.808919][ T7532] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 407.814974][ T7532] arch_do_signal_or_restart+0xc4/0x1310 [ 407.820646][ T7532] ? __send_signal_locked+0xb38/0xde0 [ 407.826058][ T7532] ? get_sigframe_size+0x10/0x10 [ 407.831035][ T7532] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 407.837058][ T7532] ? do_user_addr_fault+0x3a5/0xb20 [ 407.842291][ T7532] ? exit_to_user_mode_loop+0x3b/0x110 [ 407.847792][ T7532] exit_to_user_mode_loop+0x70/0x110 [ 407.853141][ T7532] exit_to_user_mode_prepare+0xee/0x180 [ 407.858727][ T7532] irqentry_exit_to_user_mode+0x5/0x30 [ 407.864221][ T7532] exc_page_fault+0x88/0x100 [ 407.868851][ T7532] asm_exc_page_fault+0x22/0x30 [ 407.873740][ T7532] RIP: 0033:0x7f4a0679e159 [ 407.878201][ T7532] Code: Unable to access opcode bytes at 0x7f4a0679e12f. [ 407.885236][ T7532] RSP: 002b:00007f4a076a7fd8 EFLAGS: 00010246 [ 407.891340][ T7532] RAX: 0000000000000000 RBX: 00007f4a06a26090 RCX: 00007f4a0679e159 [ 407.899354][ T7532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 407.907353][ T7532] RBP: 00007f4a0683503b R08: 0000000000000000 R09: 0000000000000000 [ 407.915385][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.923380][ T7532] R13: 00007f4a06a26128 R14: 00007f4a06a26090 R15: 00007fff8964e478 [ 407.931398][ T7532] [ 408.169223][ T7532] memory: usage 307196kB, limit 307200kB, failcnt 11096 [ 408.176720][ T7532] memory+swap: usage 374352kB, limit 9007199254740988kB, failcnt 0 [ 408.184715][ T7532] kmem: usage 2048kB, limit 9007199254740988kB, failcnt 0 [ 408.192111][ T7532] Memory cgroup stats for /syz6: [ 408.192553][ T7532] anon 2445312 [ 408.192553][ T7532] file 310026240 [ 408.192553][ T7532] kernel 2097152 [ 408.192553][ T7532] kernel_stack 131072 [ 408.192553][ T7532] pagetables 479232 [ 408.192553][ T7532] sec_pagetables 0 [ 408.192553][ T7532] percpu 0 [ 408.192553][ T7532] sock 0 [ 408.192553][ T7532] vmalloc 45056 [ 408.192553][ T7532] shmem 310026240 [ 408.192553][ T7532] zswap 0 [ 408.192553][ T7532] zswapped 0 [ 408.192553][ T7532] file_mapped 154910720 [ 408.192553][ T7532] file_dirty 0 [ 408.192553][ T7532] file_writeback 0 [ 408.192553][ T7532] swapcached 68767744 [ 408.192553][ T7532] anon_thp 0 [ 408.192553][ T7532] file_thp 0 [ 408.192553][ T7532] shmem_thp 0 [ 408.192553][ T7532] inactive_anon 52371456 [ 408.192553][ T7532] active_anon 260100096 [ 408.192553][ T7532] inactive_file 0 [ 408.192553][ T7532] active_file 0 [ 408.192553][ T7532] unevictable 0 [ 408.192553][ T7532] slab_reclaimable 1178200 [ 408.192553][ T7532] slab_unreclaimable 196248 [ 408.306296][ T7532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.717,pid=7058,uid=0 [ 408.347460][ T7532] Memory cgroup out of memory: Killed process 7058 (syz.6.717) total-vm:151416kB, anon-rss:0kB, file-rss:0kB, shmem-rss:110036kB, UID:0 pgtables:236kB oom_score_adj:1000 [ 408.989963][ T7532] syz.6.841 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 409.008484][ T7532] CPU: 0 PID: 7532 Comm: syz.6.841 Not tainted syzkaller #0 [ 409.015861][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.025972][ T7532] Call Trace: [ 409.029297][ T7532] [ 409.032276][ T7532] dump_stack_lvl+0x188/0x24e [ 409.037024][ T7532] ? ___ratelimit+0x14e/0x610 [ 409.041760][ T7532] ? show_regs_print_info+0x12/0x12 [ 409.047016][ T7532] ? load_image+0x410/0x410 [ 409.051568][ T7532] ? ___ratelimit+0x474/0x610 [ 409.056385][ T7532] ? radix_tree_cpu_dead+0x160/0x160 [ 409.061747][ T7532] dump_header+0xd8/0x820 [ 409.066140][ T7532] oom_kill_process+0x361/0x550 [ 409.071048][ T7532] out_of_memory+0xe25/0x1220 [ 409.075781][ T7532] ? print_unlock_imbalance_bug+0x160/0x160 [ 409.081743][ T7532] ? mutex_lock_nested+0x10/0x10 [ 409.086917][ T7532] ? unregister_oom_notifier+0x20/0x20 [ 409.092455][ T7532] mem_cgroup_out_of_memory+0x2c0/0x390 [ 409.098068][ T7532] ? mem_cgroup_oom_trylock+0x210/0x210 [ 409.103691][ T7532] ? do_raw_spin_unlock+0x11d/0x230 [ 409.108989][ T7532] try_charge_memcg+0xc9d/0x17c0 [ 409.114005][ T7532] ? percpu_ref_put+0x180/0x180 [ 409.118907][ T7532] ? get_mem_cgroup_from_mm+0x34/0x290 [ 409.124406][ T7532] charge_memcg+0x117/0x3b0 [ 409.128954][ T7532] ? __mem_cgroup_charge+0x80/0x80 [ 409.134101][ T7532] ? get_mem_cgroup_from_mm+0x34/0x290 [ 409.139594][ T7532] ? get_mem_cgroup_from_mm+0x34/0x290 [ 409.145093][ T7532] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 409.150679][ T7532] __mem_cgroup_charge+0x21/0x80 [ 409.155697][ T7532] shmem_add_to_page_cache+0x8d7/0x1c90 [ 409.161315][ T7532] ? __filemap_get_folio+0x10f/0xde0 [ 409.166662][ T7532] ? __filemap_get_folio+0x10f/0xde0 [ 409.171990][ T7532] ? put_page+0x270/0x270 [ 409.176388][ T7532] ? mark_lock+0x94/0x320 [ 409.180764][ T7532] shmem_get_folio_gfp+0x1663/0x35e0 [ 409.186111][ T7532] shmem_write_begin+0xee/0x3f0 [ 409.191013][ T7532] generic_perform_write+0x2fa/0x5c0 [ 409.196346][ T7532] ? generic_file_direct_write+0x330/0x330 [ 409.202197][ T7532] ? __file_remove_privs+0x5f0/0x5f0 [ 409.207516][ T7532] ? rwsem_write_trylock+0x135/0x1c0 [ 409.212835][ T7532] ? clear_nonspinnable+0x60/0x60 [ 409.217893][ T7532] ? generic_write_checks_count+0x363/0x440 [ 409.223827][ T7532] __generic_file_write_iter+0x148/0x2a0 [ 409.229503][ T7532] generic_file_write_iter+0xab/0x2e0 [ 409.234918][ T7532] __kernel_write_iter+0x298/0x690 [ 409.240073][ T7532] ? vfs_read+0x960/0x960 [ 409.244441][ T7532] ? dump_user_range+0x481/0x840 [ 409.249422][ T7532] ? kasan_check_range+0x3d/0x290 [ 409.254480][ T7532] ? iov_iter_bvec+0x4a/0x1f0 [ 409.259194][ T7532] dump_user_range+0x40a/0x840 [ 409.264010][ T7532] ? dump_skip+0x40/0x40 [ 409.268310][ T7532] ? dump_emit+0x74/0xe0 [ 409.272601][ T7532] ? dump_emit+0xa2/0xe0 [ 409.276879][ T7532] ? elf_core_dump+0x2aa9/0x3630 [ 409.281852][ T7532] elf_core_dump+0x30ca/0x3630 [ 409.286678][ T7532] ? load_elf_binary+0x2820/0x2820 [ 409.292005][ T7532] ? dump_vma_snapshot+0xaea/0xe40 [ 409.297158][ T7532] ? verify_lock_unused+0x140/0x140 [ 409.302393][ T7532] ? __lock_acquire+0x7c40/0x7c40 [ 409.307457][ T7532] ? mas_next_entry+0xe03/0xe90 [ 409.312399][ T7532] ? rcu_read_lock_any_held+0xb0/0x130 [ 409.317894][ T7532] ? 0xffffffffff600000 [ 409.322084][ T7532] ? getname_kernel+0x142/0x2f0 [ 409.327164][ T7532] do_coredump+0x16c1/0x2480 [ 409.331848][ T7532] ? nfs_stat_to_errno+0x170/0x170 [ 409.337031][ T7532] ? lock_chain_count+0x20/0x20 [ 409.341926][ T7532] ? _raw_spin_unlock_irq+0x1f/0x40 [ 409.347208][ T7532] ? lockdep_hardirqs_on+0x94/0x140 [ 409.352440][ T7532] get_signal+0x1093/0x1340 [ 409.357021][ T7532] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 409.363053][ T7532] arch_do_signal_or_restart+0xc4/0x1310 [ 409.368732][ T7532] ? __send_signal_locked+0xb38/0xde0 [ 409.374151][ T7532] ? get_sigframe_size+0x10/0x10 [ 409.379126][ T7532] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 409.385150][ T7532] ? do_user_addr_fault+0x3a5/0xb20 [ 409.390384][ T7532] ? exit_to_user_mode_loop+0x3b/0x110 [ 409.395885][ T7532] exit_to_user_mode_loop+0x70/0x110 [ 409.401216][ T7532] exit_to_user_mode_prepare+0xee/0x180 [ 409.406837][ T7532] irqentry_exit_to_user_mode+0x5/0x30 [ 409.412331][ T7532] exc_page_fault+0x88/0x100 [ 409.416961][ T7532] asm_exc_page_fault+0x22/0x30 [ 409.421846][ T7532] RIP: 0033:0x7f4a0679e159 [ 409.426305][ T7532] Code: Unable to access opcode bytes at 0x7f4a0679e12f. [ 409.433342][ T7532] RSP: 002b:00007f4a076a7fd8 EFLAGS: 00010246 [ 409.439441][ T7532] RAX: 0000000000000000 RBX: 00007f4a06a26090 RCX: 00007f4a0679e159 [ 409.447443][ T7532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.455462][ T7532] RBP: 00007f4a0683503b R08: 0000000000000000 R09: 0000000000000000 [ 409.463480][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.471484][ T7532] R13: 00007f4a06a26128 R14: 00007f4a06a26090 R15: 00007fff8964e478 [ 409.479503][ T7532] [ 409.893412][ T7532] memory: usage 296944kB, limit 307200kB, failcnt 11575 [ 409.916355][ T7532] memory+swap: usage 360560kB, limit 9007199254740988kB, failcnt 0 [ 409.924328][ T7532] kmem: usage 1616kB, limit 9007199254740988kB, failcnt 0 [ 409.966215][ T7532] Memory cgroup stats for /syz6: [ 409.966434][ T7532] anon 2445312 [ 409.966434][ T7532] file 293875712 [ 409.966434][ T7532] kernel 1650688 [ 409.966434][ T7532] kernel_stack 131072 [ 409.966434][ T7532] pagetables 245760 [ 409.966434][ T7532] sec_pagetables 0 [ 409.966434][ T7532] percpu 0 [ 409.966434][ T7532] sock 0 [ 409.966434][ T7532] vmalloc 0 [ 409.966434][ T7532] shmem 293875712 [ 409.966434][ T7532] zswap 0 [ 409.966434][ T7532] zswapped 0 [ 409.966434][ T7532] file_mapped 42217472 [ 409.966434][ T7532] file_dirty 0 [ 409.966434][ T7532] file_writeback 0 [ 409.966434][ T7532] swapcached 68767744 [ 409.966434][ T7532] anon_thp 0 [ 409.966434][ T7532] file_thp 0 [ 409.966434][ T7532] shmem_thp 0 [ 409.966434][ T7532] inactive_anon 52371456 [ 409.966434][ T7532] active_anon 243949568 [ 409.966434][ T7532] inactive_file 0 [ 409.966434][ T7532] active_file 0 [ 409.966434][ T7532] unevictable 0 [ 409.966434][ T7532] slab_reclaimable 1048568 [ 409.966434][ T7532] slab_unreclaimable 176808 [ 410.231606][ T7532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.841,pid=7532,uid=0 [ 410.275300][ T7532] Memory cgroup out of memory: Killed process 7532 (syz.6.841) total-vm:151416kB, anon-rss:2052kB, file-rss:0kB, shmem-rss:41112kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 411.408476][ T7677] syz.5.879 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 411.436355][ T7677] CPU: 1 PID: 7677 Comm: syz.5.879 Not tainted syzkaller #0 [ 411.443739][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.453857][ T7677] Call Trace: [ 411.457178][ T7677] [ 411.460155][ T7677] dump_stack_lvl+0x188/0x24e [ 411.464890][ T7677] ? ___ratelimit+0x14e/0x610 [ 411.469618][ T7677] ? show_regs_print_info+0x12/0x12 [ 411.474873][ T7677] ? load_image+0x410/0x410 [ 411.479469][ T7677] ? ___ratelimit+0x474/0x610 [ 411.484208][ T7677] ? radix_tree_cpu_dead+0x160/0x160 [ 411.489550][ T7677] dump_header+0xd8/0x820 [ 411.493949][ T7677] oom_kill_process+0x361/0x550 [ 411.498859][ T7677] out_of_memory+0xe25/0x1220 [ 411.503630][ T7677] ? print_unlock_imbalance_bug+0x160/0x160 [ 411.509573][ T7677] ? mutex_lock_nested+0x10/0x10 [ 411.514544][ T7677] ? unregister_oom_notifier+0x20/0x20 [ 411.520085][ T7677] mem_cgroup_out_of_memory+0x2c0/0x390 [ 411.525667][ T7677] ? mem_cgroup_oom_trylock+0x210/0x210 [ 411.531255][ T7677] ? do_raw_spin_unlock+0x11d/0x230 [ 411.536485][ T7677] try_charge_memcg+0xc9d/0x17c0 [ 411.541478][ T7677] ? percpu_ref_put+0x180/0x180 [ 411.546426][ T7677] ? get_mem_cgroup_from_mm+0x34/0x290 [ 411.551944][ T7677] charge_memcg+0x117/0x3b0 [ 411.556493][ T7677] ? __mem_cgroup_charge+0x80/0x80 [ 411.561640][ T7677] ? get_mem_cgroup_from_mm+0x34/0x290 [ 411.567129][ T7677] ? get_mem_cgroup_from_mm+0x34/0x290 [ 411.572619][ T7677] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 411.578198][ T7677] __mem_cgroup_charge+0x21/0x80 [ 411.583175][ T7677] shmem_add_to_page_cache+0x8d7/0x1c90 [ 411.588765][ T7677] ? __filemap_get_folio+0x10f/0xde0 [ 411.594092][ T7677] ? __filemap_get_folio+0x10f/0xde0 [ 411.599419][ T7677] ? put_page+0x270/0x270 [ 411.603786][ T7677] ? mark_lock+0x94/0x320 [ 411.608159][ T7677] shmem_get_folio_gfp+0x1663/0x35e0 [ 411.613504][ T7677] shmem_write_begin+0xee/0x3f0 [ 411.618391][ T7677] generic_perform_write+0x2fa/0x5c0 [ 411.623725][ T7677] ? generic_file_direct_write+0x330/0x330 [ 411.629608][ T7677] ? __file_remove_privs+0x5f0/0x5f0 [ 411.634942][ T7677] ? rwsem_write_trylock+0x135/0x1c0 [ 411.640281][ T7677] ? clear_nonspinnable+0x60/0x60 [ 411.645338][ T7677] ? generic_write_checks_count+0x363/0x440 [ 411.651299][ T7677] __generic_file_write_iter+0x148/0x2a0 [ 411.656973][ T7677] generic_file_write_iter+0xab/0x2e0 [ 411.662388][ T7677] __kernel_write_iter+0x298/0x690 [ 411.667538][ T7677] ? vfs_read+0x960/0x960 [ 411.671910][ T7677] ? _raw_spin_unlock+0x24/0x40 [ 411.676790][ T7677] ? generic_file_llseek_size+0x344/0x390 [ 411.682555][ T7677] ? iov_iter_bvec+0x4a/0x1f0 [ 411.687263][ T7677] dump_user_range+0x40a/0x840 [ 411.692075][ T7677] ? dump_skip+0x40/0x40 [ 411.696356][ T7677] ? dump_emit+0x74/0xe0 [ 411.700648][ T7677] ? dump_emit+0xa2/0xe0 [ 411.704920][ T7677] ? elf_core_dump+0x2aa9/0x3630 [ 411.709915][ T7677] elf_core_dump+0x30ca/0x3630 [ 411.714732][ T7677] ? load_elf_binary+0x2820/0x2820 [ 411.719881][ T7677] ? dump_vma_snapshot+0xaea/0xe40 [ 411.725028][ T7677] ? verify_lock_unused+0x140/0x140 [ 411.730267][ T7677] ? __lock_acquire+0x7c40/0x7c40 [ 411.735338][ T7677] ? mas_next_entry+0xe03/0xe90 [ 411.740251][ T7677] ? rcu_read_lock_any_held+0xb0/0x130 [ 411.745739][ T7677] ? 0xffffffffff600000 [ 411.749923][ T7677] ? getname_kernel+0x142/0x2f0 [ 411.754811][ T7677] do_coredump+0x16c1/0x2480 [ 411.759458][ T7677] ? nfs_stat_to_errno+0x170/0x170 [ 411.764624][ T7677] ? lock_chain_count+0x20/0x20 [ 411.769522][ T7677] ? _raw_spin_unlock_irq+0x1f/0x40 [ 411.774759][ T7677] ? lockdep_hardirqs_on+0x94/0x140 [ 411.779989][ T7677] get_signal+0x1093/0x1340 [ 411.784539][ T7677] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 411.790569][ T7677] arch_do_signal_or_restart+0xc4/0x1310 [ 411.796247][ T7677] ? __send_signal_locked+0xb38/0xde0 [ 411.801656][ T7677] ? get_sigframe_size+0x10/0x10 [ 411.806631][ T7677] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 411.812655][ T7677] ? do_user_addr_fault+0x3a5/0xb20 [ 411.817891][ T7677] ? exit_to_user_mode_loop+0x3b/0x110 [ 411.823393][ T7677] exit_to_user_mode_loop+0x70/0x110 [ 411.828721][ T7677] exit_to_user_mode_prepare+0xee/0x180 [ 411.834305][ T7677] irqentry_exit_to_user_mode+0x5/0x30 [ 411.839802][ T7677] exc_page_fault+0x88/0x100 [ 411.844426][ T7677] asm_exc_page_fault+0x22/0x30 [ 411.849311][ T7677] RIP: 0033:0x7fec8499e159 [ 411.853760][ T7677] Code: Unable to access opcode bytes at 0x7fec8499e12f. [ 411.860799][ T7677] RSP: 002b:00007fec85807fd8 EFLAGS: 00010246 [ 411.866897][ T7677] RAX: 0000000000000000 RBX: 00007fec84c25fa0 RCX: 00007fec8499e159 [ 411.874902][ T7677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.882924][ T7677] RBP: 00007fec84a3503b R08: 0000000000000000 R09: 0000000000000000 [ 411.890946][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.898940][ T7677] R13: 00007fec84c26038 R14: 00007fec84c25fa0 R15: 00007ffc5ab07fd8 [ 411.907042][ T7677] [ 411.966179][ T7677] memory: usage 307188kB, limit 307200kB, failcnt 51 [ 411.972973][ T7677] memory+swap: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 412.001399][ T7677] kmem: usage 2096kB, limit 9007199254740988kB, failcnt 0 [ 412.009339][ T7677] Memory cgroup stats for /syz5: [ 412.009538][ T7677] anon 8654848 [ 412.009538][ T7677] file 303759360 [ 412.009538][ T7677] kernel 2146304 [ 412.009538][ T7677] kernel_stack 98304 [ 412.009538][ T7677] pagetables 491520 [ 412.009538][ T7677] sec_pagetables 0 [ 412.009538][ T7677] percpu 5920 [ 412.009538][ T7677] sock 0 [ 412.009538][ T7677] vmalloc 45056 [ 412.009538][ T7677] shmem 303759360 [ 412.009538][ T7677] zswap 0 [ 412.009538][ T7677] zswapped 0 [ 412.009538][ T7677] file_mapped 153968640 [ 412.009538][ T7677] file_dirty 0 [ 412.009538][ T7677] file_writeback 0 [ 412.009538][ T7677] swapcached 0 [ 412.009538][ T7677] anon_thp 0 [ 412.009538][ T7677] file_thp 0 [ 412.009538][ T7677] shmem_thp 0 [ 412.009538][ T7677] inactive_anon 0 [ 412.009538][ T7677] active_anon 312414208 [ 412.009538][ T7677] inactive_file 0 [ 412.009538][ T7677] active_file 0 [ 412.009538][ T7677] unevictable 0 [ 412.009538][ T7677] slab_reclaimable 956128 [ 412.009538][ T7677] slab_unreclaimable 485408 [ 412.161589][ T7677] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.811,pid=7417,uid=0 [ 412.208347][ T7677] Memory cgroup out of memory: Killed process 7417 (syz.5.811) total-vm:151416kB, anon-rss:2052kB, file-rss:0kB, shmem-rss:99720kB, UID:0 pgtables:220kB oom_score_adj:1000 [ 412.494659][ T7628] tipc: Disabling bearer [ 412.796239][ T5873] tipc: Node number set to 300817715 [ 412.805978][ T7671] netlink: 24 bytes leftover after parsing attributes in process `syz.6.878'. [ 412.815940][ T7672] netlink: 64 bytes leftover after parsing attributes in process `syz.6.878'. [ 413.260822][ T7702] loop3: detected capacity change from 0 to 512 [ 413.352746][ T7702] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.886: invalid block [ 413.459356][ T7702] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.886: invalid indirect mapped block 1024 (level 0) [ 413.497958][ T7702] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.886: bg 0: block 35: padding at end of block bitmap is not set [ 413.548536][ T7702] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 413.577959][ T7702] EXT4-fs (loop3): 1 truncate cleaned up [ 413.606316][ T7702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 414.727187][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 415.122543][ T7713] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.883'. [ 415.196358][ T7713] netlink: zone id is out of range [ 415.228855][ T7713] netlink: del zone limit has 4 unknown bytes [ 417.945697][ T7754] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 418.924539][ T7759] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.902'. [ 418.995548][ T7759] netlink: zone id is out of range [ 419.023521][ T7759] netlink: del zone limit has 4 unknown bytes [ 420.065900][ T7769] FAULT_INJECTION: forcing a failure. [ 420.065900][ T7769] name failslab, interval 1, probability 0, space 0, times 0 [ 420.196246][ T7769] CPU: 0 PID: 7769 Comm: syz.4.904 Not tainted syzkaller #0 [ 420.203629][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.213737][ T7769] Call Trace: [ 420.217070][ T7769] [ 420.220048][ T7769] dump_stack_lvl+0x188/0x24e [ 420.224839][ T7769] ? show_regs_print_info+0x12/0x12 [ 420.230153][ T7769] ? load_image+0x410/0x410 [ 420.234747][ T7769] ? __might_sleep+0xd0/0xd0 [ 420.239400][ T7769] ? __lock_acquire+0x7c40/0x7c40 [ 420.244503][ T7769] should_fail_ex+0x390/0x4c0 [ 420.249252][ T7769] should_failslab+0x5/0x20 [ 420.253859][ T7769] slab_pre_alloc_hook+0x59/0x300 [ 420.258947][ T7769] kmem_cache_alloc_lru+0x49/0x2e0 [ 420.264119][ T7769] ? __d_alloc+0x2e/0x6e0 [ 420.268511][ T7769] __d_alloc+0x2e/0x6e0 [ 420.272729][ T7769] ? d_alloc_pseudo+0xe/0x70 [ 420.277378][ T7769] d_alloc_pseudo+0x19/0x70 [ 420.281947][ T7769] alloc_file_pseudo+0xe0/0x200 [ 420.286864][ T7769] ? alloc_empty_file_noaccount+0x80/0x80 [ 420.292653][ T7769] ? alloc_fd+0x590/0x640 [ 420.297055][ T7769] sock_alloc_file+0xb3/0x240 [ 420.301843][ T7769] __sys_socket+0x12d/0x190 [ 420.306417][ T7769] __x64_sys_socket+0x76/0x80 [ 420.311163][ T7769] do_syscall_64+0x4c/0xa0 [ 420.315681][ T7769] ? clear_bhb_loop+0x60/0xb0 [ 420.320429][ T7769] ? clear_bhb_loop+0x60/0xb0 [ 420.325171][ T7769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.331145][ T7769] RIP: 0033:0x7f7f1f79e159 [ 420.335620][ T7769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.355287][ T7769] RSP: 002b:00007f7f206fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 420.363798][ T7769] RAX: ffffffffffffffda RBX: 00007f7f1fa25fa0 RCX: 00007f7f1f79e159 [ 420.371828][ T7769] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000040000000015 [ 420.379864][ T7769] RBP: 00007f7f1f83503b R08: 0000000000000000 R09: 0000000000000000 [ 420.387894][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.395924][ T7769] R13: 00007f7f1fa26038 R14: 00007f7f1fa25fa0 R15: 00007fff3873a728 [ 420.403975][ T7769] [ 421.658089][ T7791] loop6: detected capacity change from 0 to 512 [ 421.695934][ T7791] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.783803][ T7791] ext4: Unknown parameter 'fscontext' [ 423.133554][ T7814] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 425.418699][ T7849] loop2: detected capacity change from 0 to 512 [ 425.429418][ T7847] netlink: 36 bytes leftover after parsing attributes in process `syz.3.928'. [ 425.447133][ T7848] FAULT_INJECTION: forcing a failure. [ 425.447133][ T7848] name failslab, interval 1, probability 0, space 0, times 0 [ 425.472073][ T7849] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.492454][ T7849] ext4: Unknown parameter 'fscontext' [ 425.499601][ T7848] CPU: 0 PID: 7848 Comm: syz.5.925 Not tainted syzkaller #0 [ 425.506970][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.517080][ T7848] Call Trace: [ 425.520405][ T7848] [ 425.523382][ T7848] dump_stack_lvl+0x188/0x24e [ 425.528139][ T7848] ? show_regs_print_info+0x12/0x12 [ 425.533411][ T7848] ? load_image+0x410/0x410 [ 425.538031][ T7848] ? __might_sleep+0xd0/0xd0 [ 425.542684][ T7848] ? __lock_acquire+0x7c40/0x7c40 [ 425.547783][ T7848] should_fail_ex+0x390/0x4c0 [ 425.552560][ T7848] should_failslab+0x5/0x20 [ 425.557116][ T7848] slab_pre_alloc_hook+0x59/0x300 [ 425.562208][ T7848] kmem_cache_alloc+0x56/0x2f0 [ 425.567026][ T7848] ? copy_signal+0x50/0x640 [ 425.571591][ T7848] copy_signal+0x50/0x640 [ 425.575985][ T7848] copy_process+0x18f9/0x4070 [ 425.580763][ T7848] ? plist_add+0x3d7/0x490 [ 425.585266][ T7848] ? copy_process+0x974/0x4070 [ 425.590097][ T7848] ? futex_wait+0x4a3/0x5c0 [ 425.594660][ T7848] ? idle_dummy+0x10/0x10 [ 425.599076][ T7848] kernel_clone+0x24b/0x900 [ 425.603641][ T7848] ? create_io_thread+0x170/0x170 [ 425.608730][ T7848] ? do_futex+0x310/0x320 [ 425.613121][ T7848] __x64_sys_clone+0x1a7/0x220 [ 425.617952][ T7848] ? __ia32_sys_vfork+0x140/0x140 [ 425.623042][ T7848] ? lock_chain_count+0x20/0x20 [ 425.627961][ T7848] ? lockdep_hardirqs_on+0x94/0x140 [ 425.633214][ T7848] do_syscall_64+0x4c/0xa0 [ 425.637702][ T7848] ? clear_bhb_loop+0x60/0xb0 [ 425.642488][ T7848] ? clear_bhb_loop+0x60/0xb0 [ 425.647272][ T7848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.653270][ T7848] RIP: 0033:0x7fec8499e159 [ 425.657776][ T7848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.677438][ T7848] RSP: 002b:00007fec85807fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 425.685917][ T7848] RAX: ffffffffffffffda RBX: 00007fec84c25fa0 RCX: 00007fec8499e159 [ 425.693951][ T7848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 425.701982][ T7848] RBP: 00007fec84a3503b R08: 0000000000000000 R09: 0000000000000000 [ 425.710010][ T7848] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 425.718037][ T7848] R13: 00007fec84c26038 R14: 00007fec84c25fa0 R15: 00007ffc5ab07fd8 [ 425.726079][ T7848] [ 425.757954][ T7852] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 425.951466][ T7705] blk_print_req_error: 31 callbacks suppressed [ 425.951485][ T7705] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 426.113665][ T7861] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 429.838273][ T7910] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 429.961118][ T7908] loop3: detected capacity change from 0 to 512 [ 430.064119][ T7908] EXT4-fs: Ignoring removed mblk_io_submit option [ 430.582339][ T7908] ext4: Unknown parameter 'fscontext' [ 432.828440][ T7960] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 434.040153][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.962'. [ 434.053830][ T7977] netlink: 64 bytes leftover after parsing attributes in process `syz.4.962'. [ 436.156081][ T7991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.968'. [ 436.338351][ T7993] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 439.191190][ T8019] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 439.829742][ T8017] loop4: detected capacity change from 0 to 1024 [ 439.888965][ T8017] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 439.978516][ T8017] EXT4-fs (loop4): barriers disabled [ 440.028711][ T8017] JBD2: no valid journal superblock found [ 440.034527][ T8017] EXT4-fs (loop4): error loading journal [ 440.491440][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.497864][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.583187][ T8027] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.975'. [ 440.687828][ T8027] netlink: zone id is out of range [ 440.726723][ T8027] netlink: zone id is out of range [ 440.773339][ T8027] netlink: del zone limit has 4 unknown bytes [ 441.303119][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz.6.976'. [ 441.316348][ T8039] netlink: 64 bytes leftover after parsing attributes in process `syz.6.976'. [ 443.406222][ T8051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.982'. [ 443.560439][ T8051] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 444.908357][ T8078] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.987'. [ 444.964219][ T8078] netlink: zone id is out of range [ 444.997458][ T8078] netlink: zone id is out of range [ 445.025103][ T8078] netlink: del zone limit has 4 unknown bytes [ 446.060945][ T8095] loop2: detected capacity change from 0 to 128 [ 446.075275][ T8092] process 'syz.5.989' launched '/dev/fd/4' with NULL argv: empty string added [ 446.197658][ T8095] FAT-fs (loop2): bogus sectors per cluster 7 [ 446.267515][ T8095] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 446.380919][ T8095] FAT-fs (loop2): Can't find a valid FAT filesystem [ 446.936671][ T8095] loop2: detected capacity change from 0 to 512 [ 447.141111][ T8095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 447.376381][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 447.825884][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 447.935253][ T8115] device veth0 entered promiscuous mode [ 449.272062][ T8110] device veth0 left promiscuous mode [ 449.596646][ T8145] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1000'. [ 449.684255][ T8145] netlink: zone id is out of range [ 449.702968][ T8145] netlink: zone id is out of range [ 449.771516][ T8145] netlink: del zone limit has 4 unknown bytes [ 450.845677][ T8167] loop4: detected capacity change from 0 to 128 [ 450.970523][ T8167] FAT-fs (loop4): bogus sectors per cluster 7 [ 451.017463][ T8167] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 451.092163][ T8167] FAT-fs (loop4): Can't find a valid FAT filesystem [ 451.497886][ T8167] loop4: detected capacity change from 0 to 512 [ 452.150745][ T8167] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 452.523996][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 452.933587][ T8199] device veth0 entered promiscuous mode [ 455.349250][ T8196] device veth0 left promiscuous mode [ 461.518438][ T8302] loop6: detected capacity change from 0 to 512 [ 463.107802][ T8333] loop4: detected capacity change from 0 to 512 [ 463.137023][ T8331] loop6: detected capacity change from 0 to 512 [ 463.184359][ T8333] EXT4-fs: Ignoring removed nobh option [ 463.304789][ T8333] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 463.387221][ T8333] EXT4-fs (loop4): 1 truncate cleaned up [ 463.392949][ T8333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 463.558267][ T8331] EXT4-fs (loop6): 1 orphan inode deleted [ 463.564099][ T8331] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 463.596333][ T4323] __quota_error: 22 callbacks suppressed [ 463.596354][ T4323] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 463.666862][ T4323] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1 [ 463.698695][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 463.714353][ T8331] ext4 filesystem being mounted at /68/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.947219][ T8344] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1041'. [ 464.018463][ T8344] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 464.893800][ T6566] EXT4-fs (loop6): unmounting filesystem. [ 465.775679][ T8366] loop3: detected capacity change from 0 to 1024 [ 465.872606][ T8368] loop2: detected capacity change from 0 to 512 [ 465.996441][ T8372] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1045'. [ 467.661095][ T8366] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 467.819998][ T8366] EXT4-fs (loop3): barriers disabled [ 467.902969][ T8366] JBD2: no valid journal superblock found [ 467.908905][ T8366] EXT4-fs (loop3): error loading journal [ 468.204588][ T8383] loop5: detected capacity change from 0 to 512 [ 468.599331][ T8383] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.396302][ T8383] ext4: Unknown parameter 'fscontext' [ 472.092831][ T8417] loop4: detected capacity change from 0 to 512 [ 472.246654][ T8417] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 472.500362][ T8429] loop5: detected capacity change from 0 to 2048 [ 472.567140][ T8417] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 472.647293][ T8417] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1061: invalid indirect mapped block 2683928664 (level 1) [ 472.737538][ T8433] loop2: detected capacity change from 0 to 512 [ 472.748765][ T8434] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1062'. [ 472.762582][ T8417] EXT4-fs (loop4): 1 truncate cleaned up [ 472.801272][ T8417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 472.828864][ T8434] netlink: zone id is out of range [ 472.891887][ T8434] netlink: zone id is out of range [ 472.936262][ T8426] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 472.992170][ T8434] netlink: del zone limit has 4 unknown bytes [ 473.001161][ T8417] EXT4-fs (loop4): shut down requested (2) [ 473.381071][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 474.409597][ T8459] loop3: detected capacity change from 0 to 512 [ 474.754762][ T8462] loop4: detected capacity change from 0 to 512 [ 474.925311][ T8462] EXT4-fs: Ignoring removed mblk_io_submit option [ 475.075225][ T8462] ext4: Unknown parameter 'fscontext' [ 475.144175][ T8459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 476.768931][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 477.025244][ T8499] loop4: detected capacity change from 0 to 512 [ 477.070717][ T8499] EXT4-fs: Ignoring removed oldalloc option [ 477.164099][ T8502] loop6: detected capacity change from 0 to 512 [ 477.190925][ T8499] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 477.349362][ T8506] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1080'. [ 477.549392][ T8506] netlink: zone id is out of range [ 477.554646][ T8506] netlink: zone id is out of range [ 478.196736][ T8506] netlink: del zone limit has 4 unknown bytes [ 478.291956][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 478.359021][ T8516] loop5: detected capacity change from 0 to 128 [ 478.977367][ T8516] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 479.190575][ T8516] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 479.604368][ T8531] loop4: detected capacity change from 0 to 512 [ 479.672685][ T8531] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.750105][ T8531] ext4: Unknown parameter 'fscontext' [ 479.861979][ T7705] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.299078][ T8535] loop3: detected capacity change from 0 to 512 [ 480.378647][ T5906] EXT4-fs (loop5): unmounting filesystem. [ 480.617768][ T8543] loop6: detected capacity change from 0 to 1024 [ 480.692313][ T8543] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 480.814851][ T8543] EXT4-fs (loop6): barriers disabled [ 480.837143][ T8535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 480.887232][ T8543] JBD2: no valid journal superblock found [ 480.916324][ T8543] EXT4-fs (loop6): error loading journal [ 481.361823][ T8550] loop4: detected capacity change from 0 to 512 [ 481.374413][ T8546] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1093'. [ 481.651982][ T8550] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 481.738043][ T8550] System zones: 0-2, 18-18, 34-35 [ 481.753075][ T8552] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 481.813576][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 481.824365][ T8550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 481.941777][ T8550] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.110249][ T8557] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 483.197942][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 483.421590][ T8562] loop3: detected capacity change from 0 to 512 [ 485.897806][ T8577] FAULT_INJECTION: forcing a failure. [ 485.897806][ T8577] name failslab, interval 1, probability 0, space 0, times 0 [ 486.007537][ T8577] CPU: 1 PID: 8577 Comm: syz.2.1103 Not tainted syzkaller #0 [ 486.015009][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.025113][ T8577] Call Trace: [ 486.028476][ T8577] [ 486.031453][ T8577] dump_stack_lvl+0x188/0x24e [ 486.036195][ T8577] ? show_regs_print_info+0x12/0x12 [ 486.041459][ T8577] ? load_image+0x410/0x410 [ 486.046038][ T8577] ? __might_sleep+0xd0/0xd0 [ 486.050710][ T8577] ? __lock_acquire+0x7c40/0x7c40 [ 486.055793][ T8577] should_fail_ex+0x390/0x4c0 [ 486.060536][ T8577] should_failslab+0x5/0x20 [ 486.065089][ T8577] slab_pre_alloc_hook+0x59/0x300 [ 486.070189][ T8577] kmem_cache_alloc+0x56/0x2f0 [ 486.074993][ T8577] ? security_file_alloc+0x30/0x110 [ 486.080302][ T8577] security_file_alloc+0x30/0x110 [ 486.085389][ T8577] __alloc_file+0xc2/0x230 [ 486.089866][ T8577] alloc_empty_file+0x90/0x180 [ 486.094675][ T8577] alloc_file+0x5b/0x5f0 [ 486.098960][ T8577] alloc_file_pseudo+0x180/0x200 [ 486.103950][ T8577] ? alloc_empty_file_noaccount+0x80/0x80 [ 486.109734][ T8577] ? _raw_spin_unlock+0x24/0x40 [ 486.114648][ T8577] anon_inode_getfile+0xc1/0x1a0 [ 486.119654][ T8577] __pidfd_prepare+0x7e/0x140 [ 486.124392][ T8577] __se_sys_pidfd_open+0xd2/0x240 [ 486.129485][ T8577] ? __x64_sys_pidfd_open+0x60/0x60 [ 486.134740][ T8577] ? lockdep_hardirqs_on+0x94/0x140 [ 486.139995][ T8577] do_syscall_64+0x4c/0xa0 [ 486.144487][ T8577] ? clear_bhb_loop+0x60/0xb0 [ 486.149235][ T8577] ? clear_bhb_loop+0x60/0xb0 [ 486.153985][ T8577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.159954][ T8577] RIP: 0033:0x7f599a99e159 [ 486.164423][ T8577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.184098][ T8577] RSP: 002b:00007f599b788018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 486.192584][ T8577] RAX: ffffffffffffffda RBX: 00007f599ac25fa0 RCX: 00007f599a99e159 [ 486.200610][ T8577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000002d8 [ 486.208644][ T8577] RBP: 00007f599aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 486.216665][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.224673][ T8577] R13: 00007f599ac26038 R14: 00007f599ac25fa0 R15: 00007ffd4c6ae3b8 [ 486.232705][ T8577] [ 486.681488][ T8586] loop3: detected capacity change from 0 to 1024 [ 486.776902][ T8586] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 486.877845][ T8586] EXT4-fs (loop3): barriers disabled [ 486.914796][ T8586] JBD2: no valid journal superblock found [ 486.943811][ T8586] EXT4-fs (loop3): error loading journal [ 487.751425][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1109'. [ 489.994944][ T8597] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 490.399836][ T8617] loop4: detected capacity change from 0 to 128 [ 490.448641][ T8617] FAT-fs (loop4): bogus sectors per cluster 7 [ 490.454801][ T8617] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 490.476184][ T8617] FAT-fs (loop4): Can't find a valid FAT filesystem [ 490.491819][ T8616] loop5: detected capacity change from 0 to 512 [ 490.546771][ T7705] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.684588][ T8617] loop4: detected capacity change from 0 to 512 [ 490.720375][ T7705] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.948515][ T8625] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 491.702527][ T8617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 491.980282][ T8629] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1120'. [ 492.031444][ T8629] netlink: zone id is out of range [ 492.046346][ T8629] netlink: zone id is out of range [ 492.073577][ T8629] netlink: del zone limit has 4 unknown bytes [ 492.074870][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 492.281193][ T8633] loop4: detected capacity change from 0 to 1024 [ 492.320235][ T8633] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 492.386898][ T8633] EXT4-fs (loop4): barriers disabled [ 492.392302][ T8633] JBD2: no valid journal superblock found [ 492.445129][ T8633] EXT4-fs (loop4): error loading journal [ 494.097489][ T8651] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1128'. [ 494.271912][ T8651] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 494.648970][ T8661] loop2: detected capacity change from 0 to 128 [ 494.744109][ T8662] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 495.509215][ T8661] FAT-fs (loop2): bogus sectors per cluster 7 [ 495.516288][ T8661] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 495.525654][ T8661] FAT-fs (loop2): Can't find a valid FAT filesystem [ 495.739446][ T8665] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1134'. [ 495.772387][ T8661] loop2: detected capacity change from 0 to 512 [ 495.786361][ T8665] netlink: zone id is out of range [ 495.791605][ T8665] netlink: zone id is out of range [ 495.844782][ T8667] loop6: detected capacity change from 0 to 512 [ 495.870374][ T8665] netlink: del zone limit has 4 unknown bytes [ 496.260549][ T8661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 496.978479][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 498.751367][ T8697] loop6: detected capacity change from 0 to 512 [ 498.847046][ T8697] EXT4-fs: Ignoring removed mblk_io_submit option [ 498.853712][ T8697] ext4: Unknown parameter 'fscontext' [ 500.004721][ T8709] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 500.969278][ T8719] loop6: detected capacity change from 0 to 128 [ 500.999740][ T8720] loop5: detected capacity change from 0 to 512 [ 501.022513][ T8719] FAT-fs (loop6): bogus sectors per cluster 7 [ 501.075359][ T8719] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 501.151267][ T8719] FAT-fs (loop6): Can't find a valid FAT filesystem [ 501.541740][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.552553][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.942817][ T8719] loop6: detected capacity change from 0 to 512 [ 502.486630][ T8719] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 502.849067][ T6566] EXT4-fs (loop6): unmounting filesystem. [ 505.190060][ T4317] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 505.237593][ T4317] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 505.684754][ T8763] fido_id[8763]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 505.975352][ T8774] loop6: detected capacity change from 0 to 512 [ 506.435850][ T8774] EXT4-fs: Ignoring removed oldalloc option [ 507.241706][ T8774] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 507.617915][ T6566] EXT4-fs (loop6): unmounting filesystem. [ 508.768691][ T8794] loop6: detected capacity change from 0 to 512 [ 508.884965][ T8794] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 509.188060][ T8794] EXT4-fs (loop6): 1 truncate cleaned up [ 509.228497][ T8794] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 509.536768][ T6566] EXT4-fs (loop6): unmounting filesystem. [ 510.674167][ T8820] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1177'. [ 512.634727][ T8820] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 513.780714][ T8844] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 518.791545][ T8876] syz.5.1190 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 518.802463][ T8876] CPU: 0 PID: 8876 Comm: syz.5.1190 Not tainted syzkaller #0 [ 518.809900][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.820013][ T8876] Call Trace: [ 518.823335][ T8876] [ 518.826303][ T8876] dump_stack_lvl+0x188/0x24e [ 518.831049][ T8876] ? ___ratelimit+0x14e/0x610 [ 518.835829][ T8876] ? show_regs_print_info+0x12/0x12 [ 518.841105][ T8876] ? load_image+0x410/0x410 [ 518.845693][ T8876] ? ___ratelimit+0x474/0x610 [ 518.850412][ T8876] ? radix_tree_cpu_dead+0x160/0x160 [ 518.855731][ T8876] dump_header+0xd8/0x820 [ 518.860097][ T8876] oom_kill_process+0x361/0x550 [ 518.864979][ T8876] out_of_memory+0xe25/0x1220 [ 518.869683][ T8876] ? print_unlock_imbalance_bug+0x160/0x160 [ 518.875608][ T8876] ? mutex_lock_nested+0x10/0x10 [ 518.880573][ T8876] ? unregister_oom_notifier+0x20/0x20 [ 518.886069][ T8876] mem_cgroup_out_of_memory+0x2c0/0x390 [ 518.891655][ T8876] ? mem_cgroup_oom_trylock+0x210/0x210 [ 518.897241][ T8876] ? do_raw_spin_unlock+0x11d/0x230 [ 518.902470][ T8876] try_charge_memcg+0xc9d/0x17c0 [ 518.907459][ T8876] ? percpu_ref_put+0x180/0x180 [ 518.912355][ T8876] ? get_mem_cgroup_from_mm+0x34/0x290 [ 518.917847][ T8876] charge_memcg+0x117/0x3b0 [ 518.922384][ T8876] ? __mem_cgroup_charge+0x80/0x80 [ 518.927521][ T8876] ? get_mem_cgroup_from_mm+0x34/0x290 [ 518.933003][ T8876] ? get_mem_cgroup_from_mm+0x34/0x290 [ 518.938497][ T8876] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 518.944073][ T8876] __mem_cgroup_charge+0x21/0x80 [ 518.949047][ T8876] shmem_add_to_page_cache+0x8d7/0x1c90 [ 518.954624][ T8876] ? __filemap_get_folio+0x10f/0xde0 [ 518.959946][ T8876] ? __filemap_get_folio+0x10f/0xde0 [ 518.965268][ T8876] ? put_page+0x270/0x270 [ 518.969629][ T8876] ? mark_lock+0x94/0x320 [ 518.973992][ T8876] shmem_get_folio_gfp+0x1663/0x35e0 [ 518.979339][ T8876] shmem_write_begin+0xee/0x3f0 [ 518.984227][ T8876] generic_perform_write+0x2fa/0x5c0 [ 518.989559][ T8876] ? generic_file_direct_write+0x330/0x330 [ 518.995401][ T8876] ? __file_remove_privs+0x5f0/0x5f0 [ 519.000720][ T8876] ? rwsem_write_trylock+0x135/0x1c0 [ 519.006046][ T8876] ? clear_nonspinnable+0x60/0x60 [ 519.011102][ T8876] ? generic_write_checks_count+0x363/0x440 [ 519.017026][ T8876] __generic_file_write_iter+0x148/0x2a0 [ 519.022702][ T8876] generic_file_write_iter+0xab/0x2e0 [ 519.028113][ T8876] __kernel_write_iter+0x298/0x690 [ 519.033270][ T8876] ? vfs_read+0x960/0x960 [ 519.037650][ T8876] ? _raw_spin_unlock+0x24/0x40 [ 519.042536][ T8876] ? generic_file_llseek_size+0x344/0x390 [ 519.048294][ T8876] ? iov_iter_bvec+0x4a/0x1f0 [ 519.053039][ T8876] dump_user_range+0x40a/0x840 [ 519.057874][ T8876] ? dump_skip+0x40/0x40 [ 519.062147][ T8876] ? dump_emit+0x74/0xe0 [ 519.066448][ T8876] ? dump_emit+0xa2/0xe0 [ 519.070724][ T8876] ? elf_core_dump+0x2aa9/0x3630 [ 519.075705][ T8876] elf_core_dump+0x30ca/0x3630 [ 519.080516][ T8876] ? load_elf_binary+0x2820/0x2820 [ 519.085659][ T8876] ? dump_vma_snapshot+0xaea/0xe40 [ 519.090820][ T8876] ? verify_lock_unused+0x140/0x140 [ 519.096063][ T8876] ? __lock_acquire+0x7c40/0x7c40 [ 519.101125][ T8876] ? mas_next_entry+0xe03/0xe90 [ 519.106038][ T8876] ? rcu_read_lock_any_held+0xb0/0x130 [ 519.111529][ T8876] ? 0xffffffffff600000 [ 519.115703][ T8876] ? do_raw_spin_unlock+0x11d/0x230 [ 519.120953][ T8876] do_coredump+0x16c1/0x2480 [ 519.125590][ T8876] ? nfs_stat_to_errno+0x170/0x170 [ 519.130750][ T8876] ? lock_chain_count+0x20/0x20 [ 519.135639][ T8876] ? _raw_spin_unlock_irq+0x1f/0x40 [ 519.140894][ T8876] ? lockdep_hardirqs_on+0x94/0x140 [ 519.146132][ T8876] get_signal+0x1093/0x1340 [ 519.150682][ T8876] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 519.156726][ T8876] arch_do_signal_or_restart+0xc4/0x1310 [ 519.162426][ T8876] ? __send_signal_locked+0xb38/0xde0 [ 519.167834][ T8876] ? get_sigframe_size+0x10/0x10 [ 519.172803][ T8876] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 519.178826][ T8876] ? do_user_addr_fault+0x3a5/0xb20 [ 519.184083][ T8876] ? exit_to_user_mode_loop+0x3b/0x110 [ 519.189592][ T8876] exit_to_user_mode_loop+0x70/0x110 [ 519.194911][ T8876] exit_to_user_mode_prepare+0xee/0x180 [ 519.200490][ T8876] irqentry_exit_to_user_mode+0x5/0x30 [ 519.205992][ T8876] exc_page_fault+0x88/0x100 [ 519.210630][ T8876] asm_exc_page_fault+0x22/0x30 [ 519.215507][ T8876] RIP: 0033:0x7fec8499e161 [ 519.219944][ T8876] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 519.239600][ T8876] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 519.245703][ T8876] RAX: 0000000000000000 RBX: 00007fec84c25fa0 RCX: 00007fec8499e159 [ 519.253701][ T8876] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 519.261698][ T8876] RBP: 00007fec84a3503b R08: 0000000000000000 R09: 0000000000000000 [ 519.269689][ T8876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 519.277701][ T8876] R13: 00007fec84c26038 R14: 00007fec84c25fa0 R15: 00007ffc5ab07fd8 [ 519.285752][ T8876] [ 519.288879][ T8876] memory: usage 307200kB, limit 307200kB, failcnt 2543 [ 519.295771][ T8876] memory+swap: usage 312540kB, limit 9007199254740988kB, failcnt 0 [ 519.303762][ T8876] kmem: usage 2708kB, limit 9007199254740988kB, failcnt 0 [ 519.310971][ T8876] Memory cgroup stats for /syz5: [ 519.311197][ T8876] anon 475136 [ 519.311197][ T8876] file 311324672 [ 519.311197][ T8876] kernel 2772992 [ 519.311197][ T8876] kernel_stack 262144 [ 519.311197][ T8876] pagetables 663552 [ 519.311197][ T8876] sec_pagetables 0 [ 519.311197][ T8876] percpu 7104 [ 519.311197][ T8876] sock 0 [ 519.311197][ T8876] vmalloc 45056 [ 519.311197][ T8876] shmem 311324672 [ 519.311197][ T8876] zswap 0 [ 519.311197][ T8876] zswapped 0 [ 519.311197][ T8876] file_mapped 127176704 [ 519.311197][ T8876] file_dirty 0 [ 519.311197][ T8876] file_writeback 0 [ 519.311197][ T8876] swapcached 12283904 [ 519.311197][ T8876] anon_thp 0 [ 519.311197][ T8876] file_thp 0 [ 519.311197][ T8876] shmem_thp 0 [ 519.311197][ T8876] inactive_anon 171290624 [ 519.311197][ T8876] active_anon 140509184 [ 519.311197][ T8876] inactive_file 0 [ 519.311197][ T8876] active_file 0 [ 519.311197][ T8876] unevictable 0 [ 519.311197][ T8876] slab_reclaimable 1012296 [ 519.311197][ T8876] slab_unreclaimable 696264 [ 519.406488][ T8876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1190,pid=8876,uid=0 [ 519.421666][ T8876] Memory cgroup out of memory: Killed process 8876 (syz.5.1190) total-vm:102244kB, anon-rss:1428kB, file-rss:58416kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 519.573396][ T8886] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 519.797069][ T8894] loop6: detected capacity change from 0 to 1024 [ 519.844355][ T8894] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 519.862371][ T8885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1192'. [ 519.913988][ T8894] EXT4-fs (loop6): barriers disabled [ 519.942781][ T8894] JBD2: no valid journal superblock found [ 519.961713][ T8894] EXT4-fs (loop6): error loading journal [ 521.462582][ T8908] device syzkaller0 entered promiscuous mode [ 521.628308][ T8908] tipc: Started in network mode [ 521.633271][ T8908] tipc: Node identity 8e0a6e662a2, cluster identity 4711 [ 521.669002][ T8908] tipc: Enabled bearer , priority 0 [ 522.536424][ T8907] tipc: Resetting bearer [ 522.686423][ T8907] tipc: Disabling bearer [ 522.810092][ T8928] loop6: detected capacity change from 0 to 1024 [ 522.879086][ T4316] tipc: Node number set to 2754244198 [ 522.901503][ T8928] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 522.943206][ T8928] EXT4-fs (loop6): group descriptors corrupted! [ 523.330261][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1206'. [ 523.998823][ T8935] syz.5.1204 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 524.008782][ T8935] CPU: 0 PID: 8935 Comm: syz.5.1204 Not tainted syzkaller #0 [ 524.016285][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.026395][ T8935] Call Trace: [ 524.029700][ T8935] [ 524.032655][ T8935] dump_stack_lvl+0x188/0x24e [ 524.037373][ T8935] ? ___ratelimit+0x14e/0x610 [ 524.042074][ T8935] ? show_regs_print_info+0x12/0x12 [ 524.047317][ T8935] ? load_image+0x410/0x410 [ 524.051856][ T8935] ? ___ratelimit+0x474/0x610 [ 524.056564][ T8935] ? radix_tree_cpu_dead+0x160/0x160 [ 524.061884][ T8935] dump_header+0xd8/0x820 [ 524.066249][ T8935] oom_kill_process+0x361/0x550 [ 524.071136][ T8935] out_of_memory+0xe25/0x1220 [ 524.075845][ T8935] ? print_unlock_imbalance_bug+0x160/0x160 [ 524.081777][ T8935] ? mutex_lock_nested+0x10/0x10 [ 524.086745][ T8935] ? unregister_oom_notifier+0x20/0x20 [ 524.092238][ T8935] mem_cgroup_out_of_memory+0x2c0/0x390 [ 524.097856][ T8935] ? mem_cgroup_oom_trylock+0x210/0x210 [ 524.103446][ T8935] ? do_raw_spin_unlock+0x11d/0x230 [ 524.108674][ T8935] try_charge_memcg+0xc9d/0x17c0 [ 524.113668][ T8935] ? percpu_ref_put+0x180/0x180 [ 524.118592][ T8935] ? get_mem_cgroup_from_mm+0x34/0x290 [ 524.124113][ T8935] charge_memcg+0x117/0x3b0 [ 524.128654][ T8935] ? __mem_cgroup_charge+0x80/0x80 [ 524.133804][ T8935] ? get_mem_cgroup_from_mm+0x34/0x290 [ 524.139303][ T8935] ? get_mem_cgroup_from_mm+0x34/0x290 [ 524.144796][ T8935] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 524.150390][ T8935] __mem_cgroup_charge+0x21/0x80 [ 524.155364][ T8935] shmem_add_to_page_cache+0x8d7/0x1c90 [ 524.160945][ T8935] ? __filemap_get_folio+0x10f/0xde0 [ 524.166271][ T8935] ? __filemap_get_folio+0x10f/0xde0 [ 524.171595][ T8935] ? put_page+0x270/0x270 [ 524.175981][ T8935] ? mark_lock+0x94/0x320 [ 524.180392][ T8935] shmem_get_folio_gfp+0x1663/0x35e0 [ 524.185762][ T8935] shmem_write_begin+0xee/0x3f0 [ 524.190668][ T8935] generic_perform_write+0x2fa/0x5c0 [ 524.196010][ T8935] ? generic_file_direct_write+0x330/0x330 [ 524.201853][ T8935] ? __file_remove_privs+0x5f0/0x5f0 [ 524.207196][ T8935] ? rwsem_write_trylock+0x135/0x1c0 [ 524.212517][ T8935] ? clear_nonspinnable+0x60/0x60 [ 524.217576][ T8935] ? generic_write_checks_count+0x363/0x440 [ 524.223507][ T8935] __generic_file_write_iter+0x148/0x2a0 [ 524.229281][ T8935] generic_file_write_iter+0xab/0x2e0 [ 524.234688][ T8935] __kernel_write_iter+0x298/0x690 [ 524.239837][ T8935] ? vfs_read+0x960/0x960 [ 524.244217][ T8935] ? iov_iter_bvec+0x4a/0x1f0 [ 524.248948][ T8935] dump_user_range+0x40a/0x840 [ 524.253782][ T8935] ? dump_skip+0x40/0x40 [ 524.258082][ T8935] ? dump_emit+0x74/0xe0 [ 524.262392][ T8935] ? dump_emit+0xa2/0xe0 [ 524.266692][ T8935] ? elf_core_dump+0x2aa9/0x3630 [ 524.271665][ T8935] elf_core_dump+0x30ca/0x3630 [ 524.276471][ T8935] ? load_elf_binary+0x2820/0x2820 [ 524.281609][ T8935] ? dump_vma_snapshot+0xaea/0xe40 [ 524.286751][ T8935] ? verify_lock_unused+0x140/0x140 [ 524.291982][ T8935] ? __lock_acquire+0x7c40/0x7c40 [ 524.297042][ T8935] ? mas_next_entry+0xe03/0xe90 [ 524.301959][ T8935] ? rcu_read_lock_any_held+0xb0/0x130 [ 524.307459][ T8935] ? 0xffffffffff600000 [ 524.311648][ T8935] ? do_raw_spin_unlock+0x11d/0x230 [ 524.316895][ T8935] do_coredump+0x16c1/0x2480 [ 524.321535][ T8935] ? nfs_stat_to_errno+0x170/0x170 [ 524.326712][ T8935] ? lock_chain_count+0x20/0x20 [ 524.331603][ T8935] ? _raw_spin_unlock_irq+0x1f/0x40 [ 524.336842][ T8935] ? lockdep_hardirqs_on+0x94/0x140 [ 524.342094][ T8935] get_signal+0x1093/0x1340 [ 524.346669][ T8935] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 524.352698][ T8935] arch_do_signal_or_restart+0xc4/0x1310 [ 524.358385][ T8935] ? __send_signal_locked+0xb38/0xde0 [ 524.363802][ T8935] ? get_sigframe_size+0x10/0x10 [ 524.368792][ T8935] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 524.374854][ T8935] ? do_user_addr_fault+0x3a5/0xb20 [ 524.380116][ T8935] ? exit_to_user_mode_loop+0x3b/0x110 [ 524.385614][ T8935] exit_to_user_mode_loop+0x70/0x110 [ 524.390940][ T8935] exit_to_user_mode_prepare+0xee/0x180 [ 524.396528][ T8935] irqentry_exit_to_user_mode+0x5/0x30 [ 524.402011][ T8935] exc_page_fault+0x88/0x100 [ 524.406632][ T8935] asm_exc_page_fault+0x22/0x30 [ 524.411525][ T8935] RIP: 0033:0x7fec8499e161 [ 524.415964][ T8935] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 524.435597][ T8935] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 524.441689][ T8935] RAX: 0000000000000000 RBX: 00007fec84c25fa0 RCX: 00007fec8499e159 [ 524.449704][ T8935] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 524.457762][ T8935] RBP: 00007fec84a3503b R08: 0000000000000000 R09: 0000000000000000 [ 524.465764][ T8935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 524.473757][ T8935] R13: 00007fec84c26038 R14: 00007fec84c25fa0 R15: 00007ffc5ab07fd8 [ 524.481769][ T8935] [ 524.484901][ T8935] memory: usage 307200kB, limit 307200kB, failcnt 2682 [ 524.492294][ T8935] memory+swap: usage 312540kB, limit 9007199254740988kB, failcnt 0 [ 524.500270][ T8935] kmem: usage 2488kB, limit 9007199254740988kB, failcnt 0 [ 524.507448][ T8935] Memory cgroup stats for /syz5: [ 524.507625][ T8935] anon 688128 [ 524.507625][ T8935] file 311214080 [ 524.507625][ T8935] kernel 2547712 [ 524.507625][ T8935] kernel_stack 262144 [ 524.507625][ T8935] pagetables 552960 [ 524.507625][ T8935] sec_pagetables 0 [ 524.507625][ T8935] percpu 7104 [ 524.507625][ T8935] sock 0 [ 524.507625][ T8935] vmalloc 0 [ 524.507625][ T8935] shmem 311214080 [ 524.507625][ T8935] zswap 0 [ 524.507625][ T8935] zswapped 0 [ 524.507625][ T8935] file_mapped 0 [ 524.507625][ T8935] file_dirty 0 [ 524.507625][ T8935] file_writeback 0 [ 524.507625][ T8935] swapcached 12283904 [ 524.507625][ T8935] anon_thp 0 [ 524.507625][ T8935] file_thp 0 [ 524.507625][ T8935] shmem_thp 0 [ 524.507625][ T8935] inactive_anon 130764800 [ 524.507625][ T8935] active_anon 181260288 [ 524.507625][ T8935] inactive_file 0 [ 524.507625][ T8935] active_file 0 [ 524.507625][ T8935] unevictable 0 [ 524.507625][ T8935] slab_reclaimable 914184 [ 524.507625][ T8935] slab_unreclaimable 721008 [ 524.601634][ T8935] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1204,pid=8935,uid=0 [ 524.616725][ T8935] Memory cgroup out of memory: Killed process 8935 (syz.5.1204) total-vm:102376kB, anon-rss:1436kB, file-rss:54208kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 524.698682][ T8929] syz.5.1204 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 524.708630][ T8929] CPU: 1 PID: 8929 Comm: syz.5.1204 Not tainted syzkaller #0 [ 524.716038][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.726134][ T8929] Call Trace: [ 524.729449][ T8929] [ 524.732414][ T8929] dump_stack_lvl+0x188/0x24e [ 524.737143][ T8929] ? ___ratelimit+0x14e/0x610 [ 524.741858][ T8929] ? show_regs_print_info+0x12/0x12 [ 524.747111][ T8929] ? load_image+0x410/0x410 [ 524.751661][ T8929] ? ___ratelimit+0x474/0x610 [ 524.756411][ T8929] ? radix_tree_cpu_dead+0x160/0x160 [ 524.761738][ T8929] dump_header+0xd8/0x820 [ 524.766129][ T8929] oom_kill_process+0x361/0x550 [ 524.771027][ T8929] out_of_memory+0xe25/0x1220 [ 524.775750][ T8929] ? print_unlock_imbalance_bug+0x160/0x160 [ 524.781697][ T8929] ? mutex_lock_nested+0x10/0x10 [ 524.786677][ T8929] ? unregister_oom_notifier+0x20/0x20 [ 524.792184][ T8929] mem_cgroup_out_of_memory+0x2c0/0x390 [ 524.797776][ T8929] ? mem_cgroup_oom_trylock+0x210/0x210 [ 524.803393][ T8929] ? do_raw_spin_unlock+0x11d/0x230 [ 524.808635][ T8929] try_charge_memcg+0xc9d/0x17c0 [ 524.813637][ T8929] ? percpu_ref_put+0x180/0x180 [ 524.818567][ T8929] ? get_mem_cgroup_from_mm+0x34/0x290 [ 524.824080][ T8929] charge_memcg+0x117/0x3b0 [ 524.828630][ T8929] ? __mem_cgroup_charge+0x80/0x80 [ 524.833782][ T8929] ? get_mem_cgroup_from_mm+0x34/0x290 [ 524.839313][ T8929] ? get_mem_cgroup_from_mm+0x34/0x290 [ 524.844827][ T8929] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 524.850414][ T8929] __mem_cgroup_charge+0x21/0x80 [ 524.855395][ T8929] wp_page_copy+0x3d7/0x1660 [ 524.860036][ T8929] ? __lock_acquire+0x7c40/0x7c40 [ 524.865119][ T8929] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 524.870823][ T8929] ? do_raw_spin_unlock+0x11d/0x230 [ 524.876068][ T8929] ? _raw_spin_unlock+0x24/0x40 [ 524.880962][ T8929] ? do_wp_page+0xb8f/0x16b0 [ 524.885604][ T8929] handle_mm_fault+0x1b1b/0x3d40 [ 524.890572][ T8929] ? mt_find+0x157/0x830 [ 524.894880][ T8929] ? numa_migrate_prep+0x250/0x250 [ 524.900058][ T8929] ? lock_chain_count+0x20/0x20 [ 524.905038][ T8929] ? ktime_get+0x247/0x270 [ 524.909498][ T8929] ? lock_mm_and_find_vma+0xae/0x2f0 [ 524.914827][ T8929] do_user_addr_fault+0x58e/0xb20 [ 524.919913][ T8929] exc_page_fault+0x60/0x100 [ 524.924558][ T8929] asm_exc_page_fault+0x22/0x30 [ 524.929456][ T8929] RIP: 0033:0x7fec848517f6 [ 524.933910][ T8929] Code: 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b <41> 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 [ 524.953567][ T8929] RSP: 002b:00007ffc5ab08018 EFLAGS: 00010293 [ 524.959675][ T8929] RAX: 00000000814d69cd RBX: ffffffff814d69cd RCX: ffffffff83d0a9cd [ 524.967727][ T8929] RDX: 00000000000009cd RSI: ffffffff814d69cd RDI: 000000000000001b [ 524.975787][ T8929] RBP: 0000000000000000 R08: 00007fec84c10000 R09: 00007fec84c12000 [ 524.983806][ T8929] R10: 00000000814d69d1 R11: 000000000000001b R12: 00007fec84c26218 [ 524.991832][ T8929] R13: 0000000000000000 R14: ffffffff814d60a7 R15: 00007fec85755720 [ 524.999854][ T8929] ? __x64_sys_clone+0x97/0x220 [ 525.004775][ T8929] ? walk_process_tree+0xcd/0x1d0 [ 525.009841][ T8929] ? cap_task_prctl+0x32d/0xc00 [ 525.014787][ T8929] ? walk_process_tree+0xcd/0x1d0 [ 525.019863][ T8929] [ 525.022963][ T8929] memory: usage 282396kB, limit 307200kB, failcnt 3058 [ 525.029879][ T8929] memory+swap: usage 287136kB, limit 9007199254740988kB, failcnt 0 [ 525.037860][ T8929] kmem: usage 2272kB, limit 9007199254740988kB, failcnt 0 [ 525.045056][ T8929] Memory cgroup stats for /syz5: [ 525.045275][ T8929] anon 557056 [ 525.045275][ T8929] file 284241920 [ 525.045275][ T8929] kernel 2326528 [ 525.045275][ T8929] kernel_stack 262144 [ 525.045275][ T8929] pagetables 368640 [ 525.045275][ T8929] sec_pagetables 0 [ 525.045275][ T8929] percpu 7104 [ 525.045275][ T8929] sock 0 [ 525.045275][ T8929] vmalloc 0 [ 525.045275][ T8929] shmem 284241920 [ 525.045275][ T8929] zswap 0 [ 525.045275][ T8929] zswapped 0 [ 525.045275][ T8929] file_mapped 0 [ 525.045275][ T8929] file_dirty 0 [ 525.045275][ T8929] file_writeback 0 [ 525.045275][ T8929] swapcached 12283904 [ 525.045275][ T8929] anon_thp 0 [ 525.045275][ T8929] file_thp 0 [ 525.045275][ T8929] shmem_thp 0 [ 525.045275][ T8929] inactive_anon 130764800 [ 525.045275][ T8929] active_anon 154157056 [ 525.045275][ T8929] inactive_file 0 [ 525.045275][ T8929] active_file 0 [ 525.045275][ T8929] unevictable 0 [ 525.045275][ T8929] slab_reclaimable 914184 [ 525.045275][ T8929] slab_unreclaimable 703096 [ 525.139405][ T8929] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1204,pid=8940,uid=0 [ 525.154559][ T8929] Memory cgroup out of memory: Killed process 8940 (syz.5.1204) total-vm:102508kB, anon-rss:1488kB, file-rss:33024kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 525.430410][ T8943] loop3: detected capacity change from 0 to 1024 [ 525.505748][ T8943] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 525.601007][ T8943] EXT4-fs (loop3): barriers disabled [ 525.606496][ T8943] JBD2: no valid journal superblock found [ 525.742101][ T8943] EXT4-fs (loop3): error loading journal [ 527.963471][ T8969] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1216'. [ 528.026042][ T8973] loop5: detected capacity change from 0 to 128 [ 532.593954][ T9002] loop6: detected capacity change from 0 to 1024 [ 532.643025][ T9002] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 532.675281][ T9002] EXT4-fs (loop6): barriers disabled [ 532.704031][ T9002] JBD2: no valid journal superblock found [ 532.745451][ T9002] EXT4-fs (loop6): error loading journal [ 534.951286][ T9021] FAULT_INJECTION: forcing a failure. [ 534.951286][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 535.018222][ T9021] CPU: 0 PID: 9021 Comm: syz.5.1231 Not tainted syzkaller #0 [ 535.025699][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.035806][ T9021] Call Trace: [ 535.039127][ T9021] [ 535.042103][ T9021] dump_stack_lvl+0x188/0x24e [ 535.046861][ T9021] ? show_regs_print_info+0x12/0x12 [ 535.052133][ T9021] ? load_image+0x410/0x410 [ 535.056751][ T9021] ? __might_sleep+0xd0/0xd0 [ 535.061403][ T9021] ? __lock_acquire+0x7c40/0x7c40 [ 535.066501][ T9021] should_fail_ex+0x390/0x4c0 [ 535.071266][ T9021] should_failslab+0x5/0x20 [ 535.075811][ T9021] slab_pre_alloc_hook+0x59/0x300 [ 535.080939][ T9021] kmem_cache_alloc_lru+0x49/0x2e0 [ 535.086098][ T9021] ? __d_alloc+0x2e/0x6e0 [ 535.090472][ T9021] __d_alloc+0x2e/0x6e0 [ 535.094718][ T9021] ? d_alloc_pseudo+0xe/0x70 [ 535.099368][ T9021] d_alloc_pseudo+0x19/0x70 [ 535.103930][ T9021] alloc_file_pseudo+0xe0/0x200 [ 535.108833][ T9021] ? alloc_empty_file_noaccount+0x80/0x80 [ 535.114642][ T9021] ? alloc_fd+0x590/0x640 [ 535.119037][ T9021] sock_alloc_file+0xb3/0x240 [ 535.123775][ T9021] __sys_socket+0x12d/0x190 [ 535.128349][ T9021] __x64_sys_socket+0x76/0x80 [ 535.133079][ T9021] do_syscall_64+0x4c/0xa0 [ 535.137552][ T9021] ? clear_bhb_loop+0x60/0xb0 [ 535.142280][ T9021] ? clear_bhb_loop+0x60/0xb0 [ 535.147013][ T9021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.152949][ T9021] RIP: 0033:0x7fec8499e159 [ 535.157404][ T9021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.177058][ T9021] RSP: 002b:00007fec85808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 535.185524][ T9021] RAX: ffffffffffffffda RBX: 00007fec84c25fa0 RCX: 00007fec8499e159 [ 535.193552][ T9021] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000040000000015 [ 535.201580][ T9021] RBP: 00007fec84a3503b R08: 0000000000000000 R09: 0000000000000000 [ 535.209610][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.217628][ T9021] R13: 00007fec84c26038 R14: 00007fec84c25fa0 R15: 00007ffc5ab07fd8 [ 535.225656][ T9021] [ 538.996365][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 539.213352][ T7] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 539.250642][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.282363][ T7] usb 5-1: Product: syz [ 539.306293][ T7] usb 5-1: Manufacturer: syz [ 539.311101][ T7] usb 5-1: SerialNumber: syz [ 539.684702][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 539.722881][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 539.766799][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 539.809023][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 539.856627][ T7] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 539.902903][ T7] lan78xx: probe of 5-1:1.0 failed with error -71 [ 539.955290][ T7] usb 5-1: USB disconnect, device number 2 [ 543.516555][ T9099] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 546.771810][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1277'. [ 546.868990][ T9152] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 549.597706][ T9173] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 549.658725][ T9183] program syz.5.1289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.377634][ T9220] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 558.056202][ T26] audit: type=1326 audit(1789154129.953:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.5.1319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 558.156326][ T26] audit: type=1326 audit(1789154130.003:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.5.1319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 558.304643][ T26] audit: type=1326 audit(1789154130.003:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.5.1319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 558.456171][ T26] audit: type=1326 audit(1789154130.003:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.5.1319" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec8499e159 code=0x7ffc0000 [ 558.711817][ T9267] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 561.659069][ T9305] loop3: detected capacity change from 0 to 256 [ 561.727938][ T9308] loop5: detected capacity change from 0 to 512 [ 561.790902][ T9308] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 561.896250][ T9308] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 561.905192][ T9308] System zones: 0-1, 15-15, 18-18, 34-34 [ 561.980058][ T9308] EXT4-fs (loop5): orphan cleanup on readonly fs [ 562.007516][ T9308] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792). [ 562.071724][ T9308] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 562.113166][ T9308] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 562.151217][ T9308] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.1335: bad orphan inode 16 [ 562.197849][ T9308] ext4_test_bit(bit=15, block=18) = 1 [ 562.203313][ T9308] is_bad_inode(inode)=0 [ 562.228862][ T9308] NEXT_ORPHAN(inode)=0 [ 562.233016][ T9308] max_ino=32 [ 562.406553][ T9308] i_nlink=2 [ 562.409841][ T9308] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 562.577560][ T9308] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 562.633067][ T9308] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 563.002854][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.016035][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.357360][ T5906] EXT4-fs (loop5): unmounting filesystem. [ 564.369161][ T9338] loop2: detected capacity change from 0 to 128 [ 564.511468][ T9338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 564.531266][ T9338] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 564.716173][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 564.913983][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.960014][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.000542][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.046269][ T27] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.075817][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.113219][ T27] usb 6-1: config 0 descriptor?? [ 565.191150][ T9346] Unsupported ieee802154 address type: 0 [ 565.235665][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 565.246890][ T9346] syz.4.1349 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 567.031028][ T9354] syz.3.1351 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 567.041061][ T9354] CPU: 1 PID: 9354 Comm: syz.3.1351 Not tainted syzkaller #0 [ 567.048472][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.058552][ T9354] Call Trace: [ 567.061863][ T9354] [ 567.064835][ T9354] dump_stack_lvl+0x188/0x24e [ 567.069553][ T9354] ? ___ratelimit+0x14e/0x610 [ 567.074268][ T9354] ? show_regs_print_info+0x12/0x12 [ 567.079507][ T9354] ? load_image+0x410/0x410 [ 567.084040][ T9354] ? ___ratelimit+0x474/0x610 [ 567.088757][ T9354] ? radix_tree_cpu_dead+0x160/0x160 [ 567.094112][ T9354] dump_header+0xd8/0x820 [ 567.098486][ T9354] oom_kill_process+0x361/0x550 [ 567.103384][ T9354] out_of_memory+0xe25/0x1220 [ 567.108096][ T9354] ? print_unlock_imbalance_bug+0x160/0x160 [ 567.114034][ T9354] ? mutex_lock_nested+0x10/0x10 [ 567.119004][ T9354] ? unregister_oom_notifier+0x20/0x20 [ 567.124502][ T9354] mem_cgroup_out_of_memory+0x2c0/0x390 [ 567.130095][ T9354] ? mem_cgroup_oom_trylock+0x210/0x210 [ 567.135681][ T9354] ? do_raw_spin_unlock+0x11d/0x230 [ 567.140912][ T9354] try_charge_memcg+0xc9d/0x17c0 [ 567.145912][ T9354] ? percpu_ref_put+0x180/0x180 [ 567.150818][ T9354] ? get_mem_cgroup_from_mm+0x34/0x290 [ 567.156327][ T9354] charge_memcg+0x117/0x3b0 [ 567.160872][ T9354] ? __mem_cgroup_charge+0x80/0x80 [ 567.166018][ T9354] ? get_mem_cgroup_from_mm+0x34/0x290 [ 567.171516][ T9354] ? get_mem_cgroup_from_mm+0x34/0x290 [ 567.177037][ T9354] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 567.182622][ T9354] __mem_cgroup_charge+0x21/0x80 [ 567.187602][ T9354] shmem_add_to_page_cache+0x8d7/0x1c90 [ 567.193180][ T9354] ? __filemap_get_folio+0x10f/0xde0 [ 567.198511][ T9354] ? __filemap_get_folio+0x10f/0xde0 [ 567.203833][ T9354] ? put_page+0x270/0x270 [ 567.208211][ T9354] ? mark_lock+0x94/0x320 [ 567.212595][ T9354] shmem_get_folio_gfp+0x1663/0x35e0 [ 567.217952][ T9354] shmem_write_begin+0xee/0x3f0 [ 567.222863][ T9354] generic_perform_write+0x2fa/0x5c0 [ 567.228247][ T9354] ? generic_file_direct_write+0x330/0x330 [ 567.234088][ T9354] ? __file_remove_privs+0x5f0/0x5f0 [ 567.239433][ T9354] ? rwsem_write_trylock+0x135/0x1c0 [ 567.244754][ T9354] ? clear_nonspinnable+0x60/0x60 [ 567.249813][ T9354] ? generic_write_checks_count+0x363/0x440 [ 567.255744][ T9354] __generic_file_write_iter+0x148/0x2a0 [ 567.261419][ T9354] generic_file_write_iter+0xab/0x2e0 [ 567.266855][ T9354] __kernel_write_iter+0x298/0x690 [ 567.272009][ T9354] ? vfs_read+0x960/0x960 [ 567.276382][ T9354] ? _raw_spin_unlock+0x24/0x40 [ 567.281290][ T9354] ? generic_file_llseek_size+0x344/0x390 [ 567.287052][ T9354] ? iov_iter_bvec+0x4a/0x1f0 [ 567.291765][ T9354] dump_user_range+0x40a/0x840 [ 567.296600][ T9354] ? dump_skip+0x40/0x40 [ 567.300871][ T9354] ? dump_emit+0x74/0xe0 [ 567.305166][ T9354] ? __dump_emit+0x2d8/0x310 [ 567.309798][ T9354] ? dump_emit+0xa2/0xe0 [ 567.314077][ T9354] ? elf_core_dump+0x2aa9/0x3630 [ 567.319058][ T9354] elf_core_dump+0x30ca/0x3630 [ 567.323876][ T9354] ? load_elf_binary+0x2820/0x2820 [ 567.329029][ T9354] ? dump_vma_snapshot+0xaea/0xe40 [ 567.334181][ T9354] ? verify_lock_unused+0x140/0x140 [ 567.339429][ T9354] ? __lock_acquire+0x7c40/0x7c40 [ 567.344490][ T9354] ? mas_next_entry+0xe03/0xe90 [ 567.349415][ T9354] ? rcu_read_lock_any_held+0xb0/0x130 [ 567.354908][ T9354] ? 0xffffffffff600000 [ 567.359121][ T9354] do_coredump+0x16c1/0x2480 [ 567.363822][ T9354] ? nfs_stat_to_errno+0x170/0x170 [ 567.369034][ T9354] ? preempt_schedule_thunk+0x16/0x18 [ 567.374486][ T9354] get_signal+0x1093/0x1340 [ 567.379075][ T9354] arch_do_signal_or_restart+0xc4/0x1310 [ 567.384759][ T9354] ? preempt_schedule_thunk+0x16/0x18 [ 567.390231][ T9354] ? _raw_spin_unlock+0x40/0x40 [ 567.395139][ T9354] ? __send_signal_locked+0xb38/0xde0 [ 567.400599][ T9354] ? get_sigframe_size+0x10/0x10 [ 567.405570][ T9354] ? force_sig_info_to_task+0x318/0x3c0 [ 567.411159][ T9354] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 567.417181][ T9354] ? exit_to_user_mode_loop+0x3b/0x110 [ 567.422682][ T9354] exit_to_user_mode_loop+0x70/0x110 [ 567.428013][ T9354] exit_to_user_mode_prepare+0xee/0x180 [ 567.433594][ T9354] irqentry_exit_to_user_mode+0x5/0x30 [ 567.439094][ T9354] exc_general_protection+0x164/0x1f0 [ 567.444630][ T9354] ? exc_page_fault+0x88/0x100 [ 567.449444][ T9354] asm_exc_general_protection+0x22/0x30 [ 567.455041][ T9354] RIP: 0033:0x7f6e1af9e161 [ 567.459491][ T9354] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 567.479132][ T9354] RSP: 002b:0000200000000420 EFLAGS: 00010217 [ 567.485226][ T9354] RAX: 0000000000000000 RBX: 00007f6e1b226090 RCX: 00007f6e1af9e159 [ 567.493235][ T9354] RDX: 0000200000000440 RSI: 0000200000000420 RDI: 0000000080000080 [ 567.501256][ T9354] RBP: 00007f6e1b03503b R08: 00002000000004c0 R09: 00002000000004c0 [ 567.509269][ T9354] R10: 0000200000000480 R11: 0000000000000202 R12: 0000000000000000 [ 567.517287][ T9354] R13: 00007f6e1b226128 R14: 00007f6e1b226090 R15: 00007fff0692d7f8 [ 567.525309][ T9354] [ 567.528457][ T9354] memory: usage 307196kB, limit 307200kB, failcnt 13563 [ 567.535486][ T9354] memory+swap: usage 336520kB, limit 9007199254740988kB, failcnt 0 [ 567.543485][ T9354] kmem: usage 2620kB, limit 9007199254740988kB, failcnt 0 [ 567.550694][ T9354] Memory cgroup stats for /syz3: [ 567.550897][ T9354] anon 528384 [ 567.550897][ T9354] file 311357440 [ 567.550897][ T9354] kernel 2678784 [ 567.550897][ T9354] kernel_stack 131072 [ 567.550897][ T9354] pagetables 716800 [ 567.550897][ T9354] sec_pagetables 0 [ 567.550897][ T9354] percpu 8288 [ 567.550897][ T9354] sock 0 [ 567.550897][ T9354] vmalloc 0 [ 567.550897][ T9354] shmem 311308288 [ 567.550897][ T9354] zswap 0 [ 567.550897][ T9354] zswapped 0 [ 567.550897][ T9354] file_mapped 108175360 [ 567.550897][ T9354] file_dirty 49152 [ 567.550897][ T9354] file_writeback 0 [ 567.550897][ T9354] swapcached 90439680 [ 567.550897][ T9354] anon_thp 0 [ 567.550897][ T9354] file_thp 0 [ 567.550897][ T9354] shmem_thp 0 [ 567.550897][ T9354] inactive_anon 306724864 [ 567.550897][ T9354] active_anon 5107712 [ 567.550897][ T9354] inactive_file 0 [ 567.550897][ T9354] active_file 49152 [ 567.550897][ T9354] unevictable 0 [ 567.550897][ T9354] slab_reclaimable 1037656 [ 567.550897][ T9354] slab_unreclaimable 695216 [ 567.646375][ T9354] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1201,pid=8919,uid=0 [ 567.661567][ T9354] Memory cgroup out of memory: Killed process 8919 (syz.3.1201) total-vm:151416kB, anon-rss:0kB, file-rss:0kB, shmem-rss:105512kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 568.023116][ T27] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 568.255939][ T27] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 569.696559][ T29] oom_reaper: reaped process 8919 (syz.3.1201), now anon-rss:0kB, file-rss:0kB, shmem-rss:100248kB [ 570.392729][ T27] usb 6-1: USB disconnect, device number 2 [ 578.406383][ T9354] syz.3.1351 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 578.416412][ T9354] CPU: 1 PID: 9354 Comm: syz.3.1351 Not tainted syzkaller #0 [ 578.423829][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.433916][ T9354] Call Trace: [ 578.437223][ T9354] [ 578.440178][ T9354] dump_stack_lvl+0x188/0x24e [ 578.444897][ T9354] ? ___ratelimit+0x14e/0x610 [ 578.449606][ T9354] ? show_regs_print_info+0x12/0x12 [ 578.454838][ T9354] ? load_image+0x410/0x410 [ 578.459370][ T9354] ? ___ratelimit+0x474/0x610 [ 578.464082][ T9354] ? radix_tree_cpu_dead+0x160/0x160 [ 578.469407][ T9354] dump_header+0xd8/0x820 [ 578.473781][ T9354] oom_kill_process+0x361/0x550 [ 578.478676][ T9354] out_of_memory+0xe25/0x1220 [ 578.483413][ T9354] ? print_unlock_imbalance_bug+0x160/0x160 [ 578.489351][ T9354] ? mutex_lock_nested+0x10/0x10 [ 578.494341][ T9354] ? unregister_oom_notifier+0x20/0x20 [ 578.499862][ T9354] mem_cgroup_out_of_memory+0x2c0/0x390 [ 578.505445][ T9354] ? mem_cgroup_oom_trylock+0x210/0x210 [ 578.511059][ T9354] ? do_raw_spin_unlock+0x11d/0x230 [ 578.516311][ T9354] try_charge_memcg+0xc9d/0x17c0 [ 578.521388][ T9354] ? percpu_ref_put+0x180/0x180 [ 578.526307][ T9354] ? get_mem_cgroup_from_mm+0x34/0x290 [ 578.531908][ T9354] charge_memcg+0x117/0x3b0 [ 578.536452][ T9354] ? __mem_cgroup_charge+0x80/0x80 [ 578.541609][ T9354] ? get_mem_cgroup_from_mm+0x34/0x290 [ 578.547105][ T9354] ? get_mem_cgroup_from_mm+0x34/0x290 [ 578.552597][ T9354] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 578.558186][ T9354] __mem_cgroup_charge+0x21/0x80 [ 578.563163][ T9354] shmem_add_to_page_cache+0x8d7/0x1c90 [ 578.568753][ T9354] ? __filemap_get_folio+0x10f/0xde0 [ 578.574081][ T9354] ? __filemap_get_folio+0x10f/0xde0 [ 578.579409][ T9354] ? put_page+0x270/0x270 [ 578.583781][ T9354] ? mark_lock+0x94/0x320 [ 578.588249][ T9354] shmem_get_folio_gfp+0x1663/0x35e0 [ 578.593644][ T9354] shmem_write_begin+0xee/0x3f0 [ 578.598555][ T9354] generic_perform_write+0x2fa/0x5c0 [ 578.603906][ T9354] ? generic_file_direct_write+0x330/0x330 [ 578.609751][ T9354] ? __file_remove_privs+0x5f0/0x5f0 [ 578.615075][ T9354] ? rwsem_write_trylock+0x135/0x1c0 [ 578.620399][ T9354] ? clear_nonspinnable+0x60/0x60 [ 578.625490][ T9354] ? generic_write_checks_count+0x363/0x440 [ 578.631441][ T9354] __generic_file_write_iter+0x148/0x2a0 [ 578.637121][ T9354] generic_file_write_iter+0xab/0x2e0 [ 578.642538][ T9354] __kernel_write_iter+0x298/0x690 [ 578.647692][ T9354] ? vfs_read+0x960/0x960 [ 578.652069][ T9354] ? _raw_spin_unlock+0x24/0x40 [ 578.656968][ T9354] ? generic_file_llseek_size+0x344/0x390 [ 578.662751][ T9354] ? iov_iter_bvec+0x4a/0x1f0 [ 578.667475][ T9354] dump_user_range+0x40a/0x840 [ 578.672313][ T9354] ? dump_skip+0x40/0x40 [ 578.676592][ T9354] ? dump_emit+0x74/0xe0 [ 578.680901][ T9354] ? __dump_emit+0x2d8/0x310 [ 578.685529][ T9354] ? dump_emit+0xa2/0xe0 [ 578.689806][ T9354] ? elf_core_dump+0x2aa9/0x3630 [ 578.694783][ T9354] elf_core_dump+0x30ca/0x3630 [ 578.699612][ T9354] ? load_elf_binary+0x2820/0x2820 [ 578.704769][ T9354] ? dump_vma_snapshot+0xaea/0xe40 [ 578.709929][ T9354] ? verify_lock_unused+0x140/0x140 [ 578.715171][ T9354] ? __lock_acquire+0x7c40/0x7c40 [ 578.720241][ T9354] ? mas_next_entry+0xe03/0xe90 [ 578.725186][ T9354] ? rcu_read_lock_any_held+0xb0/0x130 [ 578.730688][ T9354] ? 0xffffffffff600000 [ 578.734887][ T9354] do_coredump+0x16c1/0x2480 [ 578.739542][ T9354] ? nfs_stat_to_errno+0x170/0x170 [ 578.744731][ T9354] ? preempt_schedule_thunk+0x16/0x18 [ 578.750145][ T9354] get_signal+0x1093/0x1340 [ 578.754730][ T9354] arch_do_signal_or_restart+0xc4/0x1310 [ 578.760398][ T9354] ? preempt_schedule_thunk+0x16/0x18 [ 578.765821][ T9354] ? _raw_spin_unlock+0x40/0x40 [ 578.770711][ T9354] ? __send_signal_locked+0xb38/0xde0 [ 578.776138][ T9354] ? get_sigframe_size+0x10/0x10 [ 578.781120][ T9354] ? force_sig_info_to_task+0x318/0x3c0 [ 578.786718][ T9354] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 578.792755][ T9354] ? exit_to_user_mode_loop+0x3b/0x110 [ 578.798281][ T9354] exit_to_user_mode_loop+0x70/0x110 [ 578.803611][ T9354] exit_to_user_mode_prepare+0xee/0x180 [ 578.809209][ T9354] irqentry_exit_to_user_mode+0x5/0x30 [ 578.814700][ T9354] exc_general_protection+0x164/0x1f0 [ 578.820116][ T9354] ? exc_page_fault+0x88/0x100 [ 578.824914][ T9354] asm_exc_general_protection+0x22/0x30 [ 578.830513][ T9354] RIP: 0033:0x7f6e1af9e161 [ 578.834958][ T9354] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 578.854597][ T9354] RSP: 002b:0000200000000420 EFLAGS: 00010217 [ 578.860700][ T9354] RAX: 0000000000000000 RBX: 00007f6e1b226090 RCX: 00007f6e1af9e159 [ 578.868719][ T9354] RDX: 0000200000000440 RSI: 0000200000000420 RDI: 0000000080000080 [ 578.876740][ T9354] RBP: 00007f6e1b03503b R08: 00002000000004c0 R09: 00002000000004c0 [ 578.884748][ T9354] R10: 0000200000000480 R11: 0000000000000202 R12: 0000000000000000 [ 578.892759][ T9354] R13: 00007f6e1b226128 R14: 00007f6e1b226090 R15: 00007fff0692d7f8 [ 578.900778][ T9354] [ 578.904892][ T9354] memory: usage 307200kB, limit 307200kB, failcnt 37651 [ 578.911937][ T9354] memory+swap: usage 336524kB, limit 9007199254740988kB, failcnt 0 [ 578.919891][ T9354] kmem: usage 2556kB, limit 9007199254740988kB, failcnt 0 [ 578.927068][ T9354] Memory cgroup stats for /syz3: [ 578.927258][ T9354] anon 536576 [ 578.927258][ T9354] file 311418880 [ 578.927258][ T9354] kernel 2617344 [ 578.927258][ T9354] kernel_stack 131072 [ 578.927258][ T9354] pagetables 716800 [ 578.927258][ T9354] sec_pagetables 0 [ 578.927258][ T9354] percpu 8288 [ 578.927258][ T9354] sock 0 [ 578.927258][ T9354] vmalloc 0 [ 578.927258][ T9354] shmem 311369728 [ 578.927258][ T9354] zswap 0 [ 578.927258][ T9354] zswapped 0 [ 578.927258][ T9354] file_mapped 64430080 [ 578.927258][ T9354] file_dirty 49152 [ 578.927258][ T9354] file_writeback 0 [ 578.927258][ T9354] swapcached 90439680 [ 578.927258][ T9354] anon_thp 0 [ 578.927258][ T9354] file_thp 0 [ 578.927258][ T9354] shmem_thp 0 [ 578.927258][ T9354] inactive_anon 139522048 [ 578.927258][ T9354] active_anon 172384256 [ 578.927258][ T9354] inactive_file 0 [ 578.927258][ T9354] active_file 49152 [ 578.927258][ T9354] unevictable 0 [ 578.927258][ T9354] slab_reclaimable 1003232 [ 578.927258][ T9354] slab_unreclaimable 666160 [ 579.023408][ T9354] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1351,pid=9352,uid=0 [ 579.038568][ T9354] Memory cgroup out of memory: Killed process 9352 (syz.3.1351) total-vm:102244kB, anon-rss:1428kB, file-rss:54484kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 580.052391][ T9370] fido_id[9370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 580.554725][ T9386] loop5: detected capacity change from 0 to 512 [ 580.626650][ T9386] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 580.819038][ T9386] EXT4-fs (loop5): 1 truncate cleaned up [ 580.824816][ T9386] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 581.091266][ T9394] loop6: detected capacity change from 0 to 128 [ 581.204070][ T5906] EXT4-fs (loop5): unmounting filesystem. [ 581.265064][ T9394] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 581.471059][ T9394] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 581.796296][ T14] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 582.016321][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 582.024186][ T14] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 582.049311][ T14] usb 6-1: config 0 has no interface number 0 [ 582.098607][ T14] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 582.117967][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.156204][ T14] usb 6-1: Product: syz [ 582.163644][ T14] usb 6-1: Manufacturer: syz [ 582.180806][ T14] usb 6-1: SerialNumber: syz [ 582.212359][ T14] usb 6-1: config 0 descriptor?? [ 582.334317][ T6566] EXT4-fs (loop6): unmounting filesystem. [ 582.437766][ T14] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 582.444406][ T14] usb 6-1: No valid video chain found. [ 582.655660][ T127] usb 6-1: USB disconnect, device number 3 [ 582.685849][ T9375] syz.4.1355 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 582.832712][ T9375] CPU: 0 PID: 9375 Comm: syz.4.1355 Not tainted syzkaller #0 [ 582.840203][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.850331][ T9375] Call Trace: [ 582.853679][ T9375] [ 582.856652][ T9375] dump_stack_lvl+0x188/0x24e [ 582.861391][ T9375] ? ___ratelimit+0x14e/0x610 [ 582.866116][ T9375] ? show_regs_print_info+0x12/0x12 [ 582.871372][ T9375] ? load_image+0x410/0x410 [ 582.875929][ T9375] ? ___ratelimit+0x474/0x610 [ 582.880663][ T9375] ? radix_tree_cpu_dead+0x160/0x160 [ 582.886007][ T9375] dump_header+0xd8/0x820 [ 582.890404][ T9375] oom_kill_process+0x361/0x550 [ 582.895326][ T9375] out_of_memory+0xe25/0x1220 [ 582.900068][ T9375] ? print_unlock_imbalance_bug+0x160/0x160 [ 582.906024][ T9375] ? mutex_lock_nested+0x10/0x10 [ 582.911046][ T9375] ? unregister_oom_notifier+0x20/0x20 [ 582.916572][ T9375] mem_cgroup_out_of_memory+0x2c0/0x390 [ 582.922184][ T9375] ? mem_cgroup_oom_trylock+0x210/0x210 [ 582.927847][ T9375] ? do_raw_spin_unlock+0x11d/0x230 [ 582.933156][ T9375] try_charge_memcg+0xc9d/0x17c0 [ 582.938194][ T9375] ? percpu_ref_put+0x180/0x180 [ 582.943128][ T9375] ? get_mem_cgroup_from_mm+0x34/0x290 [ 582.948693][ T9375] charge_memcg+0x117/0x3b0 [ 582.953273][ T9375] ? __mem_cgroup_charge+0x80/0x80 [ 582.958460][ T9375] ? get_mem_cgroup_from_mm+0x34/0x290 [ 582.963976][ T9375] ? get_mem_cgroup_from_mm+0x34/0x290 [ 582.969494][ T9375] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 582.975110][ T9375] __mem_cgroup_charge+0x21/0x80 [ 582.980113][ T9375] shmem_add_to_page_cache+0x8d7/0x1c90 [ 582.985732][ T9375] ? __filemap_get_folio+0x10f/0xde0 [ 582.991092][ T9375] ? __filemap_get_folio+0x10f/0xde0 [ 582.996445][ T9375] ? put_page+0x270/0x270 [ 583.000836][ T9375] ? _raw_spin_lock_irq+0xb7/0xf0 [ 583.005921][ T9375] ? _raw_spin_unlock_irq+0x1f/0x40 [ 583.011179][ T9375] ? lockdep_hardirqs_on+0x94/0x140 [ 583.016445][ T9375] shmem_get_folio_gfp+0x1663/0x35e0 [ 583.021827][ T9375] shmem_write_begin+0xee/0x3f0 [ 583.026742][ T9375] generic_perform_write+0x2fa/0x5c0 [ 583.032117][ T9375] ? generic_file_direct_write+0x330/0x330 [ 583.038003][ T9375] ? __file_remove_privs+0x5f0/0x5f0 [ 583.043355][ T9375] ? rwsem_write_trylock+0x135/0x1c0 [ 583.048704][ T9375] ? clear_nonspinnable+0x60/0x60 [ 583.053781][ T9375] ? generic_write_checks_count+0x363/0x440 [ 583.059737][ T9375] __generic_file_write_iter+0x148/0x2a0 [ 583.065447][ T9375] generic_file_write_iter+0xab/0x2e0 [ 583.070889][ T9375] vfs_write+0x482/0x9a0 [ 583.075212][ T9375] ? file_end_write+0x250/0x250 [ 583.080130][ T9375] ? __fget_files+0x3fc/0x460 [ 583.084899][ T9375] ? __fdget_pos+0x1d4/0x360 [ 583.089553][ T9375] ? ksys_write+0x70/0x260 [ 583.094027][ T9375] ksys_write+0x14d/0x260 [ 583.098424][ T9375] ? __ia32_sys_read+0x80/0x80 [ 583.103255][ T9375] ? lockdep_hardirqs_on+0x94/0x140 [ 583.108563][ T9375] do_syscall_64+0x4c/0xa0 [ 583.113044][ T9375] ? clear_bhb_loop+0x60/0xb0 [ 583.117781][ T9375] ? clear_bhb_loop+0x60/0xb0 [ 583.122532][ T9375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.128519][ T9375] RIP: 0033:0x7f7f1f75e98e [ 583.132986][ T9375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 583.152679][ T9375] RSP: 002b:00007f7f206fada8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 583.161182][ T9375] RAX: ffffffffffffffda RBX: 00007f7f206fb6c0 RCX: 00007f7f1f75e98e [ 583.169217][ T9375] RDX: 00000000013bd7ef RSI: 00007f7f155f7000 RDI: 0000000000000003 [ 583.177241][ T9375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.185269][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 583.193309][ T9375] R13: 00007f7f206faee0 R14: 00007f7f206faea0 R15: 00007f7f155f7000 [ 583.201355][ T9375] [ 583.786224][ T9375] memory: usage 307200kB, limit 307200kB, failcnt 20103 [ 583.793279][ T9375] memory+swap: usage 400884kB, limit 9007199254740988kB, failcnt 0 [ 583.872491][ T9375] kmem: usage 2572kB, limit 9007199254740988kB, failcnt 0 [ 583.913036][ T9375] Memory cgroup stats for /syz4: [ 583.913302][ T9375] anon 1990656 [ 583.913302][ T9375] file 309948416 [ 583.913302][ T9375] kernel 2633728 [ 583.913302][ T9375] kernel_stack 98304 [ 583.913302][ T9375] pagetables 503808 [ 583.913302][ T9375] sec_pagetables 0 [ 583.913302][ T9375] percpu 7104 [ 583.913302][ T9375] sock 0 [ 583.913302][ T9375] vmalloc 45056 [ 583.913302][ T9375] shmem 309899264 [ 583.913302][ T9375] zswap 0 [ 583.913302][ T9375] zswapped 0 [ 583.913302][ T9375] file_mapped 163528704 [ 583.913302][ T9375] file_dirty 49152 [ 583.913302][ T9375] file_writeback 0 [ 583.913302][ T9375] swapcached 95932416 [ 583.913302][ T9375] anon_thp 0 [ 583.913302][ T9375] file_thp 0 [ 583.913302][ T9375] shmem_thp 0 [ 583.913302][ T9375] inactive_anon 128548864 [ 583.913302][ T9375] active_anon 183341056 [ 583.913302][ T9375] inactive_file 0 [ 583.913302][ T9375] active_file 49152 [ 583.913302][ T9375] unevictable 0 [ 583.913302][ T9375] slab_reclaimable 1311664 [ 583.913302][ T9375] slab_unreclaimable 599776 [ 584.273031][ T9375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1147,pid=8721,uid=0 [ 584.326132][ T9375] Memory cgroup out of memory: Killed process 8721 (syz.4.1147) total-vm:151416kB, anon-rss:1696kB, file-rss:0kB, shmem-rss:130080kB, UID:0 pgtables:276kB oom_score_adj:1000 [ 585.006803][ T9415] printk: console [ttyS0] disabled Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.